Users registering as Admins!

  • We’re having a problem where a couple of times a week I receive a new user registration where they were able to register as an administrator. I immediately delete the accounts when this happens. However, even this week, I had someone change the administrator email address which obviously I immediately changed back. Lastly, when an admin account is created, they go to settings > general and set the drop down for new user registration role as administrator. So, I also have to change that to subscriber. What’s even more odd is that on settings > general, I have new user registrations unchecked so I don’t even know how they’re able to register.

    We use event espresso for events so I need to allow users to register but this is worrisome.

    How can this be happening and how do I stop it?

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)
  • Moderator James Huff

    (@macmanx)

    Check Settings > General in your site’s Dashboard. Is “New User Default Role” set to “Subscriber” or anything that’s _not_ Administrator?

    If so, carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures and start backing up your site.

    Thread Starter w4designs

    (@w4designs)

    I’ve done that. Every time a new admin gets registered, the setting gets changed back to “new user default role” to admin.

    Thread Starter w4designs

    (@w4designs)

    I use “Anti-Malware Security and Brute-Force Firewall” as well as Wordfence free. I also get a daily backup using “Backup WordPress”.

    • This reply was modified 6 years, 1 month ago by w4designs.
    • This reply was modified 6 years, 1 month ago by w4designs.
    Moderator James Huff

    (@macmanx)

    I recommand going through the full guide linked to above. Something has compromised your site, and it’s pretty clear that your security plugins didn’t catch it.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Users registering as Admins!’ is closed to new replies.