• Resolved milonguera

    (@milonguera)


    Hi everyone,

    for the third time now I received an email telling me that a new user has registered on my website. When I log into my WordPress dashboard, I indeed see that there is a new user registered – as administrator! Of course I delete them every time and change my password, but it keeps happening. My settings do not allow anyone to register as user, and certainly not as administrator. Has anyone an idea how to handle this problem?

    So far these people haven’t changed anything on my website, but they once changed my password (I changed it immediately), and it’s scary to know that they COULD change anything they liked, especially since I have the website for professional, not private, purposes.

Viewing 12 replies - 1 through 12 (of 12 total)
  • You should go to settings > general. Probably there you have “New user default role” set up as an administrator. Otherwise, you have a plugin that overrides that functionality.

    Moderator Jan Dembowski

    (@jdembowski)

    Forum Moderator and Brute Squad

    My settings do not allow anyone to register as user, and certainly not as administrator. Has anyone an idea how to handle this problem?

    That’s not good. Have you checked that your site may be compromised? Can you share the URL to your site?

    Thread Starter milonguera

    (@milonguera)

    Hey guys, thanks a lot for trying to help me!

    @ditikos: No, my settings say that A) it is NOT allowed for users to register on my website, and B) the default role is “author”.

    @jan: How do I find out if the site is compromised? I am really an amateur in these things. This is the URL: https://www.mareike-enghusen.de/

    Perhaps you should post tha list of the plugins you have on your installation at first.

    Thread Starter milonguera

    (@milonguera)

    Here you go:

    2 Click Social Media Buttons
    Akismet
    Contact Form 7
    Generate Backgrounds
    Generate Copyright
    Generate Disable Elements
    Generate Hooks
    Generate Import Export
    Generate Page Header
    Generate Secondary Navigation
    Generate Spacing
    Generate Typography
    Page Builder by SiteOrigin
    WP Multibyte Patch (no idea where that comes from)

    Thread Starter milonguera

    (@milonguera)

    Another question: is there any way to delete this thread? Otherwise it keeps showing up on Google.

    @milonguera: the moderators don’t delete posts or threads in these forums; they are here for troubleshooting and information for all users.

    You need to determine if your site has been hacked. Carefully follow FAQ My site was hacked – WordPress Codex.

    Then take a look at the recommended security measures in Hardening WordPress – WordPress Codex and Brute Force Attacks – WordPress Codex

    If you can’t do the work yourself, consider looking for a reputable person on https://jobs.wordpress.net/ or https://directory.codepoet.com or https://upwork.com

    (FYI, it’s not a good idea to respond to work offers from random forum users who have read about your issues.)

    Thread Starter milonguera

    (@milonguera)

    Thanks for the answers! Would it be possible just to delete the link to my website from my post? So that it doesn’t show up on Google everytime someone googles my name?

    When a post is made and people contribute answers to an issue, that then becomes part of the community resource for others to benefit from. Deleting posts removes this added value. Forum topics will only be edited or deleted if they represent a valid legal, security, or safety concern. Having a posted site url come up in Google in NOT a serious consequence.

    Thread Starter milonguera

    (@milonguera)

    I am not asking for this post to be deleted. I am just asking for my website address to be removed. I have changed my website completely since I wrote the initial post, so it won’t be of any help anyway.

    Moderator Jan Dembowski

    (@jdembowski)

    Forum Moderator and Brute Squad

    I am not asking for this post to be deleted. I am just asking for my website address to be removed.

    I’m sorry but that is only done in extreme cases.

    https://codex.www.ads-software.com/Forum_Welcome#Deleting_.2F_Editing_Posts

    So that it doesn’t show up on Google everytime someone googles my name?

    Search engine hits are never extreme and your post will not be edited.

    Thread Starter milonguera

    (@milonguera)

    Wow. Doesn’t that seem a bit out of proportion? The additional value of my website link for this post is zero. For me, the fact that it will be forever on Google makes a substantial difference. This is my business website, and I find it problematic that everyone who googles me will read that I have security issues with the website.

Viewing 12 replies - 1 through 12 (of 12 total)
  • The topic ‘Users keep registering on my website as administrators’ is closed to new replies.