address book entries even with no form

  • pulsarinformatique

    (@pulsarinformatique)


    4 months ago

    Hi

    Our site has been attacked through our contact Forms 7 form even protected with a Google ReCaptcha V2.

    We don’t understand how it is possible but more interresting is the fact that even if we disable the contact page, FLAMINGO is still recording new address book entries. There is no new inbound messages (since the contact page is disabled) but we have new bot account creations that match the Flamingo address book entries.

    How is it possible ? I thought Flamingo only recorded the datas from contact Form7 .

    Does Flamingo also record the WP accounts creations ?

    thanks

Viewing 8 replies - 1 through 8 (of 8 total)
  • Plugin Author Takayuki Miyoshi

    (@takayukister)

    Where can we see the website in question?

    Thread Starter pulsarinformatique

    (@pulsarinformatique)

    Yes it is https://www.aquakoi.fr/

    Plugin Author Takayuki Miyoshi

    (@takayukister)

    What do you see in the History column on the Address Book screen?

    Thread Starter pulsarinformatique

    (@pulsarinformatique)

    Hello

    when it’s pure spam I see “user”. If I check in the WP users dashbord I see these spam accounts too.

    Does it mean that Flamingo also records the new account creations ? It also means our user registration page lets the bots pass even though there is a reCaptcha in the form!

    thanks

    Plugin Author Takayuki Miyoshi

    (@takayukister)

    Wait, you allow spammers to create user accounts?? How dare you.

    Obviously, Contact Form 7 has nothing to do with this issue.

    Thread Starter pulsarinformatique

    (@pulsarinformatique)

    Hi

    We obvisously have a hole somewhere we can’t find it but Ifrom you I wanted the confirmation that Flamingo records the creation of new users, not only the submission of Contact Forms 7.

    Can you confirm it please?

    thanks

    Plugin Author Takayuki Miyoshi

    (@takayukister)

    I recommend you hire a WordPress expert to overhaul the site. The situation seems to be horrible. I think it’s too much for volunteer supporters to handle.

    Thread Starter pulsarinformatique

    (@pulsarinformatique)

    sorry to repeat the same question but does FLAMINGO only records contact forms 7 entries or does it also record WP account creation ?

    thanks for this answer

Viewing 8 replies - 1 through 8 (of 8 total)
  • You must be logged in to reply to this topic.