title: Wordpress is creating users automatically
body: <p>Recently I have found some new users have been created on my <code>wordpress</code> site, obviously showing my site was hacked.</p>
  
  <p>I cleared all users, changed passwords and checked the database for any hidden users. I even limited the wp-login to my own <code>ip</code> so no one but me can see it.</p>
  
  <p>Today I checked my recent activity and found this: 
  "Wordpress created hdfnfykw (sample@email.tst)"</p>
  
  <p>When I click on the "wordpress", which is a username, it goes to this address:
  <a href="http://www.myblog.com/wp-admin/user-edit.php?user_id=0" rel="nofollow">http://www.myblog.com/wp-admin/user-edit.php?user_id=0</a>
  which is an invalid user, but as far as I can tell, this user is making all of those fake <code>usernames</code>.</p>
  
  <p>Any idea why this would happen? (I also checked my theme files for any code that creates users automatically)</p>
  
  <p>It would be awesome if someone could spare me with some knowledge here.<br>
  Thanks</p>