UM deleted accounts

Hi @oseven

What Ultimate Member plugin version do you have?

Let me know,
Best Regards

2.1.12

Hi @oseven

The probable lack of security that could lead to similar results is already patched and WordFence writes a post about that.
https://www.wordfence.com/blog/2020/11/critical-privilege-escalation-vulnerabilities-affect-100k-sites-using-ultimate-member-plugin/

Did you check the users’ capabilities? It could happen that someone has administrator access who should not.

Please use your site’s backup (for returning all 3000 users back) and check the users’ capabilities.

Let me know about the progress or if you have other questions,
I’ll be in touch.
Best Regards

Hi @oseven

Btw. these vulnerabilities are also patched.
https://blog.sucuri.net/2019/05/multiple-vulnerabilities-in-the-wordpress-ultimate-member-plugin.html
https://www.inmotionhosting.com/blog/attention-wordpress-ultimate-member-plugin-users-new-security-information/

Best Regards

Hey there!

This thread has been inactive for a while so we’re going to go ahead and mark it Resolved.

Please feel free to re-open this thread if any other questions come up and we’d be happy to help. ??

Regards,