Quantcast
Channel: WordPress.org Forums » [Wordfence Security - Firewall, Malware Scan, and Login Security] Support
Viewing all 33239 articles
Browse latest View live

The last rules update for the Wordfence Web Application Firewall was unsuccessfu

$
0
0

Replies: 0

Hello,

I am getting some error from wordfence kindly help.

The last rules update for the Wordfence Web Application Firewall was unsuccessful. The last successful update check was July 17, 2021 4:51 am, so this site may be missing new rules added since then. You may wait for the next automatic attempt at July 31, 2021 5:11 am or try to Manually Update by clicking the “Manually Refresh Rules” button below the Rules list.

Regards
Abhijeet


Spammy Backlinks

$
0
0

Replies: 0

My site was hacked in December apparently and hundreds of spammy backlinks were created of URL’s to non existent pages. I had the site cleaned and I was assure that the problem was fixed but I see on Wordfence these links are still being crawled even though they have 404 errors, months later. My site is also not performing well with Google all of a sudden where I have lost a lot of keywords and serious ranking changes. I currently use a free version of Wordfence and its not picking up any problems. I’m a bit hesitant to spend $500 unless I can tell if the problem is still there else its for nothing? If anyone has had a similar experience please can you let me know. Thanks

Wordfence scan doesn’t work with my litespeed host

$
0
0

Replies: 0

Hello
I tried to scan my website with wordfence but it doesn’t work and stop in the middle of the scan, I searched and understand there is some problem with the lite speed host, I copy this code to .htaccess but didn’t work
<IfModule Litespeed>
RewriteEngine On
RewriteRule .* – [E=noabort:1, E=noconntimeout:1]
</IfModule>

Modified plugin warning on Wordfence after marking it as fixed

$
0
0

Replies: 0

This file was modified, I THINK by the creator of Watu Quizes, to fix a problem with it not showing up on Namaste. The only change on Lin3 42 of the file where WordPress was changed to “wordpress” (lower case). I have repeatedly marked the file as fixed, but everytime a new scan runs, it appears again. I´ve tried just ignoring it, but it continues to show up. I do not want to uninstall the plugin and reinstall it, because it may revert to the problem that was fixed by the creators of Watu Quizes. How can I make it disappear from Wordfence, never to appear again?

I am running WP Ver. 5.8
PHP: 7.4.21
Wordfence Ver. 7.5.4
Watu Quizes Ver. 3.3.0.1
All with autoupdates enabled.

Thanks.

alfacgiapi , hacked , files not detected by Wordfence

$
0
0

Replies: 0

hi there,

I’ve been hacked (my entire server) using the alfacgiapi script put into the upload folder of my wordpress site. Even with the script in place, wordfence was not able to detect the files as a malware…. reason why ?

thanks

Diagnostics Error (connect back)

$
0
0

Replies: 0

In the WordFence Diagnostics, I see the following error

wp_remote_post() test back to this server failed! Response was: 403 Forbidden
This additional info may help you diagnose the issue. The response headers we received were:

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Wed, 28 Jul 2021 16:39:00 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 e9a02c3aa85d921b20debfa4cdea5e4.cloudfront.net (CloudFront)

And the HTML:

<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)

What is causing this error? Everything looks correct, and I can access the site fine

Fontawesome

$
0
0

Replies: 0

You don’t need to include Fontawesome on the front end. Please fix this.

Limit login attempts reloaded

$
0
0

Replies: 1

Hi ‘LimitLogin Attempts Reloaded’ came bundled in to my website provided either by my host or the theme I’m not sure which. Is it a good idea to have this plugin running at the same time as wordfence or is it advisable to disable / delete this plugin ?
Thanks


Can’t Run A Scan

$
0
0

Replies: 0

WordPress 5.8
Wordfence 7.5.4

When I attempt to run a scan I get the following message:
Scan Failed
The scan has failed to start. This is often because the site either cannot make outbound requests or is blocked from connecting to itself.

I checked the diagnostics and found this:
wp_remote_post() test back to this server failed! Response was: 400 Bad Request
HTTP/1.1 400 Bad Request
Date: Wed, 28 Jul 2021 14:20:56 GMT
Server: Apache
X-Robots-Tag: noindex
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Upgrade: h2,h2c
Connection: Upgrade, close
Content-Length: 1
Content-Type: text/html; charset=UTF-8

0

I tried deactivating all plugins except Avada Core but I still couldn’t start a scan.
I tried removing everything but the bare essentials from the .htaccess file

Can’t get rid of annoying alert

$
0
0

Replies: 0

Vaguely recall having to deal with something like this awhile back (from Wordfence). Don’t recall the solution.

Dismissing it does nothing since it’ll just pop up anew.

“The last rules update for the Wordfence Web Application Firewall was unsuccessful. The last successful update check was July 19, 2021 4:59 pm, so this site may be missing new rules added since then. You may wait for the next automatic attempt or log into the parent site to manually update by clicking the “Manually Refresh Rules” button below the Rules list.”

Fatal error BLOCK in WIdget area 2 sites

New Users who have never logged in are hidden from Users List

$
0
0

Replies: 0

It would appear that new users who have never logged in are hidden from Users List in the backend, including when you search.

This is the query that I discovered with

SELECT SQL_CALC_FOUND_ROWS wp_users.ID
FROM wp_users
INNER JOIN wp_usermeta
ON ( wp_users.ID = wp_usermeta.user_id )
WHERE 1=1
AND ( wp_usermeta.meta_key = ‘wfls-last-login’ )
AND (user_email LIKE ‘%me@mydomain.com%’
OR display_name LIKE ‘%me@mydomain.com%’)
ORDER BY wp_usermeta.meta_value DESC
LIMIT 0, 20;`

I use the Ezoic advertising platform to place adverts on my site

Couldn’t complete the scan

$
0
0

Replies: 0

Dear Team,

I am having issues with completing the scan I have copied the log data and pasting here. Kindly help me to fix this. It was showing found loop or something.

[Jul 31 11:01:00:1627714860.976037:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=1d4e90abd7892cd0438d99c90c5f0fbfffa9a9921f3f6acbd082027fabd6bf7f966d5ae66c678e07f696c4bdc6ba53b38ea9bc1997f127371e380e30ce21c54e8f059dce11ea5b1eeb234dea0ab3a4c5&s=eyJ3cCI6IjUuOCIsIndmIjoiNy41LjQiLCJtcyI6ZmFsc2UsImgiOiJodHRwczpcL1wvaG9iYnlzcG9ydHpkdWJhaS5jb20iLCJzc2x2IjoyNjg0NDM4MzksInB2IjoiNy40LjIxIiwicHQiOiJjZ2ktZmNnaSIsImN2IjoiNy43Ny4wIiwiY3MiOiJPcGVuU1NMXC8xLjAuMmstZmlwcyIsInN2IjoiQXBhY2hlIiwiZHYiOiIxMC40LjIwLU1hcmlhREIiLCJsYW5nIjoiIn0&betaFeed=0&action=resolve_ips
[Jul 31 11:01:00:1627714860.358664:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/stats.json
[Jul 31 07:05:41:1627700741.633283:4:info] Scan process ended after forking.
[Jul 31 07:05:39:1627700739.437994:4:info] Starting cron with normal ajax at URL https://hobbysportzdubai.com/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=custom&cronKey=a51b1c0106285607d599f2ea27a51bcc&signature=eecd2bf91b4c7251773c1cf4f101a702b46d35fdb4365a7b49603147b3b68a91
[Jul 31 07:05:39:1627700739.370085:4:info] Test result of scan start URL fetch: array ( 'headers' => Requests_Utility_CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'date' => 'Sat, 31 Jul 2021 03:05:37 GMT', 'server' => 'Apache', 'x-powered-by' => 'PHP/7.4.21', 'x-robots-tag' => 'noindex', 'x-content-type-options' => 'nosniff', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'cache-control' => 'no-cache, must-revalidate, max-age=0', 'x-frame-options' => 'SAMEORIGIN', 'referrer-policy' => 'strict-origin-when-cross-origin', 'upgrade' => 'h2,h2c', 'vary' => 'User-Agent', 'content-length' => '12', 'content-type' => 'text/html; charset=UTF-8', ), )), 'body' => 'WFSCANTESTOK', 'response' => array ( 'code' => 200, 'message' => 'OK', ), 'cookies' => array ( ), 'filename' => NULL, 'http_response' => WP_HTTP_Requests_Response::__set_state(array( 'response' => Requests_Response::__set_s
[Jul 31 07:05:36:1627700736.994172:4:info] getMaxExecutionTime() returning config value: 20
[Jul 31 07:05:36:1627700736.952732:4:info] Got value from wf config maxExecutionTime: 20
[Jul 31 07:05:36:1627700736.911813:4:info] Calling startScan(true)
[Jul 31 07:05:36:1627700736.302026:4:info] Entered fork()
[Jul 31 07:05:36:1627700736.262244:4:info] Calling fork() from wordfenceHash with maxExecTime: 20
[Jul 31 07:05:35:1627700735.995342:4:info] Scanning: /home/hobbysportzdubai/domains/hobbysportzdubai.com/public_html/wp-content/uploads/2021/01/5863_1-150x150.jpg (Mem:168.3M)
[Jul 31 07:05:35:1627700735.811718:4:info] Scanning: /home/hobbysportzdubai/domains/hobbysportzdubai.com/public_html/wp-content/uploads/2021/01/5863_1-100x80.jpg (Mem:168.3M)
[Jul 31 07:05:35:1627700735.536307:4:info] Scanning: /home/hobbysportzdubai/domains/hobbysportzdubai.com/public_html/wp-content/uploads/2021/01/5863.jpg (Mem:168.3M)
[Jul 31 07:05:35:1627700735.344238:4:info] Scanning: /home/hobbysportzdubai/domains/hobbysportzdubai.com/public_html/wp-content/uploads/2021/01/5863-800x510.jpg (Mem:168.3M)
[Jul 31 07:05:35:1627700735.167639:4:info] Scanning: /home/hobbysportzdubai/domains/hobbysportzdubai.com/public_html/wp-content/uploads/2021/01/5863-768x614.jpg (Mem:168.3M)
[Jul 31 07:05:34:1627700734.893566:4:info] Scanning: /home/hobbysportzdubai/domains/hobbysportzdubai.com/public_html/wp-content/uploads/2021/01/5863-500x400.jpg (Mem:168.3M)
[Jul 31 07:05:34:1627700734.734995:4:info] Scanning: /home/hobbysportzdubai/domains/hobbysportzdubai.com/public_html/wp-content/uploads/2021/01/5863-300x240.jpg (Mem:168.3M)
[Jul 31 07:05:34:1627700734.459605:4:info] Scanning: /home/hobbysportzdubai/domains/hobbysportzdubai.com/public_html/wp-content/uploads/2021/01/5863-200x200.jpg (Mem:168.3M)
[Jul 31 07:05:34:1627700734.309372:4:info] Scanning: /home/hobbysportzdubai/domains/hobbysportzdubai.com/public_html/wp-content/uploads/2021/01/5863-150x150.jpg (Mem:168.3M)
[Jul 31 07:05:34:1627700734.125372:4:info] Scanning: /home/hobbysportzdubai/domains/hobbysportzdubai.com/public_html/wp-content/uploads/2021/01/5863-100x80.jpg (Mem:168.3M)
[Jul 31 07:05:33:1627700733.749705:4:info] Scanning: /home/hobbysportzdubai/domains/hobbysportzdubai.com/public_html/wp-content/uploads/2021/01/5862_1.jpg (Mem:168.3M)
[Jul 31 07:05:33:1627700733.672646:2:info] Analyzed 27300 files containing 492.92 MB of data so far

False Blacklisted IP Address

$
0
0

Replies: 0

I keep getting a High Severity issue of:
“Your site IP address ***.**.***.*** is blacklisted by a spam filtering service
Type: Spam”

First, the IP address that appears in the issue alert, I have no idea where it is from, it is not my domain’s IP address.

But if I check my domain “precisioncourt.com” in https://check.spamhaus.org/, it is not blacklisted. Not sure where Wordfence is picking up this issue from. I definitely do not want my website to be blacklisted. Any pointers would be great!


Scan Engine Error: The signature … is invalid.

$
0
0

Replies: 0

Hi there,

When trying to run a scan I am presented with the following message:

Scan Failed

The scan has failed to start. This is often because the site either cannot make outbound requests or is blocked from connecting to itself.

Having tried the troubleshooting suggestions without success I activated debugging and found this line towards the end:

[Jul 31 08:15:27] Scan Engine Error: The signature on the request to start a scan is invalid. Please try again.

I’d appreciate any suggestions that you may have as to what to try next.

Thanks,
Richie

Please reset my 2FA

$
0
0

Replies: 0

Hello.
I have a problem connecting to Wordfence Central. My old phone is bricked and in the new one Microsoft Authenticator doesn’t list Wordfence so I can’t get the code. Since I’ve been stupid, I didn’t download the recovery codes (or maybe I have lost them somewhere in my hard drives (just can’t find them).
How can I provide you my credential so you can identify my account?
Thank you

Don’t have recovery codes, can’t login to WordPress Central

$
0
0

Replies: 0

Good afternoon,

My previous phone stopped working (I could barely use the touch screen), and so I was unable to transfer over my accounts from my authentication app to my new phone. I also did not take down the recovery codes due to my own mistake.

Fast forward, I am unable to login to WordPress central and work on my website. I would appreciate the assistance. Thank you!

Cant log in – fatal error

$
0
0

Replies: 0

Hosting client. Designs and maintains her own site but gets this fatal error when trying to login. I disabled WF plugin from the backend and we can log in fine.

<!-- colette hazelwood wordfence error on login page --> 

Fatal error: Uncaught Error: Class 'WordfenceLS\Controller_CAPTCHA' not found in /home/xxxxxxxxxxxxxxxxxxxxx/public_html/wp-content/plugins/wordfence/modules/login-security/classes/controller/wordfencels.php:219 Stack trace: #0

/home/xxxxxxxxxxxxxxxxxxxxx/public_html/wp-includes/class-wp-hook.php(303): WordfenceLS\Controller_WordfenceLS->_login_enqueue_scripts('') 

#1 /home/xxxxxxxxxxxxxxxxxxxxx/public_html/wp-includes/class-wp-hook.php(327): WP_Hook->apply_filters('', Array) 
#2 /home/xxxxxxxxxxxxxxxxxxxxx/public_html/wp-includes/plugin.php(470): WP_Hook->do_action(Array) 
#3 /home/xxxxxxxxxxxxxxxxxxxxx/public_html/wp-login.php(114): do_action('login_enqueue_s...') 
#4 /home/xxxxxxxxxxxxxxxxxxxxx/public_html/wp-login.php(1299): login_header('Log In', '', Object(WP_Error)) 
#5 {main} thrown in /home/xxxxxxxxxxxxxxxxxxxxx/public_html/wp-content/plugins/wordfence/modules/login-security/classes/controller/wordfencels.php on line 219

There has been a critical error on this website. Please check your site admin email inbox for instructions.

Any advice???

mysqldump error: 145 wp_wfHits’ is marked as crashed

$
0
0

Replies: 0

mysqldump: Got error: 145: Table ‘./dataname@002ecom/wp_wfHits’ is marked as crashed and should be repaired when using LOCK TABLES

When we want to backup database to databasename.sql, it show a error as above.
We delete the wordfence but the problem still exist.
What can we do? Thank you so much!

Viewing all 33239 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>