Today, I found out that a new administrator has been added to my WordPress website. It uses the wadminw username with [email protected] email.
I tried removing that specific user but it just is recreated on my site after a day or two. Has anyone else had the same experience? Please help. Thank you.