For some strange reason I'm getting a number of new registrations on my Wordpress blog and they have administrator capabilities. I've reset all passwords (WP, MySQL). User registration is turned off. Never happened on any other WP sites I have. Anyone have any ideas how this can be stopped?
May seem dumb to ask, but have your double checked the Registration settings under Settings -> General -> New User Default Role? It's usually set to Subscriber, but maybe you have it set to Administrator? That won't solve your problem of them registering, but might explain why they're given Admin access. However the fact that they can register with registration turned off is odd. Are you using any nulled plugins or themes?
Thanks for the tip. I've checked that but all are set to Subscriber. In any case though, registrations are OFF. Indeed very odd! I'm only using standard plugins and a popular theme from Themeforest. Any other tips?
Hmm. Any chance you have bbpress or any other type of plugin that allows for registration? Sometimes they can bypass Wordpress' default registration settings.
Do you have any plugins installed but not active? If not, I can't see how it's either of those plugins, so the next area to look at would be the theme. Have you gone over all the settings to make sure there's nothing something within the theme allowing registrations on a theme-created page or something?