Failing to be selective about who gets admin privileges

You wouldn’t give just anyone keys to your car, and you shouldn’t give just anyone the keys to your website. While you may need to provide temporary admin rights to a support team, be mindful of who you give admin rights too.

The fix:

Login to your WordPress dashboard, go to users, and review the roles and permissions for each user. You can also use a plugin like User Role Editor to add additional functionality for restricting access if needed.