Support » Plugin: Wordfence Security - Firewall & Malware Scan » Notification says Username has admin access but he doesn’t

  • Resolved ma3ry

    (@ma3ry)


    I am notified whenever someone logs into my website. Occasionally I will be notified that a user with administrator access has signed in, but I KNOW that person does not have admin access. This has just happened again with a new subscriber. I have double-checked and he is only a subscriber. Why do I get these notifications that the person had admin access when I know he doesn’t?

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)
  • Hi @ma3ry,

    Wordfence detects administrators with the flag manage_options. So it’s possible that your users have this option, even though they are shown as subscribers. This happens when you have plugins that can set custom user roles.

    Can you let me know if you have any plugins that allow editing of user roles? For example, “User Role Editor”. If you do, you can reset the user roles so that it uses the WordPress default roles instead.

    Dave

    Many thanks wfdave. I do indeed use custom user roles. I’ll look into it. Thanks for the direction.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Notification says Username has admin access but he doesn’t’ is closed to new replies.