Ajax Requests Blocked

So far we had about ten users with this issue and we fixed with learnging mode or firewall optimization setup but they are keep comming.
On such installation I tried different plugins for example elementor and their ajax is working well so we have someething that wordfence sees it as an attack and here I need your help.
In 2- 5 days we had ten users but this can reach one hundred in a week.
this forces us to waste unnecessary time to a problem that does not exist.

Hi @wfadam,

I’ve been very busy the last few weeks, now I have got some time and I can inspect the issue further. So far there have been several users with this issue but they do not stop coming.

1. I don’t know that this mean: https://user-images.githubusercontent.com/3128048/100717459-bfd4d300-33c2-11eb-8e54-07af7530c202.png
I google it and found this I remember this it was fixed a few months ago

2. I enabled learning mode and played around with the editor the issue didn’t happen anymore but after turning off learning mode it was back. In the Allowlisted URLs theres nothing just No allowlisted URLs currently set.

3. The issue doesn’t happen everywhere, only happens to certain users. If you had a closed system ticket that would be great I can share the credentials of a websiete where this issue is happening

Hi @wfadam,

I did not have time to inspect this problem in more detail, so I have fixed it so far manually.
Now I have a few new cases and some time to inspect this.
The issue occurs when the user has wp installed in a subdirectory of another wp.
For example, the root folder is public_html, here we have a wp installation and wordfence installed.
A wp subdirectory installation: public_html/anotherWp
in this installation wordfence is not installed
The issue appears only here on this sub installation that does not have wordfence installed.
Enabling learning mode in the parent wp it starts working but in the Allowlisted URLs no new urls are registered, disabling learning mode the issue is back
I registered a new ajax function in the sub folder installation:

add_action( 'wp_ajax_my_action', 'tttt_my_action' );
add_action( 'wp_ajax_nopriv_my_action', 'tttt_my_action' );

function tttt_my_action() {
    wp_send_json(['message' => 'good']);
}

add_action('wp_footer', function() {
?>
    <script>
        jQuery(document).ready(function($) {
            var data = {
                'action': 'my_action',
                'whatever': 'whatever'
            };
			                
        jQuery.post('http://enginsp.carlsontechnologiesinc.com/wp-admin/admin-ajax.php', data, function(response) {});
        });
    </script>
<?php
});

This ajax request is working fine. The requested headers are the same, cookies too.
And what does this mean?
Why blocked by firewall for Brizy Page Builder < 1.0.126?
I don’t know what else to try.
Users keep coming to us and we need to get rid of this.

Regards,
Viorel

• This reply was modified 2 years, 11 months ago by viorel.

Hi @wfadam,

we started to receive users with regular installations

they are more and more