My username capabilities get changed automatically

Carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures and start backing up your site.

@macmanx I scanned my website but nothing found. So i set password protect to wp-admin and changing password of my username and changed the permission of wp-config.php to 444 !

Is this enough ?

Make sure you do everything else in the first linked to guide, scans don’t catch everything.

@negarehgfx Do you mind sharing your domain name? And have you seen any new users showing up when viewing wp_users table directly in a MySQL client? It’s not uncommon for hackers to change the default role so that they can set it to administrator and create themselves a user with administrator privileges to access your wp-admin.

@g0tr00t No I haven’t seen new user in database ! I applied some security changes as i said before and the problem didn’t happened again since now ! I hope this condition continues