Wordfence Password recovery attempted

Hi, I’m frantically trying to find a solution to this problem. I saw and old post here…

Question:

I received an email from Wordfence Alert warning that someone tried to recover the password for user with a totally unfamiliar email address and user location. This is my first time to receive such an email, most of the time it just alert me when had someone had login to my website. I not sure whether the email is a scam, what should I do next? The screenshot can be view through the link.

Reply:

It’s not a scam, it’s a standard email from WordFence.

What it means is that a (most likely) bot has tried to do a password reset for an email address that it knows/controls so it can try to reset the account password and get into your site.

The good thing is because the email address that it tried is not registerd with your site, it couldn’t do anything. So there’s no need to worry, it’s just a notice of something happening to remind you that WordFence is doing something.

However!

I get the reset password notification notice ATER the user has successfully created a user account (subscriber).

Any advice on what I should, or should not do?