[wp-trac] [WordPress Trac] #47462: Someone keeps gaining access to my site as an admin

WordPress Trac noreply at wordpress.org
Sun Jun 2 22:57:09 UTC 2019


#47462: Someone keeps gaining access to my site as an admin
--------------------------+-----------------------------
 Reporter:  madecker12    |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Security      |    Version:  5.2.1
 Severity:  critical      |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 I have a potential hacker (dreamsbadtoyou2 at airmail.cc) that has somehow
 added themselves as an admin to my website. I do not have the box checked
 under general settings that even allows someone to request permission, but
 they were still able to set themselves up as an admin. I took them off,
 checked the box and set the default role to blocked, but they tried again
 and were successful in making themselves an admin. This is a HUGE problem
 that I haven't encountered before and it needs to be addressed
 immediately.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/47462>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list