Ultimate member 2.6.7 and still hacked

  • Resolved frankv001

    (@frankv001)


    1 year, 7 months ago

    I immediately installed 2.6.7 when it became available a few weeks ago, but when I woke up this morning (14th of july) 2 new accounts were created on my website one with admin rights and one normal user one! It is a closed site and I am the only person who can create accounts (normally) . Luckily I’m also monitoring the change and creation of accounts, so I was informed right away.

    I did not remove the accounts right away, but demoted the role of the users in question and changed their password just in case until I further checked out the rest of the website.

    i think the best way now to move forward is to recreate the site from backup, since I do not know what happened meanwhile to the website.

    Please advice!

Viewing 5 replies - 1 through 5 (of 5 total)

  • I’m not a professional but maybe you can add a restriction in the code? I might do the same with my site using Ultimate Member. I will only have 1 or 2 admins and not planning to make more. If I do though, I’ll just edit the code maybe.

    ChatGPT gave me this code. I would like to ask the devs if this code will help or not? Thanks.

    function restrict_admin_access() {
    // Get the current user
    $user = wp_get_current_user();

    // Check if the user is logged in and their email is not allowed
    if (is_user_logged_in() && !in_array($user->user_email, array('[email protected]', '[email protected]'))) {
        wp_logout(); // Log out the user
        wp_safe_redirect(home_url()); // Redirect to the homepage or another appropriate page
        exit();
    }
}
add_action('init', 'restrict_admin_access');

    Edit: This code will still let malicious attackers create admin accounts, but it will prevent them from using the admin page I hope….

    • This reply was modified 1 year, 7 months ago by sunapitan.
    Plugin Author Mykyta Synelnikov

    (@nsinelnikov)

    Hi @frankv001

    Could you provide the screenshots with the registration form settings?
    Also please read this article with necessary recommended actions after 2.6.7 update https://docs.ultimatemember.com/article/1866-security-incident-update-and-recommended-actions

    Let me know,
    Best Regards!

    Plugin Author Mykyta Synelnikov

    (@nsinelnikov)

    Hi?@frankv001

    Please update Ultimate Member to the latest 2.6.8 version. You will get the recent fixes and Secure settings where you may setup blocking user registrations with some Administrative capabilities.
    https://docs.ultimatemember.com/article/1869-security-feature

    Let me know if you have other questions,
    Best Regards!

    Thread Starter frankv001

    (@frankv001)

    Hi Mykyta,

    Thanks for your feedback. I installed the update 2.6.8 and scanned the site. Besides 2 plugins which needed an update, everything was green. I added the security changes in the plugin configuration (at least the ones I understood). I hope this is sufficient.

    Kind greetings

    Plugin Support andrewshu

    (@andrewshu)

    Hi @frankv001

    This thread has been inactive for a while so we’re going to go ahead and mark it Resolved.

    Please feel free to re-open this thread if any other questions come up and we’d be happy to help. ??

    Regards

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Ultimate member 2.6.7 and still hacked’ is closed to new replies.