Forum moderator password was compromised, two months mod access by unauthorized group.

[Shipside]

Given the limited powers of a moderator, can anyone think of anything that could have been done to
compromise a site if a party had moderator access?

AFAIK xenforo mods can only soft delete posts and issue bans.

 

[Paul B]

AFAIK xenforo mods can only soft delete posts and issue bans.

Moderators can hard delete content if they have the relevant permissions.

They can't ban directly, but they can via warning actions (which have to be set up in the ACP).

 

[W.D]

Not much can be done really other than hard delete like Brogan said.

If there was admin perm's then yes things could be done but you've got AG pretty much covered as I see you on top of updates.

(Ps, It's demon from AG lol.)

 

[Kintaro]

the moderator log can give you some more info