Weird issue with a site, logs you in as admin

  • This isn’t my site or one of the sites I managed but I would like a reason for why this is happening in order to prevent it in the future or just for the sake of learning.

    This random site my colleague found logs you in as an admin, you can’t do anything as it logs you out but this works regardless for anyone, even at my home.

    I would like to know why this is happening, is this some sort of WordPress option, they’ve been hacked or this is something intentional?

    Thanks.

    • This topic was modified 1 year, 1 month ago by turtlegit.
Viewing 3 replies - 1 through 3 (of 3 total)
  • Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    Moderator note: As that site seems that it might be vulnerable, I’ve removed the URL from your message. You might want to email the site’s admin to advise them of this issue.

    Thread Starter turtlegit

    (@turtlegit)

    @sterndata

    it seems to be a caching issue, as it did let me clear the cache of the site without permission. This removed the admin bar and thus log me out of their admin. Still unsure why cache would do such a thing.

    Thread Starter turtlegit

    (@turtlegit)

    The only answer I can give or find, for any future searches.

    The website owner/user probably logged in to that website server and thus logged into the website via the server, his cache then cached his login credentials and then saved it when he cached it. Thus whenever someone goes to the site, the cache loads his credentials in as if he logged in.

    Thus clearing the cache will resolve the issue, as to why it allowed us to clear the cache, i can’t figure that out.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Weird issue with a site, logs you in as admin’ is closed to new replies.