On at least two of my WordPress installs (haven't checked others yet) the count of users is off. For example, one blog says there are three admin level users, but lists only one, the legitimate admin, me.
I have been reading about fake admin users that are hidden and can hold malicious code. But I checked my database and the only user was me, the correct admin.
According to the Exploit Scanner plugin, the two extra admins have blank usernames and both have user_ID 0. Is this something to be concerned about?
Incidentally, the user count for other levels is also off. I had a bunch of subscribers, then decided to erase them all, but the count of subscribers on the user page still shows a count of 117, but then displays none below, and says no matching users were found.