A spam email is being sent from my default email([email protected]) to all the subscriber. What may have caused this and how could I prevent this from happening again?

  • Hello and welcome on WPSE. There is not really a direct answer for that question as it, because it can be done from the outside without your knowledge that it is done. Maybe reading answers about such from this link helps you a little more then I could give in an answer..
    – Charles
    Jun 20, 2019 at 18:17

1 Answer 1


Assuming that your site has not been compromised, and that there are not unknown admin-level user accounts, then this could just be a case of mail spoofing. (Where a person places your email address as the 'from', but the email is really being sent by an external process.)

I'd change all credentials (hosting, FTP, admin-level users). Then look for unauthorized admin-level users. I might also create a new admin-level user with a strong password, log in as that user, then change the old admin user to a lower level (subscriber, for instance).

I might also look for evidence of site compromise. Update everything (WP via the Admin, Update screen, themes/plugins manually via FTP). Then look at all folders for files that shouldn't be there (they will have different timestamps because you updated everything). Also check the htaccess file.

And check generated pages page source for unusual code. I created a process to de-hack a site here, perhaps that would be useful to you. (There are many googles/bings/ducks about that subject also.)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.