BuddyPress.org

Here’s what I don’t understand: All our recent Spam registrations are completely bypassing the BP registration form. I’ve got a tricky Humanity plugin question on there, as well as several required fields. But when I look at the accounts the spammers are creating, they have none of those fields filled out.

Is there some kind of backdoor registration option in BP or WPMU? How are they getting in?!