Admin Dash board is somehow available for all to view

[redrumintl]

Admin Dash board is somehow available for all to view. I know this problem is attributed to your plugin because when I deactivate it this problem goes away..However I do make alot of changes in the evenings updating content etc and need the plugin activated. However when I now do this my site is completely exposed for others to exploit and change. There should-be and is only 1 Admin “redrumintl” but somehow other visitors can and I think are making changes because random stuff has been disapearing and happening on my site! Please help

https://www.ads-software.com/plugins/w3-total-cache/

[dhira]

I’m also having this problem. It seems as though it catches and caches your dashboard view, and then serves that to the users.

No one can actually use the account though (as far as I have tested), but it is a huge problem because the entire admin bar shows.

If I Empty All Caches it fixes the problem, but it continues to reappear, even for other logged in users (i.e. one page was loading the dashboard of another user)

Edit: Looking at the Plugin interface, there is an option to “Don’t cache pages for logged in users” with the warning:

Unauthenticated users may view a cached version of the last authenticated user’s view of a given page. Disabling this option is not recommended.

I had it unchecked. Assuming enabling it will fix the problem.

[Alfo]

Same issue here even with “Don’t cache pages for logged in users” checked.
Maybe it does not work well together with CDN like Cloudflare?

Reading through the support forum, it seems like not an uncommon issue. Hopefully there is an easy fix to it.

Thanks