• Resolved Suyta

    (@suygenneris)


    Hi there

    I received an alert:

    An admin user with the username XXX was created outside of WordPress. It's possible a plugin could have created the account, but if you do not recognize the user, we suggest you remove it.

    I don’t have plugins creating accounts and I have disabled XML-RPC authentication.

    Also the user being created outside of WordPress already existed. It was created from Users dashboard, normal creation.

    Have I any way to get the IP address of the event?

    I checked from the database but the IP address is not in details.

    Many thanks in advance.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @suygenneris, thanks for reaching out.

    The user being known to you could mean a temporary issue flagged an alert. Sometimes deactivating and reactivating Wordfence should reset the admin list on activation. Let us know if it still persists afterwards and we can look a little further into it.

    Many thanks,
    Peter.

    Thread Starter Suyta

    (@suygenneris)

    Thank you so much @wfpeter 🙂

Viewing 2 replies - 1 through 2 (of 2 total)

You must be logged in to reply to this topic.