Bump? This is till occurring, sometimes users appear to be logged in admins.
I hacked Tarski to remove the email population from the contact form, but that doesn’t help with WordPress thinking other people are admins.
My ISP looked into it and didn’t find anything.