Quantcast
Channel: WordPress.org Forums » [Wordfence Security - Firewall, Malware Scan, and Login Security] Support
Viewing all 33114 articles
Browse latest View live

scan disk space failed

$
0
0

Replies: 0

I’m using the free version of wordfence and I got this message. What does that mean and what should I do ?


Latest Version creates this error

$
0
0

Replies: 2

Last scan completed:
Fatal error: Uncaught Exception: DateTimeZone::__construct(): Unknown or bad timezone (Etc/GMT-5.5) in /home/sqlautho/public_html/wp-content/plugins/wordfence/lib/wfUtils.php:2045 Stack trace: #0 /home/sqlautho/public_html/wp-content/plugins/wordfence/lib/wfUtils.php(2045): DateTimeZone->__construct(‘Etc/GMT-5.5’) #1 /home/sqlautho/public_html/wp-content/plugins/wordfence/lib/menu_dashboard.php(20): wfUtils::formatLocalTime(‘F j, Y g:i a’, 1497523169) #2 /home/sqlautho/public_html/wp-content/plugins/wordfence/lib/wordfenceClass.php(5854): require(‘/home/sqlautho/…’) #3 /home/sqlautho/public_html/wp-includes/class-wp-hook.php(298): wordfence::menu_dashboard(”) #4 /home/sqlautho/public_html/wp-includes/class-wp-hook.php(323): WP_Hook->apply_filters(”, Array) #5 /home/sqlautho/public_html/wp-includes/plugin.php(453): WP_Hook->do_action(Array) #6 /home/sqlautho/public_html/wp-admin/admin.php(222): do_action(‘toplevel_page_W…’) #7 {main} thrown in /home/sqlautho/public_html/wp-content/plugins/wordfence/lib/wfUtils.php on line 2045

Error 28

$
0
0

Replies: 0

Hi there,
I am receiving the following error from Wordfence 6.3.1.1:
“Scan terminated with error: There was an error connecting to the the Wordfence scanning servers: cURL error 28: Connection timed out after 10000 milliseconds”

The Diagnostic tool returns the following information:
“wp_remote_post() test to noc1.wordfence.com failed! Response was: cURL error 28: Connection timed out after 10001 milliseconds<br />”
for both Connecting to Wordfence servers (http) & Connecting to Wordfence servers (https)

I have disabled SSL Verification

Other information:
Recently, our WordPress instance was migrated to a different server.

I’ve looked through the thread but not seen an applicable solution.

Thank you!

* The Plugin “PHP Execution” appears to be abandoned.

$
0
0

Replies: 0

I have just has this alert from Wordfence “* The Plugin “PHP Execution” appears to be abandoned.”. This is on a site that I did not build and I dont know the implications of use of this plugin. I have a bookings database which is massively business critical. The person that did the build has retired http://www.flatsinluxor.co.uk

What is the recommended action?

Removed plugin still showing up on scan list

$
0
0

Replies: 0

A plugin that was deactivated and deleted from my client’s site is still showing up in the New Issues area when I run a scan. (It was a plugin that appeared to be abandoned — Kwayy HTML Sitemap.)

The warning I’m seeing in the log (cut off at the end) is:
Warning: fopen(/home/sitename/public_html/wp-content/plugins/kwayy-html-sitemap/kwayy-html-sitemap.php) [function.fopen]: failed to open stream: No such file or directory in /home/sitename/public_html/wp-incl

I’d appreciate any insights/direction on how to address this. Thanks.

Plugin Deleted WordPress Application on Plesk

$
0
0

Replies: 0

After installation of Wordfence plugin it caused issues on httpsdocs. To access WordPress via Plesk Web Host was not possible anymore. WordPress Application got deleted from web hosting dashboard and it is not possible to re-install.

“Installation failed due to database does not exists”

“The WordPress version is not working anymore du to error in httpsdocs”

Even after plugin was deleted.

I guess that was it then. Just finished my website, everything worked well and now this. thanks

Plugin has been removed

$
0
0

Replies: 0

Hi

I’m getting a WordFence alert that a plugin has been removed, but upon checking the plugin is still installed, active and working.

Critical Problems:

* The Plugin “WP No Category Base” has been removed from wordpress.org.

Any ideas why this might happen?

Many thanks

Yet another cURL error

$
0
0

Replies: 0

Hi, folks. Getting that old cURL error 28; I can’t connect to your servers.

Diagnostics say everything is correct except for the timeout.

But this is happening on every website hosted on one particular server, and apparently started about a month ago. There are no other security plugins common to all of the sites on this machine, and WordFence on all of my clients’ sites on my other hosts with similar plugins can scan just fine. And as I said, scanning only started failing after having worked for between 3 and 16 months.

My suspicion is that your servers are using an ancient blocklist, and blocking my server’s cURL requests. I’ve seen this before with another plugin author. I inherited this IP which apparently was used for some long-term abuse. Not fun. The IP has been clean for the last couple of years except for a period around 1yr8mo ago during the 2015 XSS debacle.

WordFence has been failing silently for more than a month, and that’s bad; I had no idea no scans of these half-dozen have been done in that long, and I’m afraid of what I’ll find when this is fixed.

How can I get my server IP to you so you can check your tables?

Thanks.


Plugin Notifications

$
0
0

Replies: 3

I’ve been getting notifications from your plugin that says “The Plugin “name of plugin” appears to be abandoned.”
I check the site and the plugins section and nothing is wrong. All the plugins are just fine. Any idea of what’s going on?

Site Login

$
0
0

Replies: 0

Hello, I have a quick question. Does the WORDPRESS LOGIN SECURITY feature allow a site login gate whereby I can activate a login requirement to anyone who wants to access the site front-end and create an authentication requirement by administrator to endure that only our church members can access the site (front-end)?

IP in the whitelist locked out anyway

$
0
0

Replies: 0

Hi,
I put the customer ip in the whitelist, but… this ip was locket out anyway…and i don ‘t know ho to unlock ip…
Why ip was locket out even if was in whitelist?
looking forward hearing from you
Best regards
M.

Proxy IP Addresses in Increased Attack Rate emails?

$
0
0

Replies: 0

Hello,

For some reason the “Increased Attack Rate” emails we receive always list only our proxy addresses, while everything else (“User locked out from signing in” emails, “Admin Login” emails, Live Traffic, Blocked IPs) shows the true client IPs.

“How does Wordfence get IPs” is set to the default “most secure” option, but if everything else is able to display the x-forward-for as expected, doesn’t seem like I should change that setting, does it? But why are the “Increased Attack Rate” emails displaying differently — do they use a different mechanism?

Thanks, Doni

Wordfence found CSS files in wp-admin – what are they?

$
0
0

Replies: 0

Hi

Wordfence found these two files in the wp-admin area. I have done a lot of research to try and figure out a) What they are, b) How they got there, and c) What I should do with them, but I’ve drawn a black.

I don’t know what the correct action now is. Can anyone please shed some light?

Unknown file in WordPress core: wp-admin/otw_pct_ct_1.css
Unknown file in WordPress core: wp-admin/otw_pct_ct_2.css

“This file is in a WordPress core location but is not distributed with this version of WordPress. This is usually due to it being left over from a previous WordPress update, but it may also have been added by another plugin or a malicious file added by an attacker.”

Thanks!

  • This topic was modified 46 minutes ago by stephcthomp.
  • This topic was modified 46 minutes ago by stephcthomp.

Activating Web Application Firewall

$
0
0

Replies: 0

Host: WP Engine
OS: Linux
Running WordPress 4.7.5

I am working with a new client and installed Wordfence on their site that I did not develop. I tried to activate the firewall but got the warning message when I did saying this file was included.

wp/www/common/production/auto_prepends.php

I do not recognize the file and don’t have any security plugins installed so I don’t know why this file is included, unless it is something automatically done by WP Engine. If not, I don’t think it should be there.

What is your advice?

Thanks!

DNS records have changed?

$
0
0

Replies: 0

I got this mail today saying:
Wordfence found the following new issues on “מתייעלים – Mityaalim”.
Alert generated at Friday 16th of June 2017 at 05:01:44 PM
Warnings:
* Your DNS records have changed

I called BlueHost support and was told that everything is fine and nothing changed.
So, if all OK why do I get this message?
And if BlueHost is wrong, where can I see the changes?
Thank you

  • This topic was modified 2 hours, 24 minutes ago by axiosil.

Unable to optimize the Wordfence WAF

$
0
0

Replies: 0

I had no issues going through the WAF optimization process but in the last few weeks, the alert message to optimize has been showing up on all my websites and I’m unable to optimize even the new sites. I went through the setup and troubleshooting guide but that was no help.

Here’s a screenshot of the master php.ini file as see the auto_prepend option has been disabled in order to allow custom modifications as described in the troubleshooting guide.

I don’t understand why it’s not working all of a sudden.

Can WF whitelist hostname instead of ip?

$
0
0

Replies: 0

Can WF whitelist hostname instead of ip – for such cases when admin has a dynamic IP and has to use DDNS service to assign a constant hostname like myname.admin.domain.com which is resolved to his proper dynamic IP address?
I see that WP only accepts IP addresses in the whitelist field, but maybe there is a different option that would allow using hostname instead of ip?
Thanks!

P.S. I found at least two previous threads about this issue/feature request:
1) https://wordpress.org/support/topic/whitelist-domain-name/ – 5 months ago
2) https://wordpress.org/support/topic/feature-request-hostname-whitelist/ – a year ago

In reply to the second request Matt wrote “We do have a similar feature planned but don’t have a specific date when it may be implemented yet (reference number FB839). Thanks for the suggestion!”

So I much hope that perhaps, you have some update regarding this feature FB839 now?

  • This topic was modified 1 hour, 34 minutes ago by ip11166.
  • This topic was modified 1 hour, 14 minutes ago by ip11166.

Blank Dashboard

$
0
0

Replies: 0

Hi,

I upgraded to Version 6.3.11 and now my dashboard is blank.

Screenshot

I have checked the web and browser console and there are no errors.

Is it meant to be blank, I’m sure it wasn’t in the previous version?

Thanks.

Scan Terminated With An Error – cURL error 28

$
0
0

Replies: 0

Hi,

I’ve been unable to complete a scan since I updated Wordfence to the latest version (6.3.11) a couple of days ago, before that everything was working fine.
I am getting a cURL error 28 indication and I have tried disabling Start all scans remotely and Enable SSL Verification but this does not resolve the issue.
Here is a screenshot from the diagnostics page:

Thanks.

Scan not Starting

$
0
0

Replies: 0

Wordfence Version 6.3.11

Active plugins:
Akismet
BackUpWordPress
Wordfence Security
Yoast SEO

Active theme: Divi

When I press Start Scan, a red message at bottom right appears “starting scan” but it disappears after 1 second, and nothing else changes, and no scan has started.

I have been through https://docs.wordfence.com/en/My_scans_aren%27t_starting._What_would_cause_that%3F and found no issues with the host.

Error log and debug log show no applicable errors.

Help appreciated.

Viewing all 33114 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>