Quantcast
Channel: WordPress.org Forums » [Wordfence Security - Firewall, Malware Scan, and Login Security] Support
Viewing all 33346 articles
Browse latest View live

Update plug-in

$
0
0

Replies: 1

Wordfence is telling me to update a plugin [WPCodeLite] that i don’t have installed, what should i do?


Where is license being saved?

$
0
0

Replies: 1

I have multiple websites that I recently migrated to a new server. Unfortunately i had to delete the wordfence tables in the databases due to structure that the new database would not import. I’m attempting to reinstall and got a new license, but the plugin can’t save the license. I’m guessing the license is not being saved in the database. Thus where in the WordPress install is it trying to be saved?

Cannot activate 2FA on my account

$
0
0

Replies: 2

I’ve made numerous attempts to activate 2FA on my account and encountered the same error message each time. Here are the steps I followed:

  1. I scan the QR code on the 2FA setup page using the Google Authenticator app on my phone
  2. A Wordfence listing is added to my authenticator app and I enter this code into the box on the 2FA setup page that says “Enter the code from your authenticator app below to verify and activate two-factor authentication for this account.”
  3. I click the activate button
  4. I get this error message: “The code provided does not match the expected value. Please verify that the time on your authenticator device is correct and that this server’s time is correct.”

I’ve troubleshooted all of the obvious issues I could think of, for example, verifying that the time on my device and the server are correct, entering the code as quickly as possible after it’s refreshed to make sure it’s not somehow expiring before I click the activate button, triple checking that I’m entering the code correctly, deleting the Wordfence entry in my authenticator app and restarting the setup process, letting codes refresh after I get the error message and trying several of them in a row. At this point, I have tried the setup process many times over the past year and have always encountered the same issue. Everyone else who has an account on my WordPress site has been able to successfully set up 2FA without encountering this issue.

Product suggestion: Wildcards in Brute Force Protection

$
0
0

Replies: 2

I was wondering if the use of wildcards can be added to the “Immediately block the IP of users who try to sign in as these usernames” in the Brute Force Protection section? I’m getting hundreds of notifications about users with names that start with xtw and then some random digits (like xtw183874f01) and I’d like to just create a rule that blocks anyone that tries to log in using xtw*. Thank you.

503 error after entering 2FA Code

$
0
0

Replies: 1

I’ve had Wordfence (free) plugin installed on my WordPress site for years without any issues, today when I tried to log in to my site I would enter my user name and password and then would get prompted for my 2FA code. After entering the code I would get a 503 Error – Service Unavailable – The Server is temporarily busy. Try again later. I tried logging in multiple times over the next couple of hours with the same result.

I then, enabled PHP logging to see if the issue was with PHP and nothing so it happening somewhere before that. I then manually disabled the Wordfence plugin and was able to get in without any issues. I have auto update on both my WordPress install and my plugins so they are both on the current versions (6.8.1 & 8.0.5).

I would like to reenable the plugin and keep using it, but and looking for a resolution first… Anyone have any ideas???

Unable to get a free license

$
0
0

Replies: 0

Different behaviours on two WordPress sites.

On the first web site, I’ve just installed the Wordfence Security plugin (i.e. for the first time).
As soon as I activate it, I see the “GET YOUR WORDFENCE LICENSE” button.
The button links to https://www.wordfence.com/plugin/registration/<longcode>.
Clicking on the button brings up the Wordfence web site and I see the “Get a Free License” button.

On the second web site, I’ve just re-installed the Wordfence Security plugin (i.e. tried many times).
As soon as I activate it, I see the “GET YOUR WORDFENCE LICENSE” button.
The button links to https://www.wordfence.com/r/<code>/products/pricing.
Clicking on it brings up the Wordfence web site and I see the “Download Now” button.

Any idea?

Other users are suffering the problem. See:
https://wordpress.org/support/topic/unable-to-create-free-licenses-for-new-sites/
https://wordpress.org/support/topic/impossible-to-have-a-free-license/

2FA QR Code not showing

$
0
0

Replies: 1

Hi!
I’m trying to setup 2FA for my users on my web site, but when I go at the user settings to setup it, the QR Code doesn’t show to make scan. You can check it on link below:
https://prnt.sc/BasZ-ZgBgQs1

Scan process ended after forking

$
0
0

Replies: 3

Hello,

I have installed wordfence a site and after completing all the “Scan process ended after forking” ideas to get it working the scans still fail. Support email sent.

Any further suggestions?

Thanks


IP Blocking with Wordfence Central Templates

$
0
0

Replies: 0

Is it possible to block an IP address or addresses using a template in Wordfence central and push it out to all managed sites and if not why?

Premium license showing as free version after installation

$
0
0

Replies: 1

Hello admins

We have bought 3 years premium license today, before that we have installed free license to check. Few hours later we bought premium version for 3 years.

Now trying to update our license, it is showing as Free version installed.

can admins help us in this regd

Receiving 503 Error Upon Admin Login

$
0
0

Replies: 0

Greetings – first of all thank you for a fantastic security solution – we’re a non-profit org and have been using your free version of WordFence for years.

Our issue is that upon login via our core admin account, we are receiving a 503 error:

  • It is not affecting public service
  • We have not made any changes to our site settings
  • Disabling the WF plugin (via renaming the WF folder) allows us to access. We then immediately reactivate the plugin (this was tested with all other plugins disabled).
  • We have a second site (identical WF settings and same host) which is not experiencing this issue.
  • Checking the ‘Live Traffic’ report I see no ‘503’ responses attached to my IP – rather it is displayed as a successful 200 response.
  • We have also cleared all host-related caches (we are not using a plugin), and have had our site’s ram increased.

Searching this support site and beyond I see there’s been recently reported similar issues but no clear solutions – would you have any recommended next steps to trouble-shoot?

Thank you!

503 Errors when WordFence plugin active

$
0
0

Replies: 0

STARTING NEW THREAD AS REQUESTED BY WORDFENCE. see original text below.

I am having the same issue today with 3 of my websites. 1 Premium version and two on the free version. I do not use 2FA.

Here is what I know after an hour with server support they have come to the conclusion it is Wordfence causing the problem. Here is what I know so far.

  • You cannot login via wp-admin 503 error Service Unavailable The server is temporarily busy, try again later!
  • You can login via Cpanel to get to wp-dashboard.
  • If you deactivate the plugin from plugin page you get 503- it will not deactivate.
  • If you try to update any other plugins eg: Yoast SEO, you get this error under the plugin update link. “Update failed: <!DOCTYPE html> 503 Service Unavailable @media (prefers-color-scheme:dark){body{background-color:#000!important}} 503 Service Unavailable The server is temporarily busy, try again later!”
  • If you deactivate Wordfence by renaming the file, you can then not reactivate it you just get a 503  page error:  But having it deactivated fixes all the problems above.
  • I updated all plugins on one of my sites and still same issue.

My hosting provider is “Digital Pacific” don’t know if its somehow coincidental other are on the same host? However they say its the plugin.

Now here is the crazy part I have another 3 websites on another host with similar plugins and Elementor Hello theme and they have no issues logging in or updating?

error 500 website crash

$
0
0

Replies: 0

after performing a malware scan some of the wordfence code was deleted causing a 500 error on my website and crashing the site

Unable to connect site to Wordfence Central because of Cloudflare

$
0
0

Replies: 2

Hi,
I have two WordPress sites behind Cloudflare, using a free account.
I’ve added one of them to the Wordfence Central without problem, but the others returns the error:
We’ve detected CloudFlare blocking our requests to your site. For help on resolving this issue, see our troubleshooting connection issues article here.
I’ve followed all the steps on https://www.wordfence.com/help/central/connect/#troubleshooting-connection-issues and even added other IP addresses from https://www.wordfence.com/help/advanced/#servers-and-ip-addresses.
But the error is still there.
Can you help me please?

Error 53 admin login

$
0
0

Replies: 0

Starting a new thread as requested by admin. Here are our issues

Suddenly unable to login via wordfence 2FA admin login. Error 503 appears.

Webhost is Stablehost. They state that issue is from the plugin after troubleshooting and increasing allocated server resource for website to no avail.

Only way to login is to rename wordfence folder thus disabling wordfence.

Tried deleting plugin and reinstalling. After new install, Error 503 comes up when trying to activate plugin.


Wordfence not sending all notification emails

$
0
0

Replies: 0

I’m having an issue on my client’s site where not all Wordfence alerts are being sent. In the settings, all of the alert emails are checked to be sent, including when administrators log in. The only emails I’m receiving from Wordfence are the weekly digest emails.

I have ruled out SMTP issues. The Wordfence test emails are sending and all other transactional emails from the site are being sent and delivered. I also monitor using WP Mail Log and the only Wordfence emails showing up in the log are the weekly digest emails – no administrator login emails or any other alert emails that are enabled in the settings.

I’ve also tried changing the alert recipient email address, and re-doing the settings, with no luck.

This issue started suddenly after April 17 2025. Nothing has changed on our end with server or SMTP.

I’d love some help!

How Can i set up my firewall protection to be at 100%

$
0
0

Replies: 1

I want increase my firewall protection from 84 to 100%, I was recently subjected to a brute force attack over the weekend and any assistance on what settings i can apply to prevent a similar attack happening would be helpful.

Redirected to spam when I reload a page.

$
0
0

Replies: 0

I’ve been having this problem for a while. On certain pages [it doesn’t seem to happen with the home page], when i reload the page it gets redirected to spam. It doesn’t happen all the time and is more common when using cellular modes. I’ve been using Wordfence [free] for a while [a month or so] and it doesn’t find a problem. The problem has been stable for the last 3 months or so. I don’t mind upgrading, but I’m concerned the issue may not be found if I do. Another malware provider found one hacked file and requires an upgrade to fix, so i’m trying to determine which is best.

A potentially unsafe operation triggered on GravityForm entry

$
0
0

Replies: 0

Hello

I’d be grateful for some advice please.

WordFence is showing ‘A potentially unsafe operation has been detected in your request to this site’ screen when certain text is entered in a GravityForm paragraph field. Specifically, the triggering text is the combination of the word data followed by a colon in the following paragraph:

“Her impact is further evidenced by key performance data:”

I was wondering if it’s safe or advisable to tick I am certain this is a false positive to allowlist the action?

Thank you for your time.

Regards, Ash Whitney

Wordfence Error: Website showing white page even after disabling wordfence.

$
0
0

Replies: 0

I seem to have accidentally deleted user.ini in wordfence in dashboard and got a white page. Now I can’t access the dashboard and the website shows a white page. I have disabled the plugin from cpanel and i’m still getting the white page. How do I get it back online please?

Warning: Unknown: Failed to open stream: No such file or directory in Unknown on line 0

Fatal error: Failed opening required ‘/home/igxkzcu07wpm/public_html/wordfence-waf.php’ (include_path=’.:/opt/alt/php81/usr/share/pear:/opt/alt/php81/usr/share/php:/usr/share/pear:/usr/share/php’) in Unknown on line 0.

Now i want to just get it back online.

Viewing all 33346 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>