I'm using the membership plugin on my site naturaltransition.com. It
has started showing some very strange behaviour. I have screen shots
that I can send but if you'd like to test it out for yourself to see
what is going on, please go to
http://naturaltransition.com/members/login/. Earlier today, when I went there, it said
welcome jeanbarclif (Not me and I wasn't logged in). This continued for a few hours but now doesn't happen.
If you then click on the dashboard link it takes you to
reauthorisation page. Then you can use the username test2 with the
password p0ster. Upon doing that, I get a message that I don't have
authorisation to access this page. It's trying to use the wp-admin page upon logon. Then I click the back arrow on my
browser and find that I am indeed now logged in as test 2 and the menu
bar is very, very messed up.
I notice that the whole members area is running very slowly too.
I've uninstalled all plugins except membership to test and the behaviour was unchanged.
I've tried re-uploading all of the membership files over top of the old ones and the behaviour was unchanged.
I've checked the site for malware and it comes back clean. That's not
say it is, just that sucuri.net and timthumb scanner didn't find any. Are you aware of any
malware that exploits the membership plugin?
Is there anything you can suggest to help me out here?
I have a manual backup that I use if I really need to. It will be a bit fiddly. Would rather try and fix the problem if anyone knows what it might be and how I could do it.