New to the community? Start here

Automatic posts created with title hello world in my site

On one of my subsite s********n.com I get automatic posts of hello world.
This happened twice. Once the user publishes a new post the Hello World post is published automatically after 1 day.

Wed, 30 Oct 2019 18:59:35
More Defender Pro discussions
Defender Pro
  • Kris Tomczyk
    • Ex Staff

    Hi ticinoWEB

    I hope you are doing good today.

    I made a review of your plugins on this site and also on FTP. I cannot see any plugin or mu-plugin which could have something to do with that. I mean here a feature to re-create default WordPress post.
    This post is created only when a new installation is set up or when a new subsite is created on a multisite installation.

    I see in Defender logs that there are many login attempts for two users (editor & admin) on this site, from many different IP’s.

    I recommend to not only change passwords for those users, but also:
    – Update old security keys in Defender -> Security Tweaks
    – Delete this user and re-create with same email address (this time use different username)
    – Block old user name in Defender -> IP Lockout -> Login Protection -> Banned usernames
    – Set up Mask Login Area in Defender -> Advanced Tools -> Mask Login Area to hide default login slug
    – ask this new user to create new post and check does after 1 day hello world post will be created again.

    Kind Regards,
    Kris