Hello,
I am a web designer for a WP-powered website. We have a problem with the main admin username and password resetting itself so we can't log into the dashboard. The password reset function doesn't work either, because the username is being changed too. I don't know if this is a virus or some sort of malware or what -- we were in fact hacked a few months ago and I had to re-install everything. These last few times though, the site is still fine publicly but we can't log in to edit anything. I have to go in through phpMyAdmin and manually change the admin user and password every time. The user gets changed to the generic "admin" and I have no idea what the password becomes (since it's encrypted).
Is there some fix for this, and/or a security plug-in you would recommend? All of our plug-ins and WP itself are totally up to date.
Please advise.
Thank you in advance for any help!