Fake registrations as Subscriber

[ashishpatel1992]

Hi,

I dont know how, but some spammers are able to register as Subscriber on our site. How is this possible?

May be they use some POST method where there is no captcha. Can you prevent this? Because after registering they use forgot password page to send spam to that registered email.

Add New Note to this Reply

[Anonymous]

Hi,

Thanks for contacting us.

Maybe you should make the captcha in the forgot password page. In this case, we will try to discuss with our developer about it, if possible, we will add it as soon as possible.

Thanks for your understanding.

Best Regards,

NooTheme

Add New Note to this Reply

[ashishpatel1992]

I think I found why spammers are able to register on our website using this URL and these parameters. They bypass captcha. Please take urgent note of this, because getting lot of fake registrations

URL: https://mywebsite.com/wp-login.php?action=register

array (

'user_login' => 'test',

'user_email' => '[email protected]',

'jm_register_user_role' => 'candidate',

'redirect_to' => '',

'wp-submit' => 'Inscription',

)

Add New Note to this Reply

[tinhbeng]

This reply has been marked as private.

Add New Note to this Reply

[Arnaud]

Hi,

I have the same problem.

Can you please help and tell me how to solve that ?

Tks

Add New Note to this Reply

[Jackie]

Hello.

To avoid the spam registration account. Maybe you should change the wp-login.php URL. That can help you avoid that issue.

https://kinsta.com/blog/wordpress-login-url/

Thanks.

Add New Note to this Reply

[Author]

Posts