Fake WordPress Sign-In

• 

  under1000skies · Member · Jun 21, 2019 at 3:29 pm

  • Copy link
  • Add topic to favorites

  Has anyone run into this?

  I went to this site.
  Read the blog.
  Comment requires log-in.
  Thought I was logged in but, okay.
  Tried to log in.
  Tried 3 of my passwords.
  Used my email to get a new password
  Got a message (“there’s no such email in our records”)
  This *was* the correct password.
  Is this some kind of password/email exploit or collection bot?

  http://justonebackyard.net/wp-login.php?action=lostpassword

  This site looks totally legit but maybe that page was exploited by a third party?

  Thanks for any help you can provide.

  The blog I need help with is: (visible only to logged in users)

• 

  under1000skies · Member · Jun 21, 2019 at 3:31 pm

  • Copy link

  Correction: This *was* the correct EMAIL (not password)

• 

  under1000skies · Member · Jun 21, 2019 at 3:45 pm

  • Copy link

  PS I didn’t write this:
  “The blog I need help with is nikiflow.wordpress.com.”

  Does ^ this get stuck on my post automatically or something? o.O?