Two plugin releases six weeks apart shipped support access without a request the customer could answer — read against their own changelogs and the disclosures.
Four ways to grant temporary admin access to a WordPress site, scored against the same five criteria — including the free plugin that wins for one-off access.
The ticket closed weeks ago and the Administrator account is still there — how to find and remove leftover WordPress access, account and Application Password both.
Rank Math’s plugin created an admin credential without asking. A dated teardown of what happened, and a six-question check for your own support access.
A Rank Math credential nobody consented to, a WPForms token that expired but still worked, and what building support access right actually requires.
GravityKit built TrustedLogin to stop waiting on customer emails for site access. 2,589 support logins since August 2024, dogfooded on its own tickets.