Watch Out! Who's Posted Via Your Site?

Hello fellow WA people!

I just wanted to share this in case it helps somebody.

I don't very often (aka never) check the admins for my blog because logically I don't expect them to change; I mean I don't go having admin parties so there's wouldn't be much to get excited about by reading the admin list, would there?

And as I'm the only admin to my site, why would I check it?

So you can imagine my surprise when I logged in to my admin and found another stranger there, registered as an admin to the site. Goodness knows how long s/he's been there.

I deleted the additional uninvited guest and have now discovered paragraph blocks at the end of posts (no idea how many yet) which contain rude content. Luckily, the two which I've found so far were rendered as blocks with errors.

I made a mistake when I deleted the Fake admin: I was asked whether I wanted to delete their 'content' or sign it over to the other admin (me).

Well I had no idea what was going on and I was nervous to press 'delete' in case some of my posts had been assigned to them and half my site would vanish, so I chose to save the content.

Now I know what content they've been spreading I wish I had deleted it! But all is easy with hindsight!

I now need to check the site over and see what else I find lurking in hiding there.

I have no idea how this could happen. It's not from any friends as I've never shared the admin with anybody except with a plugin company - so it must have been hacked through that link? Or maybe they can just hack in even when you don't share it ever?

Anyway, if you can shed some light on it for me, I'd be very interested, and if not, well maybe just keep an eye on your site that there aren't any unexpected guests lurking around!

Cheers!