Someone registered a user account on my site!

Jun 29, 2020 · 1 min read

First of all: Don’t worry, your site isn’t hacked or anything like that. Most likely its just a spam-bot that is registering to your site in an attempt to leave some spam in the comments.

Go to Settings > General and make sure the box for “Anyone can register” is NOT checked. That will prevent anyone from registering a user in the future.

You will notice the default role for these users is “Subscriber”. With that user role you can’t do much besides leaving comments.
Since you’ve turned off user registration you probably also want to make sure that visitors still can leave comments. Go to Settings > Discussion and make sure the box for “Users must be registered and logged in to comment” isn’t check either.