Quantcast
Channel: WordPress.org Forums » [Wordfence Security - Firewall, Malware Scan, and Login Security] Support
Viewing all 33132 articles
Browse latest View live

problem accesing to dashboard

$
0
0

Replies: 0

I can’t access to the dashboard with the wordpress top menu. Every time that I try to edit, create or access the dashboard using the wordpress menu I get a blank page with “not available”.

I’ve deactivated all the firewall options and deleted Wordfence but I still having the problem.

It worked fine before to installing Wordfence.
Any help to solve it, please?

thanks.


Strange update request

$
0
0

Replies: 0

Usually in Wordfence, when a plugin needs an update it looks like Plugin “nameofpluginhere” needs an update. This morning I’m getting ones that look like Plugin “” needs an update. Is that unusual? I’ve reached out to the plugin developer, too, but thought I’d see if anyone else is experiencing this.

require_once(wfAPI.php) Error on Log In Page

$
0
0

Replies: 0

Our WordPress admin area was working fine and then all of a sudden today we get the following error when trying to access the log in page. The front end still works.

Warning: require_once(wfAPI.php): failed to open stream: No such file or directory in /home/tomfin2/website.ca/wp-content/plugins/wordfence/lib/wfScanEngine.php on line 4

Fatal error: require_once(): Failed opening required ‘wfAPI.php’ (include_path=’.:/usr/local/lib/php:/usr/local/php5/lib/pear’) in /home/tomfin2/website.ca/wp-content/plugins/wordfence/lib/wfScanEngine.php on line 4

Does anyone have any idea what may have changed? WordFence was upgraded to 6.3.3 on the 10th but we have used the site since then.

How to fix Error while sending QUERY packet

$
0
0

Replies: 0

Hi,
The first thing I wanted to thank you for the great work you do with Wordfence.
I would appreciate it if you advised me how I can solve the following error that shows me Wordfence:
Warning: Error while sending QUERY packet. PID=5449 in /home/admin/web/lovescupones.com/public_html/wp-includes/wp-db.php on line 1877

Thanks,

Best regards,

Mike,

Wordfence Login Security Ultimate Member Plugin

$
0
0

Replies: 0

Hello,

I have installed the Ultimate Member Plugin https://srd.wordpress.org/plugins/ultimate-member/ and Wordfence. I set in WF Login Security Options, and tried out with wrong passwords. After 5 Times wrong password i get the WF Page “You are temporary locked out”. When i after go to my Login Page, and enter the User with the correct password i can login without any problem…, this should not be..

I checked in Live Log the IP Address, and its the correct Address.

Is there a way to get Wordfence and Ultimate Members Plugin working together?

Thx
Best regards
Sally

Need verification on Possible XSS False positive with ActionNetwork.org

$
0
0

Replies: 1

Hi Wordfence Support,

I received a XSS Attack Notification last week (March 7th 2017) originating from an embedded ActionNetwork.org inquiry/petition form. To embed this form on the website, we need to place a script in the text editor. We’d really like to use this service, however I need to verify as to whether this XSS attack warning is a false positive or not. The error I received states…

109.199.113.16 (United States)

Blocked for XSS: Cross Site Scripting in query string: data=<link href=’https://actionnetwork.org/css/style-embed.css’ rel=’stylesheet’ type=’text/css’ /><scrip\xea

How can I verify this is a real XSS attack or a potential vulnerbility? Tech support at ActionNetwork.org claims this is a false positive. Thanks for your help. Best regards, Peter

Getting Scan Error Message

$
0
0

Replies: 0

I’ve been getting the following error message when a scan run on my site:

Fatal error: Maximum execution time of 30 seconds exceeded in /home/content/54/2776154/html/XXXX/wp-content/plugins/wordfence/lib/wordfenceScanner.php on line 312

Also, it keeps skipping this scan: Checking for the most secure way to get IPs

This just started happening. How do I fix?

Thank you.

403 forbiden

$
0
0

Replies: 0

I use Ajax Lite Search Pro and when I save one page I get this error

error page

Why?


* Scan Time Limit Exceeded

$
0
0

Replies: 0

All of the sudden I started getting this email alerts with * Scan Time Limit Exceeded.

What changed with the latest version? it never had this issue before.

Thank you

Idea: auto add invalid user names to block list

$
0
0

Replies: 0

Hi,

Here is an idea.
One of my websites was under attack by someone who used an invalid username. So I received a warning email saying “Used an invalid username ‘xyz’ to try to sign in.”

Great that this user was blocked automatically, but seconds later they try again from another IP, and again, and again, and again… and I keep on receiving a warning email.

So I then added that invalid user name to the options field “Immediately block the IP of users who try to sign in as these usernames”, and the email warnings stopped. Then they tried a few other user names which I all added to the block list.

Now my idea/request is to have an option to automatically add invalid usernames to the block list at “Immediately block the IP of users who try to sign in as these usernames”. That way, people who are guessing passwords are blocked right after the first guess without me having to add that username manually to the block list.

Thanks!
JP

genereting pdf invoice problem after updating wordfence

$
0
0

Replies: 0

Hello,

after update I have problem genereting invoices (Woocommerce PDF Invoice plugin).
I got this message:
“Error message detected – PDF file generation aborted.

unpack(): Type V: not enough input, need 4, have 0
File: ……./public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/storage/file.php
Line: 318

When I deactivete “Extended Protection” it seems to be OK (PDF invoice plugin works just fine), but I’m not sure if I want to leave it deactivated.

Wordfence could not get an API key

$
0
0

Replies: 0

Wordfence could not get an API key from the Wordfence scanning servers when it activated. You can try to fix this by going to the Wordfence “options” page and hitting “Save Changes”. This will cause Wordfence to retry fetching an API key for you. If you keep seeing this error it usually means your WordPress server can’t connect to our scanning servers. You can try asking your WordPress host to allow your WordPress server to connect to noc1.wordfence.com.

1) Server has whitelisted noc1.wordfence.com.

2) When I try to “Save Changes,” I get this error: Please enter a number for the amount of Live Traffic data to store.

3) When I enter a number for the amount of Live Traffic and click “Save Changes,” I get this error: You selected a config option that requires a page reload. Click the button below to reload this page to update the menu.

4) I click Reload Page and am back to where I started.

Also of note is an error that pops up when I navigate to Diagnostics: Could not load password audit jobs: exception ‘Exception’ with message ‘WordFence API error: Your site did not send an API key when contacting the Wordfence servers.’ in /home/rockymou/public_html/wp-content/plugins/wordfence/lib/wfAPI.php:69 Stack trace: #0 /home/rockymou/public_html/wp-content/plugins/wordfence/lib/wordfenceClass.php(4014): wfAPI->call(‘password_load_j…’, Array, Array, true) #1 [internal function]: wordfence::ajax_passwdLoadJobs_callback() #2 /home/rockymou/public_html/wp-content/plugins/wordfence/lib/wordfenceClass.php(1012): call_user_func(‘wordfence::ajax…’) #3 [internal function]: wordfence::ajaxReceiver(”) #4 /home/rockymou/public_html/wp-includes/class-wp-hook.php(298): call_user_func_array(‘wordfence::ajax…’, Array) #5 /home/rockymou/public_html/wp-includes/class-wp-hook.php(323): WP_Hook->apply_filters(”, Array) #6 /home/rockymou/public_html/wp-includes/plugin.php(453): WP_Hook->do_action(Array) #7 /home/rockymou/public_html/wp-admin/admin-ajax.php(91): do_action(‘wp_ajax_wordfen…’) #8 {main}

Scans are aborted due to duration limit

$
0
0

Replies: 0

I’ve been having some issues with Wordfence timing out while scanning one of the larger websites on the server at 8039.2MB. Under options I have the scan to scan everything BUT:
Theme files against repository versions for changes
Plugin files against repository versions for changes
Files outside my WordPress installation
Use low resource scanning

Memory Wordfence request while scanning is set to 256MB
Maximum execution time for each scan stage is set to 15

I’ve changed the default time limit for the scan from the default 3hour time frame to 21600 (6hours) to see if that makes a difference.
————————————————————-
ERROR LOGS

[10-Mar-2017 13:03:55 UTC] PHP Fatal error: wfWAFWordPress::runCron(): The script tried to execute a method or access a property of an incomplete object. Please ensure that the class definition "wfWAFCronFetchBlacklistPrefixesEvent" of the object you are trying to operate on was loaded _before_ unserialize() gets called or provide a __autoload() function to load the class definition in /home/dev0176524630142/public_html/communitycrc.org/wp-content/plugins/wordfence/waf/bootstrap.php on line 347
[10-Mar-2017 13:03:58 UTC] Error reading Wordfence Firewall config data, configuration file could be corrupted or inaccessible. Path: /home/dev0176524630142/public_html/communitycrc.org/wp-content/wflogs/config.php
[10-Mar-2017 13:03:58 UTC] PHP Parse error: syntax error, unexpected end of file, expecting ‘)’ in /home/dev0176524630142/public_html/communitycrc.org/wp-content/plugins/wordfence/lib/wfScanEngine.php on line 1717
[10-Mar-2017 13:03:59 UTC] Error reading Wordfence Firewall config data, configuration file could be corrupted or inaccessible. Path: /home/dev0176524630142/public_html/communitycrc.org/wp-content/wflogs/config.php
[10-Mar-2017 13:03:59 UTC] PHP Parse error: syntax error, unexpected end of file, expecting ‘)’ in /home/dev0176524630142/public_html/communitycrc.org/wp-content/plugins/wordfence/lib/wfScanEngine.php on line 1717
[10-Mar-2017 13:04:00 UTC] Error reading Wordfence Firewall config data, configuration file could be corrupted or inaccessible. Path: /home/dev0176524630142/public_html/communitycrc.org/wp-content/wflogs/config.php
[10-Mar-2017 13:04:00 UTC] PHP Parse error: syntax error, unexpected end of file, expecting ‘)’ in /home/dev0176524630142/public_html/communitycrc.org/wp-content/plugins/wordfence/lib/wfScanEngine.php on line 1717
[10-Mar-2017 15:48:30 UTC] PHP Warning: require_once(/home/dev0176524630142/public_html/communitycrc.org/wp-content/plugins/jetpack/sync/class.jetpack-sync-sender.php): failed to open stream: No such file or directory in /home/dev0176524630142/public_html/communitycrc.org/wp-content/plugins/jetpack/sync/class.jetpack-sync-actions.php on line 277
[10-Mar-2017 15:48:30 UTC] PHP Fatal error: require_once(): Failed opening required ‘/home/dev0176524630142/public_html/communitycrc.org/wp-content/plugins/jetpack/sync/class.jetpack-sync-sender.php’ (include_path=’.:/opt/alt/php55/usr/share/pear:/opt/alt/php55/usr/share/php’) in /home/dev0176524630142/public_html/communitycrc.org/wp-content/plugins/jetpack/sync/class.jetpack-sync-actions.php on line 277

Alert on Malicious Files

$
0
0

Replies: 0

Hi, I’m wondering if there is a way to get a Wordfence alert only when a malicious file is detected? Thanks

We were unable to write to ~/wp-content/wflogs/ which the WAF uses for storage.

$
0
0

Replies: 0

i am getting the above error.
i have already given write permission to wp-content and inside that i have checked there is no wflogs/ folder .

drwxr-xr-x 6 wp-user wp-user 4096 wp-content


Wordfence Alert Admin Login Bypass

$
0
0

Replies: 0

Is there a way to improve admin login alerts detection? Right now hackers can login as admin using code snippets (I don’t want to post that here) and email alerts are not sent.

Scan terminated with 502 error

$
0
0

Replies: 1

I installed wordfence a few days ago and it’s been working great, but I have just tried to scan after updating another plugin and the scan fails with the message:

[Mar 16 15:22:05] Scan terminated with error: We received an error response when trying to contact the Wordfence scanning servers. The HTTP status code was [502]

Wordfence …Jetpack files modified..Warning error

$
0
0

Replies: 0

Several jetpack files has been modified.
Error msg from Wordfence ? Or error on new Jetpack edition ?

Wordfence mistakenly saying its how it gets IPs’ setting is misconfigured

$
0
0

Replies: 0

Wordfence is generating a banner message telling me that its how it get IPs’ setting is misconfigured, that I’m not behind Cloudflare, when I very definitely am… Have reconfirmed am behind Cloudflare several times via in the Cloudflare plugin and in the site’s account on Cloudflare…

This is happening on just one of three sites in same server reseller account running Wordfence and behind Cloudflare, others seemingly no issues…

My Own Server IP Is Being Blocked

$
0
0

Replies: 0

We recently moved our website (www.secondhandhounds.org) to a new host on BlueHost when we deployed a brand new WordPress setup. We installed WordFence and it is in learning mode, but I keep getting this notice that this IP is being blocked, which is the IP of our host server. I am not a website expert as this is a non-profit to free labor and all, but would like to know if I should take action, here is the email:

This email was sent from your website “Secondhand Hounds” by the Wordfence plugin at Thursday 16th of March 2017 at 01:06:45 PM
The Wordfence administrative URL for this site is: https://secondhandhounds.org/wp-admin/admin.php?page=Wordfence
A user with IP address 162.144.75.70 has been locked out from the signing in or using the password recovery form for the following reason: Exceeded the maximum number of login failures which is: 5. The last username they tried to sign in with was: ‘pasantia1’
User IP: 162.144.75.70
User hostname: server.secondhandhounds.org
User location: Provo, United States

Viewing all 33132 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>