Any known bugs that could cause disappearance of the wp_users table?

First … I assume you have a backup of your SQL to restore from?

It seems odd that you have lost only one table – why not all the tables in the database?

Not Hacked
htaccess rules corrupt / wp supercache / permalinks??
When you say you can’t login .. is there an error? can you get to the password reset screen? /wp-login.php?action=lostpassword

If you think this might be the case, you could start by renaming the plugin folder to old.plugin this will deactivate them all … then update the .htaccess rules and delete all the WP-SuperCache bits.

Can you restore from a SQL backup?
If you think you’ve not been hacked then maybe you need to restore from a backup of your SQL and see if it needs to be optimised / repaired?

If you can use a tool like Sequel Pro or SQLYog you’ll be able to restore from your backup of your SQL dbase.

So you think you were hacked?
Can you change your FTP / sftp account details immediately 🙂

Then you’ll have to restore from a SQL backup …

Now open wp-config.php and delete all the values in SALT and go here to generate new SALTs This will force all users to re-login

I’m going to guess you have PHPMyAdmin (which always has an account called root) and that you can login to PHPMyAdmin from any IP address? — this might explain how someone got in.

Check and change the password. Ask your ISP to block access to PHPMyAdmin except from your IP and get a static IP if you don’t have one already.

Do you have an WordPress Administrator account called Admin and someone guessed the paswords?

There is one hope … your hosting provider might be able to tell you who logged in to PHPMyAdmin and at what time.

Related Posts:

  1. Verifying that I have fully removed a WordPress hack?
  2. If a hacker changed the blog_charset to UTF-7 does that make WordPress vulnerable to further attacks?
  3. Tips for finding SPAM links injected into the_content
  4. What should I do about hacked server?
  5. How can I find security hole in my wordpress site?
  6. How to prevent bot or someone to modify any file automatically?
  7. wp-config.php modified?
  8. Suspicious Files
  9. How to prevent wp-login brute force attack from thousand of different IP? [duplicate]
  10. Malware script in database post table only? [closed]
  11. Verifying that I have fully removed a WordPress hack?
  12. How can I safely hide the fact that my website runs on WordPress? [closed]
  13. My WordPress Websites are always under attack
  14. How to find exploited wordpress plugin [closed]
  15. On new server, site got hacked, permissions a bit strange? Please help
  16. Replace domain in database
  17. Remove hacked code – out of ideas! [closed]
  18. WordPress Database Re-installed (Hacked)
  19. Verifying that I have fully removed a WordPress hack?
  20. Could a user account with a stolen password compromised entire WP site?
  21. how to find the way they hacked my WP site
  22. How to stop repeated hack on header.php of custom theme? [closed]
  23. Is my WP site being hacked?
  24. Should WordPress Add Options to Enhance Security or Leave it to plugin developers? [closed]
  25. WordPress Hacks/Defacing [closed]
  26. What’s the best approach for generating a new API key?
  27. Simplest two-way encryption using PHP
  28. How does the SQL injection from the “Bobby Tables” XKCD comic work?
  29. how fix “this certificate cannot be verified up to a trusted certification authority”
  30. How can bcrypt have built-in salts?
  31. Getting a List of Currently Available Roles on a WordPress Site?
  32. Prevent access or auto-delete readme.html, license.txt, wp-config-sample.php
  33. How safe / sanitized is wp_insert_posts()?
  34. From a security standpoint, should bloginfo() or get_bloginfo() be escaped?
  35. Why are passwords exportable as plain text in WordPress?
  36. How to set up fail2ban with WordFence?
  37. Is there a way to force ssl on certain pages
  38. What is the purpose of having a token in cookies?
  39. How is password strength calculated?
  40. Regular security checks – what steps should be included?
  41. What are the pros and cons of using a custom front-end to retrieve content from a WordPress back-end
  42. WordPress “Site Health Status” trust it or myself for its security advice?
  43. Do Cookies Need to be Sanatized Before Being Saved?
  44. Disable external access to REST API Endpoint
  45. What is the wp-includes/certificates/ca-bundle.crt used for?
  46. Do you need to escape hard coded plain text?
  47. Encrypt emails?
  48. WordPress salts set in config and database
  49. Disallow file edit not preventing plugin install
  50. How to secure WordPress XMLRPC?
  51. Websites defaced by uploading script using theme editor
  52. Does WP show me if I’m logged in from multiple locations?
  53. Has anyone experience w/ WordPress (MultiSite) hidden users (possibly hacked)?
  54. Is it necessary to use esc_url with template tags such as get_permalink?
  55. WordPress Malware Problem help! [duplicate]
  56. Staging Site: Made Public – Security Questions
  57. Best Way to Enable Two Step Authentication
  58. Restrictive File Permissions
  59. Why are xmlrpc.php and wp-cron.php being called so often?
  60. Using esc_html with HTML purifier and CSSTidy: Overkill?
  61. wordfence scan warning on W3 Total Cache [closed]
  62. Is default functions like update_post_meta safe to use user inputs?
  63. No option “I would like my site to be private, visible only to users I choose” in Privacy Settings
  64. How to save iframe tag into a post?
  65. wp-json and what data does it give away?
  66. Is is necessary to use security plugin for wordpress? [closed]
  67. Is wp_kses the right approach in sanitizing this string?
  68. iTheme Security always lockout my account [closed]
  69. Is it sensible to worry about sanitizing admin input in plugin custom CSS?
  70. Renaming install.php for security?
  71. Is it safe use wp_editor in public contact form
  72. Which Versions of WordPress Ship with the Patched TimThumb?
  73. Use global variables or function that returns said variables for site-wide private-ish WP settings?
  74. What can I do when an outside party hacks into my weblog and changes my display name?
  75. Is it safe to give wordpress directories ownership to www-data?
  76. Use Google authentication for pages within a website [closed]
  77. Why does WordPress change a file’s permissions?
  78. Side effects of disallowing *.php requests in production environment?
  79. Outgoing new connection to linked Websites – why?
  80. My Site keeps crashing due to the wp-confg file being deleted
  81. Someone keeps changing my SITEURL (mysql injection or xss?) [closed]
  82. What highest security brake with wordpress and static files?
  83. Spam in WordPress root folder
  84. Has anyone developed a anti-spam plugin to simply allow users to BLOCK whatever they wish to, but one that will also go easy on IP addresses?
  85. HSTS header not being added correctly
  86. how to protect wordpress content from crawler
  87. Cannot access wp admin of WordPress website (security plugin issue) [closed]
  88. Why are the latest visits to my website originating from my own website?
  89. How do I hide WordPress users from security scanning?
  90. Background Updates Not Happening
  91. wp-config.php file and code injection
  92. FORCE_SSL_ADMIN affecting subdomains
  93. What is the best security $_POST method?
  94. My WP site and password was hacked, what to do? [closed]
  95. Bank account number and Sort Code in a form [closed]
  96. checking the form submit in right order
  97. Our security auditor is an idiot. How do I give him the information he wants?
  98. I am under DDoS. What can I do?
  99. SSH keypair generation: RSA or DSA?
  100. WordPress – tracking options
techhipbettruvabetnorabahisbahis forumutaraftarium24eduseduseduedusedusedueduseduedusedus