Subscriber being shown as admin in email login

  • Resolved supernova42

    (@supernova42)


    5 years, 5 months ago

    I have configured Wordfence so that I get an email alert whenever admin or a subscriber logs into my site.

    I am now getting the following email:-

    ‘A user with username “MattStern” who has administrator access signed in to your WordPress site’.

    I get the same email (different username) whenever any subscriber signs into my site.

    The thing is “MattStern” etc is not an administrator, he is a subscriber. I have checked the user details in the backend for “MattStern” and he is definitely shown as a subscriber, yet Wordfence is reporting him as an administrator.

    In the Wordfence All Options page I have ticked
    – Alert me when someone with administrator access signs in
    – Alert me when a non-admin user signs in

    The other 2 boxes are unticked i.e.
    – Only alert me when that administrator signs in from a new device or location
    – Only alert me when that user signs in from a new device or location

    Can you offer advice and should I be worried about this.

    Regards

    Phil

Viewing 5 replies - 1 through 5 (of 5 total)

  • Hey @supernova42,

    Do you have any plugins that adjust the user capabilities?

    If you disable all other plugins and log in as the user does it still register as an admin?

    Thanks,

    Gerroald

    Thread Starter supernova42

    (@supernova42)

    Hi Gerroald and thank you for your swift response. I did have two plugin’s on my site that adjusted a users capability and have now completely removed these from my site. They were called ‘user-role-editor’ and ‘wp-users-disable’. These plugin’s have been on my site for some time and have not caused a problem previously.

    My site name is https://najad.co.uk

    After deleting and removing those plugin’s I am still receiving emails from Wordfence such as

    This email was sent from your website “” by the Wordfence plugin at Monday 14th of October 2019 at 06:39:40 PM
    The Wordfence administrative URL for this site is: https://najad.co.uk/wp-admin/admin.php?page=Wordfence
    A user with username “Miken” who has administrator access signed in to your WordPress site.
    User IP: 84.92.118.35
    User hostname: mikeneave.force9.co.uk
    User location: Woking, United Kingdom

    Please note that ‘Miken’ is not an administrator, he is a subscriber, but I still receive these messages.

    I have detailed below all the plugin’s on my site.

    Can you offer some advice, as this message is being sent out from Wordfence.

    Regards

    Phil

    Advanced iFrame
    Asgaros Forum
    Basic Google Maps Placemarks
    BAW Login/Logout menu
    Classic Editor
    Enhanced Media Library
    GTranslate
    HappyForms
    MemberPress MailChimp 3.0
    MemberPress Math CAPTCHA
    MemberPress Plus
    Menu Items Visibility Control
    Participants Database
    Participants Database Contact Button Field
    Participants Database Custom Templates
    Participants Database Directory Tools
    Participants Database Email Expansion Kit
    Participants Database Field Group Tabs
    Participants Database Image Expansion
    Restrict Content
    Restrict Widgets
    Simple Custom CSS
    Smush
    Tides Today UK and Ireland Tide Times
    TinyMCE Advanced
    UpdraftPlus – Backup/Restore
    Woody ad snippets (PHP snippets | Insert PHP)
    Wordfence Security
    Yoast SEO

    Hey @supernova42,

    Did you adjust the user subscriber capabilities with one of the user editor plugins?

    Wordfence uses the manage_options on single sites, and manage_network capability on Multisite to identify admins. You might try reinstalling the role adjusting plugins to see if the custom user roles are still being adjusted. Even if they’re disabled, the changes to the user roles might remain.

    Please let me know what you find.

    Thanks,

    Gerroald

    Thread Starter supernova42

    (@supernova42)

    Hi Gerroald

    I uploaded the ‘User Role Editor’ plugin. There is an option in the plugin to Reset the user roles.

    It states

    Resetting will setup default user roles and capabilities from WordPress core.

    After resetting the user roles everything is now fine.

    Thanks for your help.

    Phil

    Hey @supernova42,

    Thanks for the update, and happy to hear you were able to track this down!

    Please let us know if anything else comes up.

    Thanks,

    Gerroald

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Subscriber being shown as admin in email login’ is closed to new replies.