how can a user be created outside of WordPress?

• 

  racerxinc · Member · Mar 16, 2017 at 10:04 pm

  • Copy link
  • Add topic to favorites

  Hi there,

  I have WordFence installed and twice now (today and a few days ago) I got an email alert saying that an admin user was created outside of WordPress. How can this happen? This is on a self-hosted installation. I commented out the username. I logged in and deleted it and have been WordFence’s feature to block IPs and IP ranges, but how do I figure out how this happened in the first place?

  Thanks.

  Todd

  Wordfence found the following new issues on “RacerX, Inc.”.

  Alert generated at Thursday 16th of March 2017 at 04:08:55 PM

  Critical Problems:

  * An admin user with the username XXXXXX was created outside of WordPress.

  The blog I need help with is: (visible only to logged in users)

• 

  timethief · Member · Mar 16, 2017 at 10:16 pm

  • Copy link

  racerxinc.net is hosted by Amazon.com, not by wordpress.COM.

  That site is not hosted by wordpress.COM, and as it is not on our servers we cannot help you with it.

  WordPress.COM and WordPress.ORG are completely separate and have different username accounts, logins, features, run different versions of some themes with the same names, and have separate support documentation and separate support forums. Read the differences here http://en.support.wordpress.com/com-vs-org/

  This is wordpress.COM support. We provide support only for wordpress.COM hosted sites. Our support docs do not apply to
  (1) local installs of wordpress.ORG software on your own server or
  (2) wordpress.ORG software installs on paid hosting, and we do not provide support for them at wordpress.COM.
  (3) sites linked to wordpress.COM accounts with the Jetpack plugin so they display on the My Sites wordpress.com account page.

  That support is provided at https://wordpress.ORG/support. The wordpress.ORG login link is here https://login.wordpress.org/ If you do not have an account yet then click Create an account https://login.wordpress.org/register/ and if you have lost an account password click Lost password? https://login.wordpress.org/lostpassword/

  Some Jetpack solutions are here http://jetpack.com/support/

  Others are in the Jetpack support forum at WordPress.org
  http://wordpress.org/support/plugin/jetpack

  However, if help cannot be found at either one then they can file a Jetpack support ticket here > http://en.support.wordpress.com/contact/?jetpack=needs-service

  WordPress.org support docs are at https://codex.wordpress.org/Main_Page
  See also https://apps.wordpress.org/support/ for app support.