who added the unrecognised/unknown admin user?
-
I just noticed that there is a new administrator level user on my blog. I’d like to know how this user was added without my knowledge.
I am running the latest versions of WP (3.3.1) and plugins.
I had this issue once before, and as an intermediate counter measure I had renamed the wp-admin folder. But since I upgraded to latest versions, I figured I’d solved the problem.
The wp-users table shows the creation date as “0000-00-00 00:00:00”. Also worth noting is that the teh data in the password field does not follow the same pattern as the other users … ie. normal users begin with “$P$B” but this unwelcome user has a different pattern.
It is also worth noting that I don’t allow memberships (anyone can register = false) via the settings page.
Any ideas? Has there been a hack? How would I go about cleaning / preventing this?
- The topic ‘who added the unrecognised/unknown admin user?’ is closed to new replies.