1. This website uses cookies to improve service and provide a tailored user experience. By using this site, you agree to this use. See our Cookie Policy.
    Dismiss Notice

Website hack? Closed registration but 2 new users with admin rights

Discussion in 'BlackHat Lounge' started by Delboy2424, Jun 4, 2019.

Tags:
  1. Delboy2424

    Delboy2424 Regular Member

    Joined:
    Oct 3, 2009
    Messages:
    484
    Likes Received:
    129
    Location:
    Worldwide
    Anyone shed any light on my WP site - two new registrations have appeared and both have admin rights, registered to throwaway gmail accounts.

    Registrations are closed off, and there is no log in attempt dates on the timestamp
     
  2. jaka1

    jaka1 Newbie

    Joined:
    Jan 5, 2015
    Messages:
    39
    Likes Received:
    2
    Backdoor detected
     
  3. Pepemakingmony

    Pepemakingmony Power Member

    Joined:
    Apr 10, 2018
    Messages:
    726
    Likes Received:
    139
    Gender:
    Male
    Occupation:
    Black Hat CPA for a life
    MySqli?
     
  4. DropshipDave

    DropshipDave Jr. VIP Jr. VIP

    Joined:
    May 5, 2011
    Messages:
    386
    Likes Received:
    272
    Location:
    London, UK
    Home Page:
    Are you using a nulled theme or plugins?
     
  5. Delboy2424

    Delboy2424 Regular Member

    Joined:
    Oct 3, 2009
    Messages:
    484
    Likes Received:
    129
    Location:
    Worldwide
    No paid for.
     
  6. Well my dear.... :D

     
  7. Unreliable Witness

    Unreliable Witness Power Member

    Joined:
    Apr 21, 2016
    Messages:
    681
    Likes Received:
    439
    Out of interest, which ones are they?
     
  8. Ricky.Montana

    Ricky.Montana Jr. VIP Jr. VIP

    Joined:
    May 17, 2013
    Messages:
    1,033
    Likes Received:
    1,059
    Gender:
    Male
    Location:
    Around the World
    Home Page:
    Go to php admin and delete them. Also, delete any nulled plugin or theme and change your admin dashboard credentials.