MPthewho,

I can confirm you are correct about the problem “Users enumeration” (under the tab Miscellaneous) stops the functionality of sending emails through contact form made with Contact form 7 plugin. If you disable the user enumeration feature the contact form works again.

I have replicated the problem on three websites. The problem occured after an AIOWPS update two days ago (update 4.3.4)

Hope a fix is soon forthcoming.

Regards
Matt

wpsolutions,

I found the code that is the problem.
——————
/*
* Re-wrote code which checks for REST API requests
* Below uses the “rest_api_init” action hook to check for REST requests.
* The code will block unauthorized requests whilst allowing genuine requests.
* (Peter Petreski)
*/
add_action( ‘rest_api_init’, ‘check_rest_api_requests’, 10, 1);
function check_rest_api_requests($rest_server_object){
$rest_user = wp_get_current_user();
if(empty($rest_user->ID)){
wp_die(‘You are not authorized to perform this action’);
}
}
——————–

The code lives in the wp-security-stop-users-enumeration.php file.

If I remove the code and enable user enumeration, the contactform 7 works again.

Hope this helps.

Regards

Matt

Disable REST API should have it’s own setting, but option to disable only authors should stay. Maybe target just the author endpoint, like so https://wordpress.stackexchange.com/a/254251/90495

Hi,

I agree with @howdy_mcgee, I am shocked that this hasn’t been resolved yet.

We have 150+ websites using AIO and going through all these to turn this setting off ( and then back on again once you’ve corrected it ) is time we don’t have to spend.

Can you just rush out a patch for this problem asap please?

• This reply was modified 1 year, 11 months ago by infosws.