[ad_1]
[ad_2]
Hi all! Any thoughts what could be the cause for the titled situation? Site hacked? đŹ
Some details:
- WordPress + Elementor Pro + Woocommerce + whole bunch of plugins + Limit Login Attempts Reloaded + Really Simple SSL, WP Rocket to name a few
- Was operating on dashboard normally, published a product, left browser open, used Anydesk to work on another computer, went afk. When coming back to do more product stuff, I got the white screen that said roughly "You don't have the permission for this page".
- Maintenance mode and disabling plugins didn't work, then another admin signed in and saw that my user couldn't be found amongst admins. We made another user for me and I saw my role had changed, I switched it back to admin and it's been ok since.
- Hosting is a good quality domestic operator in Finland, Litespeed server, that's all I know about it.
- I installed Wordfence to run a scan but ended up removing it after
- I did see that there are a few suspicious users registered in past couple of days (something like [[email protected]](mailto:[email protected]) and few others), I deleted them.
Am I screwed? Thanks!
Install Wordfence again and run a scan. Report back with the results. It does sound like youâve been hacked.
You can google how to manually add the permissions back from the database assuming that you have access.
Had a clientâs host have RAM fail recently and went through all types of issues, including this one. Accounts lost permissions, Wp_options table kept corrupting and the db had to be âfixedâ. Restored from backup twice. Freaked me out. Limped along⊠debugging/digging into why this could be happening. I told them that it seemed like some type of hardware issue. They hemmed and hawed. Took a week for them to realize the ram had issues. They migrated the site and all was well.
Edit: I should add that it is also Litespeed.
Also, check logs. Turn on the WordPress log in wp_config. Might throw errors you can watch in real time. Itâs kind of how I came to the conclusion it was the hosts issue and not my work. Donât forget to turn it off when youâve reviewed it and see the error patterns. Youâll have quite a large log file if you are forgetful.
Since there are a few others with access to the dashboard, itâs possible that someone might have messed with the WP users. Iâd suggest installing an activity plugin so you can keep track of everything happening on the dashboard. Itâll help you see whoâs doing what and keep things in check.
How to give yourself admin priv’s via the DB manually: [https://www.wpbeginner.com/wp-tutorials/how-to-add-an-admin-user-to-the-wordpress-database-via-mysql/](https://www.wpbeginner.com/wp-tutorials/how-to-add-an-admin-user-to-the-wordpress-database-via-mysql/)