• This past weekend I had a big attack on my site, I had over 15,000 users/ sites created on my WP multisite.

    I did install couple of anti-spam plugins and I have latest version of WP.

    After that attack I have disabled registration and I even removed the wp-signup.php file, and I still get registrations. How is this possible without wp-signup.php file? What am I missing? How can I stop the SPAM registrations?

Viewing 2 replies - 1 through 2 (of 2 total)
  • Thread Starter calisun

    (@calisun)

    Nobody knows??
    To me it looks like wordpress has a major security issue.
    Does anybody know how I can stop this Chinese-bot onslaught.

    Moderator Ipstenu (Mika Epstein)

    (@ipstenu)

    🏳️‍🌈 Advisor and Activist

    I even removed the wp-signup.php file, and I still get registrations.

    Sounds like a plugin then.

    What ones have you installed?

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘How are they registering??’ is closed to new replies.