Lately on a blog that monitor we've had a huge amount of posts being created under one of the admin users accounts. I changed that password, logged out all other instances, and changed the salt strings in the wp-config file.
The posts kept appearing so I went ahead and deleted that admin user and changed the password to the database.
But.. the posts keep appearing this time with no author specified.
I have wordfence, AIO security firewall, and Sucuri installed as plugins, and none of them report anything.
Has anyone run into this.. or have any ideas how I can sort this?
Thanks