clairebre

Hi, thanks for posting, glad it’s not just me that’s had this problem!

If it’s the same issue as mine – you need to take action. WPInfinite client is a plugin that allows a user to manage multiple websites from one single dashboard.

If you look on your dashboard – does it say anywhere “this website can be managed remotely” or words to that effect? If so, what I’ve been advised this means is someone else has access to your site and can potentially manage it remotely.

I raised this using the WPInfinite client plugin support – they were helpful in advising how to get rid of this plugin, but it’s concerning that someone gained access to my site. I’ve no idea how, or why someone would want to do this.

First, I’d check in the Users section of your dashboard whether there is a user listed in there that shouldn’t be (there wasn’t with mine)

To get rid of the plugin these were the instructions I was given, but it might be worth you going through the process of contacting WP Infinite Client’s support ticket system and checking that this is the right solution for you. Anyway, it was to do this:

“Hover over Plugins on the left list and click Editor on your dashboard.
On the Edit Plugins page, you will find an option the top right corner that says Select plugin to Edit.
From that dropdown choose iwp-client plugin and click select.
Once you do this the editor will show for the client plugin.
Click on Update File and this will break the connection for the IWP-client plugin.
This will allow the iwp client plugin to start showing in the plugins list. You can then deactivate the plugin from there.”

They also advised that they could do this for me if I supplied my user ID credentials (which I wouldn’t want to do) but following these instructions resolved it for me.

After I did this, I created a new user ID and unique password for myself, transferred my blog posts to that new user and deleted the old user to ensure that my login details were all completely unique and anyone that had previously gained access to my site wouldn’t be able to do this using my old WP login (assuming that’s how they did it), although I’m really in the dark about how they did this in the first place as my user ID is not the standard “Admin” and my password is really strong.

So anyway – as I say, get in touch with them – make sure any action you take is right for your situation. Just because the above worked for me, it might not be the same for you, so proceed with caution & good luck!

Let me know how you get on!

Anyone help with this please?