Support » Everything else WordPress » User signed up on 2 blogs, but I do not give permission / link for this

  • Jon

    (@jonpaulwade)


    Using 2.8.4 and today a user signed up on 2 of my blogs, and I do not show the meta/login widget, so how did they do it? Is WP account registration is simple URL that anyone can type in? By default new users are subscribers, but a bit worrying that people can sign up. Some suggested it could be a bot, and I did find an instance of another chap who mentioned that the same person (account and email) had “hacked” his blog (sign up).

    Is this a 2.8.4 vulnerability, or just an easy trick for a bot to do, and not a major problem so long as default new users subscribers?

Viewing 1 replies (of 1 total)
  • esmi

    (@esmi)

    Forum Moderator

    how did they do it?

    By going straight to the registration url.

    Is WP account registration is simple URL that anyone can type in?

    Yes

    If you don’t want new subscribers registering without approval, uncheck “Anyone can register” in Admin/Setting/General.

Viewing 1 replies (of 1 total)
  • The topic ‘User signed up on 2 blogs, but I do not give permission / link for this’ is closed to new replies.