1

Recently, I've started to notice a wpupdateuser user_login in my WordPress databases. Is this correct, or a compromise?

Improve this question
2
  • 1
    That does seem a bit strange. What role does it have?
    – Tim Malone
    May 17, 2016 at 2:10
  • Just checked on this. Role is 'administrator'. I definitely didn't set this user up, so I'm chalking it up to a compromise.
    – JMichael
    Jun 2, 2016 at 18:52

1 Answer 1

Reset to default
2

wpupdateuser does not appear correct. Is it a compromise? Possibly not if you are allowing user registrations. A Google search for wpupdateuser reveals numerous sites where this username appears. Make sure WP and plugins are up to date.

Improve this answer
1
  • Yep, I saw the same thing. Tells me that it's a known issue and other sites are affected. I'm putting together a bash script now that should be able to check through the databases and find any instances, but the table prefix varies, so I'll need to figure out how to get around that.
    – JMichael
    Jun 2, 2016 at 18:54

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.