New user is being created with Admin priveledges

That’s definitely not normal, but if you have a managed WordPress hosting provider, it could be from them, so I recommend checking with them first.

If it’s not from them, carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures and start backing up your site.