Hi ubunti
To correctly answer to your question we will need to see your backend and test it to try to replicate the issue, please add then your backend administrator url and a super user account to it.
Take a look HERE Point-5 to see how to keep your info private.
Regards