Replies: 4
We’re having a problem where a couple of times a week I receive a new user registration where they were able to register as an administrator. I immediately delete the accounts when this happens. However, even this week, I had someone change the administrator email address which obviously I immediately changed back. Lastly, when an admin account is created, they go to settings > general and set the drop down for new user registration role as administrator. So, I also have to change that to subscriber. What’s even more odd is that on settings > general, I have new user registrations unchecked so I don’t even know how they’re able to register.
We use event espresso for events so I need to allow users to register but this is worrisome.
How can this be happening and how do I stop it?