10Web Manager plugin created admin user

  • Resolved candyappledesign

    (@candyappledesign)


    4 years, 5 months ago

    Hi,

    I received an email from Wordfence letting me know that the following user signed into one of my client’s websites:

    A user with username “tenweb_manager_plugin” who has administrator access signed in to your WordPress site.
    User IP: 5.135.233.97
    User hostname: ip97.ip-5-135-233.eu
    User location: France

    This user did not show up in the user list the Dashboard. However, when I logged into phpMyAdmin, this user was there. I saved screenshots and have removed the user.

    I’ve also let 10Web Manager know about this issue and have deactivated the plugin for now until they respond.

    Are you aware of any issues with this plugin or developer? https://10web.io/

    All the best,
    Elizabeth

    The page I need help with: [log in to see the link]

Viewing 10 replies - 1 through 10 (of 10 total)
  • Thread Starter candyappledesign

    (@candyappledesign)

    The plugin developer just responded to my ticket and gave the following response: 10web manager is incapable of modifying deleting and/or doing anything other than establishing a connection with our 10Web dashboard.

    I just shared the detailed screenshot with them and hope they will investigate. From the date created, it appears that the user was created when I installed the plugin.

    Hey @candyappledesign,

    As a test, can you try reinstalling the plugin to see if it recreates the user?

    Also, it wouldn’t be a bad idea to change all passwords including WordPress, sFTP, database, and hosting control panel just_in_case.

    Please let me know how it goes.

    Thanks,

    Gerroald

    Thread Starter candyappledesign

    (@candyappledesign)

    Hi Gerroald,

    No problem and thank you for getting back to me so quickly. I just reinstalled the plugin and a new user was created again. This one has today’s date. I’ll upload a new screenshot.

    Here are the steps that I took:

    – Installed the 10Web Manager plugin
    – Followed the plugin instructions (in the WordPress dashboard) to connect the plugin with the client’s 10Web account
    – Allowed the connection to complete

    Elizabeth

    Thread Starter candyappledesign

    (@candyappledesign)

    Here’s a link to the screenshot with the new user created a few minutes ago:
    https://www.dropbox.com/s/2rd7m5p8ai8b1d5/tenweb_manager_plugin%20user%20details%20reinstall.JPG?dl=0

    Hey @candyappledesign,

    Thanks for the update.

    I’d suggest reaching out to the 10Web Manager plugin author once more. It seems it is creating the user. Perhaps the person you spoke with was unaware of this functionality, I’ve definitely been guilty of this myself, it happens. However, if they reconfirm the plugin doesn’t create a user there may be a deeper-lying issue.

    Please do let me know what they say.

    Thanks,

    Gerroald

    • This reply was modified 4 years, 5 months ago by WFGerroald.
    Thread Starter candyappledesign

    (@candyappledesign)

    You’re welcome. I just updated the developer and will let you know what they say.

    Thanks,
    Elizabeth

    Thread Starter candyappledesign

    (@candyappledesign)

    I’m still waiting for a new reply from the developer and will let you know what they say.

    Hey @candyappledesign,

    Sounds like a plan. Please do let me know what they say.

    Thanks,

    Gerroald

    Thread Starter candyappledesign

    (@candyappledesign)

    Hi Gerroald,

    Asya from 10Web got back to me and let me know that their manager plugin does create a user in the database that allows them take action on the website from the 10Web dashboard. It’s not an essential plugin to my client’s website, and I’m going to manually update it as needed and not go through their manager plugin.

    Thank you for your time!
    Elizabeth

    Hey @candyappledesign,

    Thanks for the update, and happy to hear it isn’t a sign of a compromise!

    Please do let us know if anything else comes up.

    Thanks,

    Gerroald

Viewing 10 replies - 1 through 10 (of 10 total)
  • The topic ‘10Web Manager plugin created admin user’ is closed to new replies.