I have a number of websites where I have both Wordfence and AIOWP installed. All sites have the same email for notifications and db backup and this email was created solely for this purpose and used for nothing else. This email address is not used anywhere else on the site or in the code except in Wordfence and AIOWP. I don't even use it in WP Settings. I have been going along merrily for many months/year without concern. Within last week or so I have been inundated with spam only on this email address non stop 25-50 per day. I went in and turned off all notification and/or changed email address to a@b.com -- guess what next day spam went from 35-50 down to 2 and today I haven't received any. Huh. Is it possible that someone has figured out how to mine the email address or use the notification system to send spam to the email address listed. Just thought you should know. I will try experimenting by removing one or the other and re-assigning email notification to see if I can narrow down more.
↧
bcwlaw on "[Plugin: Wordfence Security] Wordfence/AIOWP notification email being hacked and spammed"
↧