@sharmadpk03
what was the solution for @shewter?
I got the same attack by a hacker.
This afternoon I confimed a real member and the process worked as espected. But today 22:22pm I got the mail for User registration request. And when I checked him (because the required ID number was wrong), his status was already approved.
I checked both the general setting and the form setting. At both User Login Option is ‘Admin approval’.
I think this is a generally security issue.
It is very important, that only registered users have access to the site content.
Please priorize this as BLOCKER. The whole business in Germany is affected.
Thanks!