Concern regarding permissions on my site

Your “administrator” is not actually an Administrator, the key being that the role is not capitalized under the “Perfil” column.

It looks like they indeed lied to you, created a custom limited role, and did a rather poor job at it too by not even bothering to capitalize it.

If you are not using Multisite, access your database via phpMyAdmin (most hosting providers offer this in their control panel), go to the wp_users table and find the row for your user_login. Note the ID of this row. Now, go to the wp_usermeta table and find the wp_capabilities row for your user_id. Set the value of this row to:

a:1:{s:13:"administrator";b:1;}

This will give you a real Administrator account, then I recommend that you immediately delete this other person’s account as they are clearly not worth your trust.

Next, you’ll want to look for any sort of custom user role plugins and undo any damage done there.

Finally, for good measure, carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

What I was afraid of. Thanks beforehand for your fast response dear James. I think the situation is even more complicated, the user and password provided for the Host he gave us is not working so:
1. We don’t have access to the wp-Admin.
2. We don’t have access to the c-panel of the host which, is linked to his email address.

Any suggestion you could give us in order to recover our site and control panel?

Best regards,

You’ll need to work on item 2 first. If you don’t have access to the hosting account’s control panel, you could simply lose the entire site in an instant without warning (either due to the “developer” just deleting it, or the bill not being paid).

Once that’s done, follow this guide to reset your WordPress account’s password: https://codex.www.ads-software.com/Resetting_Your_Password#Through_phpMyAdmin (you’ll find phpMyAdmin in your hosting account’s control panel)

Then, follow the suggestion from earlier to make sure that account is a real Administrator.

Thanks dear James, we will get our hands to work to resolve this.