I've a question about user role in WordPress.
After new user already registered. They can access with superadmin and customer role.
They can access to /wp-admin/, create blog, etc..
For my understanding, new user should get only 1 role, such as "customer".
I tried to investigate in my website. All user were assigned 2 roles: "customer" and "superadmin".
I think my website has been attacked by hacker.
How can I block them and how can I fix the user role issues.
Thank you so much