Title: Admin Access Restricted
Last modified: May 11, 2021

---

# Admin Access Restricted

 *  [OscarGuy](https://wordpress.org/support/users/oscarguy/)
 * (@oscarguy)
 * [5 years, 3 months ago](https://wordpress.org/support/topic/admin-access-restricted/)
 * A few months ago, I found that my site had been compromised. While I’ve worked
   to remove that and get everything back to normal, I’ve recently discovered that
   something else has been modified and I cannot figure out what it is.
 * I am the site’s Admin. When I login, I see no Updates icon on the dashboard and
   the WordPress installation update says a new version is available, but that I
   need to contact the site administrator to update. Clearly I am and I cannot. 
   I upgraded someone else I trust to Administrator and they also do not have access
   to these. Somehow the access has been stripped out or is still being hijacked
   and I cannot for the life of me figure out how to fix that.
 * Here are the variables from the wp_options table wp_user_options:
 * `a:10:{s:13:"administrator";a:2:{s:4:"name";s:13:"Administrator";s:12:"capabilities";
   a:88:{s:13:"switch_themes";b:1;s:11:"edit_themes";b:1;s:16:"activate_plugins";
   b:1;s:12:"edit_plugins";b:1;s:10:"edit_users";b:1;s:10:"edit_files";b:1;s:14:"
   manage_options";b:1;s:17:"moderate_comments";b:1;s:17:"manage_categories";b:1;
   s:12:"manage_links";b:1;s:12:"upload_files";b:1;s:6:"import";b:1;s:15:"unfiltered_html";
   b:1;s:10:"edit_posts";b:1;s:17:"edit_others_posts";b:1;s:20:"edit_published_posts";
   b:1;s:13:"publish_posts";b:1;s:10:"edit_pages";b:1;s:4:"read";b:1;s:8:"level_10";
   b:1;s:7:"level_9";b:1;s:7:"level_8";b:1;s:7:"level_7";b:1;s:7:"level_6";b:1;s:
   7:"level_5";b:1;s:7:"level_4";b:1;s:7:"level_3";b:1;s:7:"level_2";b:1;s:7:"level_1";
   b:1;s:7:"level_0";b:1;s:17:"edit_others_pages";b:1;s:20:"edit_published_pages";
   b:1;s:13:"publish_pages";b:1;s:12:"delete_pages";b:1;s:19:"delete_others_pages";
   b:1;s:22:"delete_published_pages";b:1;s:12:"delete_posts";b:1;s:19:"delete_others_posts";
   b:1;s:22:"delete_published_posts";b:1;s:20:"delete_private_posts";b:1;s:18:"edit_private_posts";
   b:1;s:18:"read_private_posts";b:1;s:20:"delete_private_pages";b:1;s:18:"edit_private_pages";
   b:1;s:18:"read_private_pages";b:1;s:12:"delete_users";b:1;s:12:"create_users";
   b:1;s:17:"unfiltered_upload";b:1;s:14:"edit_dashboard";b:1;s:14:"update_plugins";
   b:1;s:14:"delete_plugins";b:1;s:15:"install_plugins";b:1;s:13:"update_themes";
   b:1;s:14:"install_themes";b:1;s:12:"manage_polls";b:1;s:11:"update_core";b:1;
   s:10:"list_users";b:1;s:12:"remove_users";b:1;s:13:"promote_users";b:1;s:18:"
   edit_theme_options";b:1;s:13:"delete_themes";b:1;s:6:"export";b:1;s:10:"copy_posts";
   b:1;s:15:"manage_database";b:1;s:16:"edit_tribe_event";b:1;s:16:"read_tribe_event";
   b:1;s:18:"delete_tribe_event";b:1;s:31:"read_private_aggregator-records";b:1;
   s:23:"edit_aggregator-records";b:1;s:30:"edit_others_aggregator-records";b:1;
   s:31:"edit_private_aggregator-records";b:1;s:33:"edit_published_aggregator-records";
   b:1;s:25:"delete_aggregator-records";b:1;s:32:"delete_others_aggregator-records";
   b:1;s:33:"delete_private_aggregator-records";b:1;s:35:"delete_published_aggregator-
   records";b:1;s:26:"publish_aggregator-records";b:1;s:22:"tablepress_edit_tables";
   b:1;s:24:"tablepress_delete_tables";b:1;s:22:"tablepress_list_tables";b:1;s:21:"
   tablepress_add_tables";b:1;s:22:"tablepress_copy_tables";b:1;s:24:"tablepress_import_tables";
   b:1;s:24:"tablepress_export_tables";b:1;s:32:"tablepress_access_options_screen";
   b:1;s:30:"tablepress_access_about_screen";b:1;s:29:"tablepress_import_tables_wptr";
   b:1;s:23:"tablepress_edit_options";b:1;}}s:6:"editor";a:2:{s:4:"name";s:6:"Editor";
   s:12:"capabilities";a:57:{s:17:"moderate_comments";b:1;s:17:"manage_categories";
   b:1;s:12:"manage_links";b:1;s:12:"upload_files";b:1;s:15:"unfiltered_html";b:
   1;s:10:"edit_posts";b:1;s:17:"edit_others_posts";b:1;s:20:"edit_published_posts";
   b:1;s:13:"publish_posts";b:1;s:10:"edit_pages";b:1;s:4:"read";b:1;s:7:"level_7";
   b:1;s:7:"level_6";b:1;s:7:"level_5";b:1;s:7:"level_4";b:1;s:7:"level_3";b:1;s:
   7:"level_2";b:1;s:7:"level_1";b:1;s:7:"level_0";b:1;s:17:"edit_others_pages";
   b:1;s:20:"edit_published_pages";b:1;s:13:"publish_pages";b:1;s:12:"delete_pages";
   b:1;s:19:"delete_others_pages";b:1;s:22:"delete_published_pages";b:1;s:12:"delete_posts";
   b:1;s:19:"delete_others_posts";b:1;s:22:"delete_published_posts";b:1;s:20:"delete_private_posts";
   b:1;s:18:"edit_private_posts";b:1;s:18:"read_private_posts";b:1;s:20:"delete_private_pages";
   b:1;s:18:"edit_private_pages";b:1;s:18:"read_private_pages";b:1;s:10:"copy_posts";
   b:1;s:16:"edit_tribe_event";b:1;s:16:"read_tribe_event";b:1;s:18:"delete_tribe_event";
   b:1;s:31:"read_private_aggregator-records";b:1;s:23:"edit_aggregator-records";
   b:1;s:30:"edit_others_aggregator-records";b:1;s:31:"edit_private_aggregator-records";
   b:1;s:33:"edit_published_aggregator-records";b:1;s:25:"delete_aggregator-records";
   b:1;s:32:"delete_others_aggregator-records";b:1;s:33:"delete_private_aggregator-
   records";b:1;s:35:"delete_published_aggregator-records";b:1;s:26:"publish_aggregator-
   records";b:1;s:22:"tablepress_edit_tables";b:1;s:24:"tablepress_delete_tables";
   b:1;s:22:"tablepress_list_tables";b:1;s:21:"tablepress_add_tables";b:1;s:22:"
   tablepress_copy_tables";b:1;s:24:"tablepress_import_tables";b:1;s:24:"tablepress_export_tables";
   b:1;s:32:"tablepress_access_options_screen";b:1;s:30:"tablepress_access_about_screen";
   b:1;}}s:6:"author";a:2:{s:4:"name";s:6:"Author";s:12:"capabilities";a:28:{s:12:"
   upload_files";b:1;s:10:"edit_posts";b:1;s:20:"edit_published_posts";b:1;s:13:"
   publish_posts";b:1;s:4:"read";b:1;s:7:"level_2";b:1;s:7:"level_1";b:1;s:7:"level_0";
   b:1;s:12:"delete_posts";b:1;s:22:"delete_published_posts";b:1;s:10:"copy_posts";
   b:1;s:16:"edit_tribe_event";b:1;s:16:"read_tribe_event";b:1;s:18:"delete_tribe_event";
   b:1;s:23:"edit_aggregator-records";b:1;s:33:"edit_published_aggregator-records";
   b:1;s:25:"delete_aggregator-records";b:1;s:35:"delete_published_aggregator-records";
   b:1;s:26:"publish_aggregator-records";b:1;s:22:"tablepress_edit_tables";b:1;s:
   24:"tablepress_delete_tables";b:1;s:22:"tablepress_list_tables";b:1;s:21:"tablepress_add_tables";
   b:1;s:22:"tablepress_copy_tables";b:1;s:24:"tablepress_import_tables";b:1;s:24:"
   tablepress_export_tables";b:1;s:32:"tablepress_access_options_screen";b:1;s:30:"
   tablepress_access_about_screen";b:1;}}s:11:"contributor";a:2:{s:4:"name";s:11:"
   Contributor";s:12:"capabilities";a:11:{s:10:"edit_posts";b:1;s:4:"read";b:1;s:
   7:"level_1";b:1;s:7:"level_0";b:1;s:12:"delete_posts";b:1;s:10:"copy_posts";b:
   1;s:16:"edit_tribe_event";b:1;s:16:"read_tribe_event";b:1;s:18:"delete_tribe_event";
   b:1;s:23:"edit_aggregator-records";b:1;s:25:"delete_aggregator-records";b:1;}}
   s:10:"subscriber";a:2:{s:4:"name";s:10:"Subscriber";s:12:"capabilities";a:3:{
   s:4:"read";b:1;s:7:"level_0";b:1;s:16:"read_tribe_event";b:1;}}s:13:"bbp_keymaster";
   a:2:{s:4:"name";s:9:"Keymaster";s:12:"capabilities";a:0:{}}s:13:"bbp_spectator";
   a:2:{s:4:"name";s:9:"Spectator";s:12:"capabilities";a:0:{}}s:11:"bbp_blocked";
   a:2:{s:4:"name";s:7:"Blocked";s:12:"capabilities";a:0:{}}s:13:"bbp_moderator";
   a:2:{s:4:"name";s:9:"Moderator";s:12:"capabilities";a:0:{}}s:15:"bbp_participant";
   a:2:{s:4:"name";s:11:"Participant";s:12:"capabilities";a:0:{}}}`
 * I have compared this to other installations I have for other sites and it looks
   exactly the same for the Administrator role. Does anyone have any idea of where
   I may not be looking or where I might need to fix something?

Viewing 1 replies (of 1 total)

 *  Moderator [t-p](https://wordpress.org/support/users/t-p/)
 * (@t-p)
 * [5 years, 3 months ago](https://wordpress.org/support/topic/admin-access-restricted/#post-14426174)
 * > I’ve recently discovered that something else has been modified and I cannot
   > figure out what it is.
 * Carefully follow [this guide](https://wordpress.org/support/article/faq-my-site-was-hacked/).
 * When you’re done, you may want to implement some (if not all) of [the recommended security measures](https://wordpress.org/support/article/hardening-wordpress/)
   and [start backing up your site](https://wordpress.org/support/article/wordpress-backups/).
 * More useful sources:
    – [http://ottopress.com/2009/hacked-wordpress-backdoors/](http://ottopress.com/2009/hacked-wordpress-backdoors/)–
   [https://www.wpbeginner.com/wp-tutorials/how-to-find-a-backdoor-in-a-hacked-wordpress-site-and-fix-it/](https://www.wpbeginner.com/wp-tutorials/how-to-find-a-backdoor-in-a-hacked-wordpress-site-and-fix-it/)–
   [https://www.wpbeginner.com/plugins/how-to-scan-your-wordpress-site-for-potentially-malicious-code/](https://www.wpbeginner.com/plugins/how-to-scan-your-wordpress-site-for-potentially-malicious-code/)–
   Install the plugin [Wordfence plugin](https://wordpress.org/plugins/wordfence)
   and do full scan of your site. – You can also use another scanner: [https://wordpress.org/plugins/search/malware+database](https://wordpress.org/plugins/search/malware+database)––
   Also, Scan for “some string” using [https://wordpress.org/plugins/string-locator/](https://wordpress.org/plugins/string-locator/)
 * If you’re unable to clean your site(s) successfully, there are reputable organizations
   that can clean your sites for you. Off hand, couple of names that come to mind
   are Sucuri and Wordfence.

Viewing 1 replies (of 1 total)

The topic ‘Admin Access Restricted’ is closed to new replies.

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 1 reply
 * 2 participants
 * Last reply from: [t-p](https://wordpress.org/support/users/t-p/)
 * Last activity: [5 years, 3 months ago](https://wordpress.org/support/topic/admin-access-restricted/#post-14426174)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics