Hi,
Yesterday, we noticed about twice a minute that emails were dispatched about a new account and to reset the password. Numerous accounts were created, too. (I was able to delete them with a program I wrote.).
Yes, hundreds of accounts were created until I disabled sending the emails and redirected the customer login page in .htaccess. The customer login page is now redirected to the home page and no one can log in. We haven’t looked at other forms, yet.
Looking at the pages, the Google reCaptcha v.2 was not present when we it with “I am A Human” checkbox. That checkbox doesn’t show up.
No new plugins or code was added to the site since this started, so it’s not a conflict. Absolutely nothing changed on the site when this started.
Can you help resolve this? We are in the midst of busy season and have numerous customers needing to track orders, etc.
Thank you!
