Wordfence blocking WooCommerce Mobile App

  • dkray

    (@dkray)


    2 days, 10 hours ago

    Hi,
    I’m having an issue where Wordfence blocks requests from the WooCommerce Mobile App.

    In Wordfence → Live Traffic, I see blocked activity coming from the WooCommerce app flow, specifically on this endpoint:
    /wp-json/wp/v2/users/me/application-passwords

    The log shows requests from a mobile user agent and the app action seems to trigger Wordfence protection for authentication/account-related REST calls. As a result, the WooCommerce mobile app cannot complete its login/application password step.

    Could you advise what Wordfence module/settings should be adjusted for WooCommerce Mobile App compatibility?

    Thanks in advance!

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Plugin Support wfpeter

    (@wfpeter)

    1 day, 1 hour ago

    Hi @dkray, thanks for reaching out!

    The block in Live Traffic can sometimes point to a specific firewall rule or plugin setting. Do you also have the specific reason, usually given in red text? That might help show exactly what Wordfence is doing when it blocks the app.

    Just to understand a little more about your setup, do you have Wordfence > All Options > Brute Force Protection > Additional Options > Disable WordPress application passwords set?

    If so, do you also have 2FA or reCAPTCHA enabled on your site? On the Wordfence > Login Security > Settings page, there is a WooCommerce integration checkbox that may be required for successful authentication.

    Many thanks,
    Peter.

Viewing 1 replies (of 1 total)

You must be logged in to reply to this topic.