Forty-seven admin accounts, three members of staff
Old agencies, ex-employees and a plugin vendor all still have full control of the site.
Placeholder content — replace before launch.
The symptom
Users → All shows 47 accounts with the Administrator role. The business has three people.
Why it matters
Every one of those is a full-control account, and most belong to somebody who stopped working on the site years ago.
How to check
Log in, go to Users, filter by Administrator, and count.
How to fix
Demote anyone who does not need to install plugins. Delete dormant accounts, reassigning their posts.
When it’s actually fine
A managed host or a maintenance retainer will legitimately hold an admin account. A vendor account that is documented and current is not a problem.