Unauthorized new users being created

  • omigosh

    (@omigosh)


    7 years, 3 months ago

    recently getting emails saying a new user has been registered. They ahve different usernames and usually are added as administrators. I can’t find any maliscious content but I sure dont’ want them hanging around. Any way to completely disabled new user registrations until I get this sorted?

    Thanks

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)
  • Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    7 years, 3 months ago

    You’ve been hacked.

    Get a fresh cup of coffee, take a deep breath and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

    If you’re unable to clean your site(s) successfully, there are reputable organizations that can clean your sites for you. Sucuri and Wordfence are a couple.

    Thread Starter omigosh

    (@omigosh)

    7 years, 3 months ago

    Found the problem! I hadn’t unchecked the Anyone Can Register box in Settings. Should have thought of that, but you might make a mention of that in your article. I’d installed security protection, disabled plugins and read other forum posts on this issue but nobody said anything about that.

    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    7 years, 3 months ago

    >> usually are added as administrators <<

    That’s a huge red flag. Self-registered users should be “subscriber”, so I’m still leaning towards a hack.

    Thread Starter omigosh

    (@omigosh)

    7 years, 3 months ago

    I think I’d inadvertantly set the default role to Administrator. Anyway, I’ll know if I get more users. Thanks for your quick response to this.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Unauthorized new users being created’ is closed to new replies.