Password change

• 

  jburns18 · Member · Jan 31, 2019 at 3:48 pm

  • Copy link
  • Add topic to favorites

  Hi. I received two email messages (one today and one yesterday) from (email visible only to moderators and staff). Each email had the same message, ‘Password changed for user…’ http://www.josephburns.net is my domain name. Is this some kind of hack of my site? If so, what should I do? Thank you.
  Joe Burns
  [redacted]
  (email visible only to moderators and staff)

  The blog I need help with is: (visible only to logged in users)

• 

  kokkieh · Staff · Feb 1, 2019 at 11:10 am

  • Copy link

  Hi there,

  Those emails have nothing to do with WordPress.com, and is not coming from our system.

  Your site using the open source WordPress software and is hosted by Hostmonster.com. Support for your version of WordPress can be found here:

  https://wordpress.org/support/forums/

  All I can tell you is that’s the email the WordPress software on your site sends out when a user on the site changes their password, so check under Users ->All Users in WP-Admin whether there are any user accounts that don’t belong. You’ll also be able to remove them from there.

  If you see a bunch of subscriber users, then you likely have the option enabled in Settings ->General to allow visitors to create guest accounts on your site. Disable that, and this should stop happening.

  Please ask in the WordPress.org forums if you need any more help with this.