Bug? WordPress User Search Function breaks site
-
I encountered a very strange problem. I have a membership site with ~500 users. I am site admin. A user was having difficulty accessing the site, so I logged in and to find that user, entered part of the username into the “Search Users” field on the “All Users” page. I got a slow response and then was logged out, only to find the entire site trashed. Literally – the user database was completely wiped, and all posts/pages had been moved to trash — and who knows what other settings might have been messed up.
(I could verify this because I do have FTP access, so I was able to create a new admin account for myself to log into the Dashboard and see what the problem was).
At first, I thought that the site had somehow been hacked, but I did a restore from backup, and repeated the same search — and the same thing happened again. No other signs of hacking, so I’m pretty sure that whatever happened was caused by some sort of glitch in the search function.
I don’t need help with my site because I simply restored from backup again — but now I am afraid to use the “Search Users” function again on any site. It could have course be due to a problem specific to that site – such as a theme or conflict plugin, or a corrupt entry in the database causing the search to fail.
But I wanted to share this in case it is a bug and if anyone else has experienced anything similar.
Also, I would like help understanding what happened and why. That is, why didn’t a problem with the search simply result in an error message? Why would a search problem result in the entire user database being wiped? And when the user database was wiped, why were all posts & pages moved to trash?
The site is running the WordPress 4.9.7; PHP v. 7.1.19
I don’t see anything in the PHP error logs.
I ran a Wordfence scan and it came up clean — so no sign of malware on the site.
- The topic ‘Bug? WordPress User Search Function breaks site’ is closed to new replies.