"Subscriber role " user adding itself into admin (5 posts)

  1. freshwaters
    Posted 1 year ago #


    I have the following issue:
    Somebody or a hack is adding a subscriber role by itself into my admin panel and I don't know how he does that. He is not subscribing for the article updates but as a "subscriber" to the admin panel.

    Normally, only admins are supposed to be able to perform the task of adding new users to admin panel in WP disregarding the role they give to these users.

    Can someone tell me if there is a security breach in WP that hackers can exploit to add new admin users.
    The name of the user is oliniga@hotmail.com and don't have avatar picture.
    I have changed my admin password already twice. but the guy is still coming...

    Has anyone had this issue before? what can I do to prevent this to happen?

    Thanks in advance for your help.

  2. Robin W
    Posted 1 year ago #

    suggest you start by seeing if you site's been hacked.

    Put it's URL into here


  3. freshwaters
    Posted 1 year ago #

    Hi Robin,

    The analysis returned a green light meaning I guess that my website has not been hacked. but the "dude" keeps on coming back each time I delete his account.

    I don't know what to do. should I get in touch with my hosting services?


  4. Robin W
    Posted 1 year ago #

    yes contact your hosting services next for advice

  5. Caramboo
    Posted 1 year ago #

    It looks like you have user registration turned on. Someone, probably a bot, is registering on your site and is granted the default role of subscriber. If you don't want additional users on your site, disable user registration.

Topic Closed

This topic has been closed to new replies.

About this Topic