This test checks whether Settings → General → Anyone can register is enabled. Open registration can attract spam accounts and unwanted users.
Why it matters
If you do not need public signups (membership sites, WooCommerce customer accounts, and similar), leave registration off. If you do need it, add CAPTCHA or email verification and keep default roles restricted.
How to run the test
- Open Security Ninja and run the security tests.
- Find the result for the “anyone can register” check.
- If it fails and you do not need open registration, disable it as below.
Disable public registration
- Go to Settings → General.
- Under Membership, uncheck Anyone can register.
- Click Save Changes.
- Re-run the security tests.