WordPress.org

Ready to get started?Download WordPress

Forums

Wordfence Security
[resolved] Serious security Concern (2 posts)

  1. DNAx
    Member
    Posted 5 months ago #

    I installed the free WordFence security plugin on my site and was immediately unable to login as admin.  No message was received and I was presented with a white screen.  Tried typing various direct urls to sections of my site but same white screen problem.  Cleared browser cache and tried using other browsers but no luck.

    I then logged in as a user with editor permissions and had no problems accessing my site with the expected editor level access restrictions.

    I logged out and used the following address format to access my site again- 

    mysitename.com/wp-admin/plugins

    I logged in as the same user with editor level access and immediately got full admin access to my site.  This was fortunate for me as I was able to uninstall this plugin and now all is well.

    If you have this plugin installed, it might be worth checking that this is NOT POSSIBLE on your site.

    Just thought you should know.

    https://wordpress.org/plugins/wordfence/

  2. Wordfence
    Member
    Plugin Author

    Posted 5 months ago #

    /wp-admin/plugins is a non-existent URL on most WordPress sites and will just generate a 404. Sounds like you've either been hacked or have some other issue on your site.

    Regards,

    Mark.

Reply

You must log in to post.

About this Plugin

About this Topic