• Resolved sbrox

    (@sbrox)


    Hi there!

    So yesterday I had the newest WordPress version (4.7.1) updated in my website. Suddenly, in my Users page appears a certain “debug” user with the email [email protected] as it is an Admin.

    I have no idea why this has happened. I don’t know if it’s an error because of the update or if somebody has entered my website. I would like to know if I should delete it or if I should not.
    Thank you very much.

    • This topic was modified 7 years, 10 months ago by sbrox.
Viewing 5 replies - 1 through 5 (of 5 total)
  • Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    delete it. Check with the other admins to see if one of them created it.

    If not…

    Remain calm and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

    If you’re unable to clean your site(s) successfully, there are reputable organizations that can clean your sites for you. Sucuri and Wordfence are two.

    Hi,

    we found the same issue on our website with WordPress 4.7.3
    We deleted twice the user “debug” and we didn’t create it.
    We are using Sucuri and the plugin didn’t find any malware or anomaly.
    We changed the db user password.

    Do you have any other news about this issue?

    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    Take a deep breath and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

    If you’re unable to clean your site(s) successfully, there are reputable organizations that can clean your sites for you. Sucuri and Wordfence are a couple.

    Hi,

    now my wordpress site is at versione 4.7.5 and last night the user “debug” appeared again.

    I followed all the security measures but this user came back again.

    Does anybody know what’s going on?

    I had this same issue and assumed the worst that I had been hacked.

    So apparently in my case, it was caused by a plugin — Dropbox Full Backup.

    From their support response

    – – – – –
    – – – – –

    This user was automatically created through our backup&restore plugin for maintenance service ONLY.

    ONLY if there is some error in the process of backup or restore. So that we can ensure our services for you without any difficulties and complications. This user has a randomly and highly strong generated password.

    In any case, before we can touch this user, we send an official request to the site owner to get an authorized access. We DO NOT SELL and DO NOT TRANSFER the data of our users/customers/visitors to third parties.

    If you don’t need it – you can simply delete this user and deactivate “maintenance services” in plugin “Settings”.

    Backup & Restore Dropbox Support Team

    – – – – –
    – – – – –

    I never received an “official request” for authorization. This happens with the free and paid version.

    Full thread here:
    https://www.ads-software.com/support/topic/plug-in-created-debug-admin-user/

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Debug user appears as Admin’ is closed to new replies.