Mystery Wordpress post drafts surfacing in "All Posts" view

[ericsteuer]

Starting earlier this week, a ton of (very) old draft posts started showing up in the "All Posts" view in our WordPress. We use this view to queue posts up and work on them collaboratively before they launch, so the inability to quickly see what's in the queue complicates things.

Any idea why this happened? Any idea what a good solution might be? cc @victoriaheath

[hugosolar]

My guess with this is there may have been a brute force attack to those old accounts in order to gain access to the WordPress backend but those accounts only have subscriber access which is the lowest privilege set of WordPress so there's nothing to worry about.

What has been done

• I remove users roles to those accounts in order to restrict any kind of privileges for those users

Next steps

• @TimidRobot will investigate if there was an attack (pointer in this ticket creativecommons/tech-support#503)

[kgodey]

Closing this since there's a ticket for further investigation.