We had an attack on our Wordpress site and the attacker managed to create a new admin user. Fortunatelly they didn't delete the 2 admin users that already existed, so we still had access to our Wordpress dashboard and we managed to delete the attackers' admin user.
Ever since neither of the 2 admin users we already had seem to have normal admin capabilities:
- We get the following message "WordPress 6.3.2 is available! Please notify the site administrator."
- We are unable to update themes and plugins
- We have stopped receiving Wordpress emails on the email address that was originally set
We tried to edit the admin users' capabilities through the user roles tab but even with everything selected there is no change. Any ideas? Thank you