Plugin enabled but spam subscribers keep registering

  • vaschops

    (@vaschops)


    11 months ago

    Hi..

    Although email verification is enabled ..in a recent attack these last 2 days I got bulk registration of spam users as subscribers.

    Maybe it is the way the plugin works ..allowing users to register, without allowing them to login until they verify their email address.
    Is it?

    Spooky thing is that these users appear in users list.
    I just wanted to ask if it is safe for the plugin to work this way – for users to be able to register but not login until verification – or there is a backdoor somewhere.

    Kind thanks

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Support pickpluginswporgrep

    (@pickpluginswporgrep)

    Hi @vaschops,
    Could you please clarify in which context you want to mark a user spammer? We’ve different settings to handle.

    In your case, you can enable the Delete unverified users option with a timeframe selected. Unverified or subscribed users will be deleted on the given time period.
    Screenshot: https://ibb.co/25PrsCc

    Slightly related to this, what is the difference between Delete interval unverified users and Delete unverified users?

    Say if I’d like that uncorfirmed accounts are deleted after 30 minutes, I put the interval to 30 minutes. But that doesn’t seem to do the job?

    Plugin Support pickpluginswporgrep

    (@pickpluginswporgrep)

    By setting Yes or No under Delete unverified users you can enable or disable the functionality.

    Delete interval unverified users lets you set a custom timeframe to run the task again and again.

    The Delay option is useful for newly registered users so they get a chance to verify.

    To test the functionality please visit the website front-end a couple of times and visit again after the given time period.

    Still not working? Please note these automated tasks are handled by WP-Cron and sometimes they stop. You have to force them to run by scheduling a task. Please read this article to learn more – https://www.cloudways.com/blog/wordpress-cron-job/

    User Verification Cron Event hook – https://i.imgur.com/I6dBX25.png

    Thank you very much for your fast and thorough reply, that explained it!

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Plugin enabled but spam subscribers keep registering’ is closed to new replies.