96 ‘User Created outside WordPress’ Reports

  • Resolved mark_l_sanders

    (@mark_l_sanders)


    3 years, 2 months ago

    Hi
    I’ve just installed WordFence and upgraded to Premium.
    I’m running a MultiUser install on 5.8.2. All plugins updated.
    Wordfence is running alongside iThemes security.

    Last night’s scan gave me 87 seperate ‘An admin user with the username XXXX was created outside of WordPress.
    Type: Unknown Administrator

    I’ve checked a few of these (they’re all valid named users) in the network Users list – the named users exist, but there’s no sense that they have been edited or created recently. There are no duplicates.

    Should I just assume these are all false postives?

    If so – can I stop it happening again without disabling the check.
    Can I mark ALL of them at once as ‘solved’?

    thanks

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support wfphil

    (@wfphil)

    Hi @mark_l_sanders

    Are they all supposed to be administrator user accounts?

    If that is correct, how were the administrator user accounts created?

    Thread Starter mark_l_sanders

    (@mark_l_sanders)

    Hi Phil – thanks very much for responding.

    Not sure what you mean – here is the situation:
    * I have not created ANY new accounts recently.
    * All the accounts in question were created over the last 5-10 years; they are mostly (but not all) ‘local’ admins (ie not Super Admins)
    * I don’t know why WordFence thinks that loads of new admin accounts have been created recently

    thanks
    mark

    Plugin Support wfphil

    (@wfphil)

    Hi @mark_l_sanders

    Thank you for the update.

    You said, “I’ve just installed WordFence and upgraded to Premium.”

    This implies to me that you are a new user to Wordfence and the scanner is saying that it has found 87 administrator accounts created outside of the WordPress user account generation system. The timing of when those user account were created is irrelevant.

    If the user accounts were not created under the Users >> Add New page then these scan results can be created.

    One example of a user account created outside of WordPress would be creating users directly in the database.

    If they are valid administrator user accounts that should be there then you can use the IGNORE option in the scan results.

    Also as you say that you are a premium customer then in the future you can access premium support via the link below:

    https://support.wordfence.com

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘96 ‘User Created outside WordPress’ Reports’ is closed to new replies.