[ad_1]
One of my admin has 2Fa enabled but someone keeps using her credentials to make changes and updates to our website. What could be the problem. The activity log doesn’t show she was signed in at the time of those changes.
[ad_2]Copyright © 2020 - 2022, Project DMC - WordPress Tutorials for Beginners- All Rights Reserved. Privacy Policy
Immediately lock the account and see if it continues. Make sure all of your plugins are updated, and you might benefit from running Sucuri to check everything else is OK on your site.
Delete her account and create a new one with a new username. If it happens again, then your site is compromised and needs to be cleaned.
Does anyone use WP-CLI? Some of those commands need a username associated with the CLI action.
What logged her for u to know who it was? That info would help and how frequently the logs mentioned her.