deleted users record

  • Hello everyone,
    Yesterday I got an alert from Wordfence informing me that a new Admin user was created which I did not recognised. I immediately deleted this user and updated all the plug-ins. I then noticed that some features of the website were off, but I do not know if it was due to the plug-in updates, or was my site hacked?
    I would like to retrieve information about this deleted user because it could be someone working for our previous site maintenance provider. Can I check this information: user name, user date creation, email account?
    I’m an Admin user and tried to look for this in users section but could not find an option to restore or check deleted users.
    In the meantime, I ran some scans, activated new security plugins, changed passwords and everything seems to be fine with the site, so I feel like we were not hacked; but I would still like to know who this new user was, and how it was created.
    Thanks for your help!

    • This topic was modified 4 years, 7 months ago by Jan Dembowski. Reason: Moved to Fixing WordPress, this is not an Everything else WordPress topic
Viewing 2 replies - 1 through 2 (of 2 total)

  • I immediately deleted this user…

    …I’m an Admin user and tried to look for this in users section but could not find an option to restore or check deleted users.

    When you CONFIRM to delete a user, the user is deleted immediately and permanently: there is no undelete or “restore” function.

    And WordPress does not log user activity by default, unless you specifically install a plugin to do so.

    Thread Starter inezita1

    (@inezita1)

    Hello George,

    Thanks for your quick feedback ! Do you know if there is something else I can do to track this user/’s creation and/or changes done by this user (if any)?
    Inezita

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘deleted users record’ is closed to new replies.