WordPress hacked?

Joel Finlinson joel at finlinson.net
Tue Sep 14 18:00:16 MDT 2010

On Tue, Sep 14, 2010 at 1:41 PM, John Shaver <bobjohnbob at gmail.com> wrote:

> <snip>
> If you don't see the users actually being created in your wordpress
> dashboard, then I would agree with Jonathon, check the mail headers to
> see where the messages are actually originating from.   Also check if
> you have any other wordpress sites installed to your hosting account
> that you may have forgotten about in subfolders or in other domains.
> That's what I see most often.
> -John
The mail headers were the key!  They revealed that the accounts were being
created in a joomla instance that I'd forgotten existed.  I logged in and
found all the users in there.  Thanks for the help.


More information about the PLUG mailing list