Subscribers have access to plugins!

  • I have two wordpress sites on two different domains. They have pretty much the same setup and plugins but may differ a bit.

    On one site everything is fine, but on the other I noticed a spam bot managed to make an entry in my event list plugin. So I logged in as a regular user (subscriber) and to my horror I noticed I had full access to the event list plugin through the dashboard + it’s showing Yoast plugin widget in the dashboard too.

    Why has this happened? I find no setting to change this anywhere ??

    Please advise.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Thread Starter danniee

    (@danniee)

    I dunno how this happened but suspect it could have to do something with installing the plugin that connects phpbb forum to wordpress. That’s the only thing I can think of that could mess around with permissions. My other site that dont have this permission problem never had that plugin installed.

    I managed to fix some of the permissions with an role access editor plugin, but I still can’t restrict access to certain plugins showing in the admin bar when visiting the site. For example, Yoast is still showing there.

    Thread Starter danniee

    (@danniee)

    I dont know what to do ?? I tried everything. Even tried to remove all data from wp_user_roles in the database and replace it with data from my other working site but it keeps resetting itself.

    Random users can just edit some of my plugins in the dashboard and use Yoast. This is crazy ??

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Subscribers have access to plugins!’ is closed to new replies.