jpatrickm on "An admin user was created outside of WordPress"

My Wordfence plugin said: An admin user with the useame wpupdatestream was created outside of WordPress. It's possible a plugin could have created the account, but if you do not recognize the user, we suggest you remove it.
Already a few times I've deleted, repeated, even though I deleted all the plugins (except wordfence) asking for help on how to proceed. Thanks.
http://www.rlisty.eu, http://www.rozhlednarokycany.rlisty.eu

Yes I got two of these also!

I am sorry but you both have been .

You need to start working your way through these resources:

Additional Resources:

Just did a complete check on the site, and nothing is irregular. Ran a Wordfence complete scan on the site also, and it reports no security issues. I think perhaps I must have deleted the user accounts before they did anything.

It does show me how insecure the new WP 4.5 platform is, so, I'll be watching on my other sites.

See https://www.wpwhitesecurity.com/wordpress-security-news-updates/your-wordpress-website-was--by-wp-white-security/

It was not wpwhitesecurity.

Same issue here, 2 days in a row I've received a WordFence email with "An admin user with the useame wpuseradmin was created outside of WordPress." I deleted the users right away, scanned the server, checked folders for any non-wp files and found nothing. No other sites on the server have experienced this. I'm running both WordFence (with new Firewall features) as well as iThemes Security. Not sure where this exteal script is running or how it's getting past all this security.

Thought I'd post here while I continue to search for answers.