• My site is inactive, there’s hardly anything on it yet and it’s in construction mode. When you go onto the site you just see a coming soon page. There’s no where for people to sign up but in the admin area I am seeing over 400 people signed up with customer roles alongside myself as administrator. How is this possible?

Viewing 4 replies - 1 through 4 (of 4 total)
  • Bots and fishing scripts looking for sites. I would suggest getting some security running on the site ASAP.

    -Sean

    Thread Starter laughingoutloud

    (@laughingoutloud)

    Thanks, any suggestions?

    wordfence or ithemes security is what I use.

    Wordfence doesn’t stop this. A google search article suggests WP blocking plugins and sucuri. Though there are problems in using Wordfence and sucuri together.

    I suggest you set WordPress to send an E mail when new users subscribe. At least you can delete them. Though this maybe shutting the stable door after the horse has left.

    I fear its a problem of having ‘any users can subscribe’ ticked in the setting.

    Which is necessary for membership sites.

    This has gone on for years.

    What I don’t understand, is what benefit the bots get from registration. Apart from knowing that the site is running WordPress. With all the security/update issues that brings.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Random user sign ups’ is closed to new replies.