Someone tried to reset my admin password

• 

  sjkims · Member · Oct 12, 2017 at 2:51 am

  • Copy link
  • Add topic to favorites

  I received that a couple of months and I had changed my admin account and installed security plug-ins. Surely, I’d done 2-factor authentication as well. But it happened again.

  If possible, I would like to know
  1.how they found my account ID
  2.how they could reach to resetting password function

  Please help.

  The blog I need help with is: (visible only to logged in users)

• 

  nixiack · Member · Oct 12, 2017 at 5:09 am

  • Copy link

  Hey there @sjkims,

  That is indeed an alarming issue! I looked into your site and it appears that macinjune.com is a self-hosted WordPress.org site. This is a forum for WordPress.com sites so we would be unable to completely assist with your questions. The difference between WordPress.com and WordPress.org can be seen here.

  I can tell you that the Administrator (or Super Administrator) roles are the only ones that can create, delete, or even see other users on a WordPress.org site, per this link and this screenshot. If you have someone else who is an Administrator on the site they might have inadvertently tried to reset the password.

  The best bet would be to reach out to your Host and see if they can assist in tracking down what may have happened. I see your Host as A2 Hosting, give them a shout.

  Best of luck! I hope you find a good resolution to this :)

• 

  sjkims · Member · Oct 14, 2017 at 4:35 am

  • Copy link

  @nixiack8
  Thank you for your kind answer. I addressed this to A2 Hosting as your advice. :)

• 

  nixiack · Member · Oct 16, 2017 at 3:34 am

  • Copy link

  Awesome! Best of luck I really hope you find everything out!