Welcome to the Treehouse Community

Want to collaborate on code errors? Have bugs you need feedback on? Looking for an extra set of eyes on your latest project? Get support with fellow developers, designers, and programmers of all backgrounds and skill levels here with the Treehouse Community! While you're at it, check out some resources Treehouse students have shared here.

Looking to learn something new?

Treehouse offers a seven day free trial for new students. Get access to thousands of hours of content and join thousands of Treehouse students and alumni in the community today.

Start your free trial

WordPress

Stephen O'Connor
Stephen O'Connor
22,291 Points
Posted by Stephen O'Connor
Stephen O'Connor
22,291 Points

How can another user setup a new admin account on my WordPress site?

I designed and built a WordPress website for a client of mine, the client has recently moved host from the host I always use to a new host because of email issues, and the client asked another company to do that for him.

The client then asked me to make changes to the site and when I tried to log in I couldn't, and now today WordFence has sent me a notification to say that a new user - from the other company asked to move the site - has been setup who has administrator privileges.

But what I don't understand is how the other company managed to get access to the admin of the site? I never gave any login details to either my client or the other company.

2 Answers

Christophe Rudyj
seal-mask
.a{fill-rule:evenodd;}techdegree
Christophe Rudyj
Full Stack JavaScript Techdegree Student 13,011 Points
Christophe Rudyj
.a{fill-rule:evenodd;}techdegree
Christophe Rudyj
Full Stack JavaScript Techdegree Student 13,011 Points

One way it could be done would be by editing the wp_users table in the MySQL db and manually granting admin to a user by editing their role

Stephen O'Connor
Stephen O'Connor
22,291 Points
Stephen O'Connor
Stephen O'Connor
22,291 Points

Really? I didn't know that was a possibility. Thanks for clearing that up.