Replying to second this, as we are having the same issue today.
Hello, @alieneila
Can you please send diagnostics via Wordfence > Tools > Diagnostics > Send Report By Email to wftest @ wordfence dot com and put your forum username in the second field? Please let me know here when those are sent.
I see you mentioned you deactivated other plugins and the issue persisted. Can you confirm if you’re using any mu-plugins? You might consider trying with the reCaptcha disabled (Wordfence > Login Security > Settings) if it is enabled. I also recommend enabling the WooCommerce Integration if you haven’t already if you’re using WooCommerce.
I recommend also checking for browser console errors during the login to see if anything stands out there.
Does the issue occur whether or not you have www in the address you’re logging into? Do you notice any changes in the URL after the redirect?
Thanks,
Scott
Diagnostic sent.
I do notice a 403 error in console, which is odd but… it’s trying to make a post to /wp-login?wpe-login=true which I am assuming is something auto added by being hosted on WP Engine? Other than that there aren’t any login modifying plugins that I am aware of. The site is setup for non www and when trying to use www an error displays for cross site settings.
-
This reply was modified 2 years ago by
alieneila.
I’m experiencing this as well across our organization. Not sure what the issue is, I’ve even rolled back a few versions of wordfence but it’s erroneously showing that the code is invalid before allowing entry. My devices clock seems to be correct as well.
Thanks for your patience here.
Testing via WPEngine on our side we are not able to replicate this at the moment. If there’s a mention of the code being invalid while it already works, something may be causing the form to be submitted twice. The first submission working and setting the login cookies, and the second one failing since the code shouldn’t be valid a second time. It is also possible that this is caused by a browser extension triggering the submission of the form twice. Are you using any password managers or other extensions that may be related? If possible, please try with your extensions disabled to see if you notice any difference.
Thanks,
Scott
it’s happening on mobile and desktop and to all 3 of the admin accounts all on different systems, different browsers, different locations.
@alieneila
Thanks for your patience here, and my apolgies for the delay. I looked over your diagnostics again, and the only difference I see compared to my test site is an older version of WP Engine System (the mu-plugin). I recommend clearing any cache that is set up initially. At that point, can you confirm that you see the same issue if you try directly via /wp-admin, and /wp-login.php? It may also be a directive in the .htaccess, if you can try testing via staging with a new .htaccess file or with your .htaccess renamed breifly.
Scott
after a couple days it started working again on its own just fine. I appreciate the response:)
