• Resolved Alex Knight

    (@alexkwatson)


    We have been getting a critical issue appear on many of our WordPress sites stating:

    An admin user with the username XXXXX was created outside of WordPress. It’s possible a plugin could have created the account, but if you do not recognize the user, we suggest you remove it.

    The username is always 6 random alphanumeric characters, and the account has no email address. The user registered date is 0000-00-00 00:00:00 and they make no attempt to actually log in.

    We are wondering if this is something to worry about? We can’t work out if it’s a plugin doing it. Audit log plugins don’t mention it as even having happened.

    Thanks!

    Alex

Viewing 2 replies - 1 through 2 (of 2 total)
Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘An admin user with the username XXXXXX was created outside of WordPress’ is closed to new replies.