WordPress.org

Ready to get started?Download WordPress

Forums

"Subscriber role " user adding itself into admin (5 posts)

  1. freshwaters
    Member
    Posted 11 months ago #

    Hi,

    I have the following issue:
    Somebody or a hack is adding a subscriber role by itself into my admin panel and I don't know how he does that. He is not subscribing for the article updates but as a "subscriber" to the admin panel.

    Normally, only admins are supposed to be able to perform the task of adding new users to admin panel in WP disregarding the role they give to these users.

    Can someone tell me if there is a security breach in WP that hackers can exploit to add new admin users.
    The name of the user is oliniga@hotmail.com and don't have avatar picture.
    I have changed my admin password already twice. but the guy is still coming...

    Has anyone had this issue before? what can I do to prevent this to happen?

    Thanks in advance for your help.

  2. Robin W
    Member
    Posted 11 months ago #

    suggest you start by seeing if you site's been hacked.

    Put it's URL into here

    http://sitecheck.sucuri.net/scanner/

  3. freshwaters
    Member
    Posted 11 months ago #

    Hi Robin,

    The analysis returned a green light meaning I guess that my website has not been hacked. but the "dude" keeps on coming back each time I delete his account.

    I don't know what to do. should I get in touch with my hosting services?

    Cheers.

  4. Robin W
    Member
    Posted 11 months ago #

    yes contact your hosting services next for advice

  5. Caramboo
    Member
    Posted 11 months ago #

    It looks like you have user registration turned on. Someone, probably a bot, is registering on your site and is granted the default role of subscriber. If you don't want additional users on your site, disable user registration.

Reply

You must log in to post.

About this Topic