Any password works for admin? (3 posts)

  1. bepe62
    Posted 3 years ago #

    We are hosting a number of WordPress sites for a customer - typically 3.3.1

    We have a problem whereby when logging in to wp-admin any password will work. They have tried upgrading one of the instances to 3.4.1 but same problem exists.

    Any ideas on how to fix this? We have locked things down in the interim.

    Any thoughts welcome!

  2. digitalscrapper
    Posted 2 years ago #

    We are trying to track down the back door for some pharma attacks and discovered the same issue on two of our admin accounts. Any password will work to get in, and that's how they're accessing the posts to insert spam links.

    Have you come up with any answers on how this hack works?


  3. WPyogi
    Forum Moderator
    Posted 2 years ago #

Topic Closed

This topic has been closed to new replies.

About this Topic