WordPress.org

1. francisperron
   Member
   Posted 8 months ago #

   I just found early this week there was a user I didn't created, named Brad... and without any email/name/post and he was administrator. I never received any email notification about the creation of this user. And nobody is suppose to be able to register, since registration are close. I was on WP 3.1.2 when it arrived, since then I deleted him and upgrade to 3.2.1, and guess what... this morning Brad was back. I deleted him again.

   But I'll like to know why and how can I prevent him again.
   sorry for my english, I speak french.

2. esmi
   Theme Diva & Forum Moderator
   Posted 8 months ago #

   It's likely that your site was hacked. Please see the following resources and contact your hosts in case the hacker gained entry elsewhere on the server.
   http://codex.wordpress.org/FAQ_My_site_was_hacked
   http://wordpress.org/support/topic/268083#post-1065779
   http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
   http://ottopress.com/2009/hacked-wordpress-backdoors/

3. francisperron
   Member
   Posted 8 months ago #

   I think it was Cforms.
   I deleted it, I'll see if the user come back.

4. dukerone
   Member
   Posted 7 months ago #

   I had the same problem and the same guy. What is CForms?

   Thanks

5. francisperron
   Member
   Posted 7 months ago #

   Cforms is a contact form plugin, with too many options and some security issues. I stop using it, I prefer "contact form 7".
   I also install "WP-Activity" and "WP Security Scan" I also ban all the china ip range :)

6. dukerone
   Member
   Posted 7 months ago #

   Thanks for the update.

Reply

You must log in to post.