alexfc

but when you login, you are using your original username still?

are you using an old version of wordpress?

sounds like a security vulnerability

He’s putting his time in to help people, its easier for him to track them in one place.

Free help? I’d appreciate the fact that hes posted here at all to let searchers know where to look.

I’m not a security expert, but I think we would likely need more details.. such as wordpress version, etc..

Can you not just delete the user?

In the mean time can you use .htaccess (or a control panel feature from your host) to password protect the wp-admin directory so that nobody that isn’t authorized can access it? That may stop them from getting in and changing things for now, but they may have hacked in some other way, or it could be some sort of automated server side thing hes put in place in which this might not help you.

I would also think to change passwords at your host, etc, just incase someone made their way in that way.