I noticed 2 new blog posts (spam) that were made by a new user that registered on my site but was not enabled or confirmed. The post was made by "administrator" (the posted by link went to my super user profile)? I use CB and registration required email confirmation.
Any idea how this could happen?
Any idea how this could happen?