"Subscriber role " user adding itself into admin

  • Hi,

    I have the following issue:
    Somebody or a hack is adding a subscriber role by itself into my admin panel and I don’t know how he does that. He is not subscribing for the article updates but as a “subscriber” to the admin panel.

    Normally, only admins are supposed to be able to perform the task of adding new users to admin panel in WP disregarding the role they give to these users.

    Can someone tell me if there is a security breach in WP that hackers can exploit to add new admin users.
    The name of the user is [email protected] and don’t have avatar picture.
    I have changed my admin password already twice. but the guy is still coming…

    Has anyone had this issue before? what can I do to prevent this to happen?

    Thanks in advance for your help.

Viewing 4 replies - 1 through 4 (of 4 total)

  • suggest you start by seeing if you site’s been hacked.

    Put it’s URL into here

    https://sitecheck.sucuri.net/scanner/

    Thread Starter freshwaters

    (@freshwaters)

    Hi Robin,

    The analysis returned a green light meaning I guess that my website has not been hacked. but the “dude” keeps on coming back each time I delete his account.

    I don’t know what to do. should I get in touch with my hosting services?

    Cheers.

    yes contact your hosting services next for advice

    It looks like you have user registration turned on. Someone, probably a bot, is registering on your site and is granted the default role of subscriber. If you don’t want additional users on your site, disable user registration.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘"Subscriber role " user adding itself into admin’ is closed to new replies.