This test checks whether Settings → General → Anyone can register is enabled. Open registration can attract spam accounts and unwanted users.
Why it matters
If you do not need public signups (membership, WooCommerce customer accounts, etc.), leave registration off. If you do need it, add CAPTCHA / email verification and keep roles restricted.
How to run the test
- Open WP Security Ninja → Security Tests.
- Run Check if ‘anyone can register’ option is enabled.
- If it fails and you do not need open registration, disable it as below.
Disable public registration
- Go to Settings → General.
- Under Membership, uncheck Anyone can register.
- Click Save Changes.
- Re-run the security test.
