Title: Ghost Users
Last modified: June 1, 2023

---

# Ghost Users

 *  [iframe](https://wordpress.org/support/users/iframe/)
 * (@iframe)
 * [3 years, 2 months ago](https://wordpress.org/support/topic/ghost-users-2/)
 * Hello.
 * Two users got created. They got no names, no roles, no email addresses. Their
   timestamps read only zero’s.
 * wp_usermrta has nothing regarding their ID numbers. I didn’t find any backdoor
   yet, File Mods ism’t allowed
 * Is there something you could recommend?
 * Thank you.

Viewing 4 replies - 1 through 4 (of 4 total)

 *  Moderator [Steven Stern (sterndata)](https://wordpress.org/support/users/sterndata/)
 * (@sterndata)
 * Volunteer Forum Moderator
 * [3 years, 2 months ago](https://wordpress.org/support/topic/ghost-users-2/#post-16786550)
 * Install WordFence (if you have no other security plugin installed) and scan your
   site.
 *  Thread Starter [iframe](https://wordpress.org/support/users/iframe/)
 * (@iframe)
 * [3 years, 2 months ago](https://wordpress.org/support/topic/ghost-users-2/#post-16786599)
 * Sure, it reads nothing related to this matter.
 *  Moderator [Steven Stern (sterndata)](https://wordpress.org/support/users/sterndata/)
 * (@sterndata)
 * Volunteer Forum Moderator
 * [3 years, 2 months ago](https://wordpress.org/support/topic/ghost-users-2/#post-16786622)
 * If you think you’ve been hacked, get a fresh cup of coffee, take a deep breath
   and carefully follow [this guide](https://wordpress.org/support/article/faq-my-site-was-hacked/).
   When you’re done, you may want to implement some (if not all) of t[he recommended security measures](https://wordpress.org/support/article/hardening-wordpress/")
 * [https://wordpress.org/support/article/faq-my-site-was-hacked/](https://wordpress.org/support/article/faq-my-site-was-hacked/)
 * [https://wordpress.org/support/article/hardening-wordpress/](https://wordpress.org/support/article/hardening-wordpress/%22)
 * If you’re unable to clean your site(s) successfully, there are reputable organizations
   that can clean your sites for you. Sucuri and Wordfence are a couple.
 *  Thread Starter [iframe](https://wordpress.org/support/users/iframe/)
 * (@iframe)
 * [3 years, 2 months ago](https://wordpress.org/support/topic/ghost-users-2/#post-16786625)
 * Thank you!

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Ghost Users’ is closed to new replies.

## Tags

 * [hacked](https://wordpress.org/support/topic-tag/hacked/)
 * [sql injection](https://wordpress.org/support/topic-tag/sql-injection/)

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 4 replies
 * 2 participants
 * Last reply from: [iframe](https://wordpress.org/support/users/iframe/)
 * Last activity: [3 years, 2 months ago](https://wordpress.org/support/topic/ghost-users-2/#post-16786625)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics