Support » Plugin: Wordfence Security - Firewall & Malware Scan » Cookie Poisoning and WordFence

  • Resolved damienoneill2001

    (@damienoneill2001)


    Hello,

    I hope you can help.

    I have recently been blocked out the admin area of WordPress by my hosting company and one of the main reasons they gave was because of:

    “Cookie Poisoning Cookie Name wfvt_21xxxxxxx7 Domain http://www.mysite.org Path / Old Value xxxxxx48ec633 Corrupted
    Value xxxxxx45ebf77″

    I believe that this is something on the hosting side, maybe security being too strict, but could you shed some light as to why this message has appeared all of a sudden.

    Thanks

    Damien

    https://wordpress.org/plugins/wordfence/

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author WFSupport

    (@wfsupport)

    Hi

    At Wordfence, we’re generally against anyone screwing up a perfectly good cookie (Oatmeal Raisin among my favorites).

    Seriously though, here’s a good description of what’s happening.
    http://www.techopedia.com/definition/16076/cookie-poisoning

    That being said, I believe your site may be under some attack from someone trying to scrape information out of the cookies. I would contact the hosting company and ask what they want you to fix specifically. Let me know what they say.

    tim

    Hi Tim,

    Thanks for coming back to me on this one.

    What it looks like, according to the hosting company, is that they have increased the security on their servers recently and it is likely to be too strict.

    They mentioned that they are in to process of fine tuning it, they made a few changes and I am now able to log in and post on my site as before.

    Thanks for the help anyway and the link, it’s appreciated!

    Damien

    Plugin Author WFSupport

    (@wfsupport)

    No problem! 🙂

    tim

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Cookie Poisoning and WordFence’ is closed to new replies.