WordPress created admin account itself

  • shaq009

    (@shaq009)


    12 months ago

    I am using WordPress hosted on AWS Lightsail. Around 2 weeks ago, some one created accounts with full Administrator permission twice on my website and also created 4 other user accounts and also changed admin email address to ad@example.com.

    My own Admin account remained unchanged and I can log in to wordpress admin without any issues. I changed my password but I think something doggy script is installed on my website and need some help to fix this.

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)
  • Svetoslav Marinov

    (@lordspace)

    12 months ago

    is your WordPress and plugins and themes up-to-date?

    There’s a chance that this site or another one on this hosting account may have been hacked.

    It’s good to research how to clean your site or hire somebody to clean the site for you.

    lisa

    (@contentiskey)

    12 months ago

    Review and implement suggestions in this guide: https://wordpress.org/documentation/article/faq-my-site-was-hacked/

    Thread Starter shaq009

    (@shaq009)

    12 months ago

    Hi Guys, Thank you for your help.

    I scanned my site on sucuri and virustotal and both checks are clean.

    What else I can do to make sure my site is okay?

    lisa

    (@contentiskey)

    12 months ago

    an unexpected change to admin_email would lead me to think that the site has been compromised in some way.

    start by changing all passwords for hosting, database and users, remove + replace the unexpected admin_email, review all files and database for unusal stuff

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘WordPress created admin account itself’ is closed to new replies.

Tags