Support » Plugin: Wordfence Security - Firewall & Malware Scan » Email Notification says “username” who has admin access – but shouldn’t

  • Resolved ma3ry

    (@ma3ry)


    I have a membership multisite at ChristianGays.com. I am notified by Wordfence every time a member logs in. Occasionally the notification says the login was by someone who has administrator access, but they do not. I check their user settings each time it happens, and they are just subscribers.

    I know my site has not been compromised and I know the members who are logging in. This is not malicious. I am just wondering why Wordfence would think that a person has administrator access when they do not. The email I received this morning was from a sub-domain [dating.christiangays.com] of the multisite and I wonder if that has anything to do with it.

    Thank you.

    The page I need help with: [log in to see the link]

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Support wfphil

    (@wfphil)

    Hi @ma3ry

    Do you use a membership plugin where you have modified the subscriber user role for members?

    Thread Starter ma3ry

    (@ma3ry)

    Yes, I use Simple Membership with BuddyPress and bbPress integration, but the subscriber role has not been modified.

    Hide Admin bar (in Simple Membership) is ticked, as it is in Users Settings, but I do notice that when new members register, their profiles show the box ticked for “Show Toolbar when viewing site”. I have to untick all new registrations.

    I have several code snippets in my functions.php but I don’t believe any of them alter Subscriber role.

    Thanks for trying to help. Much appreciated.

    Plugin Support wfphil

    (@wfphil)

    Hi @ma3ry

    Thank you for the update.

    I would like to have a look at your Wordfence diagnostics report. Please go to the top of the “Diagnostics” tab on the Wordfence “Tools” page. There will be a “SEND REPORT BY EMAIL” button to send the diagnostics report. Enter wftest [at] wordfence [dot] com as the email and @ma3ry as the forum username please.

    Once you have emailed me the diagnostics report can you reply here to let me know that it has been sent. This is important in the unlikely event that your installation of WordPress is having an issue with sending mail.

    Thread Starter ma3ry

    (@ma3ry)

    Diagnostic report has been successfully sent.

    Plugin Support wfphil

    (@wfphil)

    Hi @ma3ry

    Thank you for the update.

    The diagnostics report hasn’t arrived as searching the email account for @ma3ry does not find it.

    Can you try sending it to yourself, and if it arrives, please forward it to wftest [at] wordfence [dot] com and let me know when that is done.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Email Notification says “username” who has admin access – but shouldn’t’ is closed to new replies.