Title: WP Database Hack
Last modified: August 30, 2016

---

# WP Database Hack

 *  [s.m.me](https://wordpress.org/support/users/kumoink/)
 * (@kumoink)
 * [10 years, 6 months ago](https://wordpress.org/support/topic/wp-database-hack/)
 * Hi there,
 * Hopefully this is the appropriate place to post this question.
 * I recently tried to login to one of our clients sites using our administrator
   account (which isn’t ‘admin’ btw 😉 ).
    I couldn’t get in, forgotten password
   wouldn’t work either saying it didn’t recognise my details, which I knew were
   correct.
 * That lead me to have a look at wp_users table in the database. I found our admin
   account in there, but someone (I presume a hacker) had managed to change the 
   email address and username on the account to something totally different, I assume
   so they could gain admin access to the site.
    Nothing else looked touched (I 
   ran Wordfence and all in one sec), but we cleaned the site up anyway are per 
   the WordPress guide.
 * Any ideas as to how they might have managed to do this? Never seen this sort 
   of hack before on my sites.
    The site was reasonably up to date software wise,
   maybe a week behind with updates at the most. I guess that might be all it takes!
   Or is there other common ways/holes in which they could gain access to the database?
 * Thanks in advanced.

Viewing 1 replies (of 1 total)

 *  Moderator [t-p](https://wordpress.org/support/users/t-p/)
 * (@t-p)
 * [10 years, 6 months ago](https://wordpress.org/support/topic/wp-database-hack/#post-6618691)
 * When you’re done cleaning up the site, you may want to implement some (if not
   all) of [the recommended security measures](https://codex.wordpress.org/Hardening_WordPress).

Viewing 1 replies (of 1 total)

The topic ‘WP Database Hack’ is closed to new replies.

## Tags

 * [database](https://wordpress.org/support/topic-tag/database/)
 * [sql](https://wordpress.org/support/topic-tag/sql/)

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 1 reply
 * 2 participants
 * Last reply from: [t-p](https://wordpress.org/support/users/t-p/)
 * Last activity: [10 years, 6 months ago](https://wordpress.org/support/topic/wp-database-hack/#post-6618691)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics