Customers seen as subscribers by WF

  • Resolved evmapa

    (@evmapa)


    5 months, 3 weeks ago

    Hi! During the scans we have a couple of instances where this warning appears: username with ‘subscriber’ access has a very easy password. However, we do not have subscribers. When I check the users they are regular woocommerce customers, no different than any other of our hundreds of customers as far as I can see. Any idea why Wordfence would ping them as subscribers? Thanks!

Viewing 1 replies (of 1 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @evmapa,

    Yes, “Customer” isn’t one of the six WordPress user roles. It’s added by WooCommerce as an equivalent to that of a normal blog subscriber, but with the ability to edit WooCommerce account information and view past or current orders. Wordfence sees them in terms of the permission level they have according to WordPress roles so they’re shown as having “Subscriber access” because they have the lowest permission level on your site.

    Thanks,
    Peter.

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.