New User Admin?

• 

  zblue2 · Member · Mar 7, 2018 at 8:15 pm

  • Copy link
  • Add topic to favorites

  Just got an email that someone was given admin privileges with a phony email:

  New user registration on your site Decor Girl:

  Username: desctop

  Email: (email visible only to moderators and staff)

  I deleted it but how does this happen?

  The blog I need help with is: (visible only to logged in users)

• 

  balance6103 · Member · Mar 7, 2018 at 9:19 pm

  • Copy link

  got the same

• 

  ladyune · Member · Mar 7, 2018 at 9:38 pm

  • Copy link

  it happened to me too, the user desctop as administrator, I deleted it and I checked the configuration I have disabled register new user.
  I will like to hear what is going on.

• 

  azunga · Member · Mar 7, 2018 at 11:41 pm

  • Copy link

  Same here. My WordPress, theme and plugins are fully up to date.

• 

  azunga · Member · Mar 8, 2018 at 12:01 am

  • Copy link

  Mine was a self hosted WordPress and just did a sucuri scan and found many hacked files. Many were fake plugins in the plugin folder with inject.txt which contains malicious javascript.

• 

  fstat · Staff · Mar 8, 2018 at 7:20 am

  • Copy link

  Hi there,

  All of your sites are using the self-hosted version of WordPress and are not hosted here at WordPress.com. Therefore you need contact your hosting providers regarding this security issue.

  We’re only able to provide support for WordPress websites that are hosted by us. For help with a self-hosted WordPress site you can also ask over at the WordPress.org forums:

  https://wordpress.org/support/

  If you want to know more about the differences between WordPress.com and the self-hosted WordPress.org you can read this article:

  WordPress.com vs. WordPress.org

• 

  zblue2 · Member · Mar 8, 2018 at 1:05 pm

  • Copy link

  Thank you everyone. @fstat – I sort of thought I was asking support at ORG but when I hit enter it plopped me here an I couldn’t delete.

• 

  fstat · Staff · Mar 8, 2018 at 1:07 pm

  • Copy link

  @zblue2, no problem. I hope you’ll get this sorted :)

• 

  sharvinshah51 · Member · Mar 9, 2018 at 6:49 am

  • Copy link

  Just go to your admin panel and go to the settings and check for membership checkbox and uncheck the box if its checked by default. Then go to the New User Default Role and see if its administrator. This happens due to that

• 

  sharvinshah51 · Member · Mar 9, 2018 at 6:50 am

  • Copy link

  Just go to your admin panel and go to the settings and check for membership checkbox and uncheck the box if it’s checked by default. Then go to the New User Default Role and see if its administrator.

• 

  cprgolds · Member · Apr 3, 2018 at 12:23 am

  • Copy link

  Just for the record, I found the same user added to my installation.

  I also found that footer.php in the theme I was using was also altered to redirect users to ad sites, which I fixed.