New admin user created after your X Pro support: is my site hacked?

Hi there

It seems there was a new user created in my wordpress backend with administrator rights. This happend right after I have given you login credentials on this forum. I deleted the user, now the site is live since a couple of days, and again the same admin user is made.

Did you create a new user admin named TN4Ikgso, or is my site being hacked?

What can I do to check where this user comes from, and how to make sure my site is not hacked?

Thanks

Hey @Woordenaar,

We do not create admin accounts. Have you posted credentials publicly or not use the Secure Note? That might be the case.

If not, it might have been just a coincidence that someone created an account on your site after you’ve posted login credentials here.

As for the tracking, you need to check when the user registered in the wp_users table in the database. You need to match that with your activity logs. You need to contact your web host for this as this is beyond the scope of theme support.

image

Thanks.

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.