Support » Plugin: WordPress Popular Posts » does not count – even after deactivating the Cache Plug-in

  • Resolved stefaninthailand

    (@stefaninthailand)


    Hi Hèctor,

    recently I noticed that WPP stopped counting end of march. Now trying to solve the problem I have read your F&Q with instructions on how to handle caching. Today I even deactivated my caching plug-in (WP Optimize).

    Unfortunatly WPP is still not counting.

    Do I have to wait a certain time to see an effect? Or is there another reason why it does not count?

    Thanks for your valuable help
    Stefan

    PS: Do you need additional information?

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Hector Cabrera

    (@hcabrera)

    Hi @stefaninthailand,

    Something is preventing WordPress Popular Posts from accessing its REST API endpoints, hence the reason why it stopped tracking visits to your posts & pages:

    REST API 403 Forbidden response

    Maybe these FAQs can help you get things sorted out:

    If you have any other questions don’t hesitate to ask, alright?

    Thread Starter stefaninthailand

    (@stefaninthailand)

    Héctor you are great! Thank you so much for your fast response.

    NinjaFirewall was the problem. I realized that it was not march but april when the counting stopped. After that it was clear, because I changed to NF that month.

    Now I unchecked the wP REST-API. Is that a security problem? Do you have any idea to fix that leak?

    Thank you so much. You made my day.
    Stefan

    Plugin Author Hector Cabrera

    (@hcabrera)

    Now I unchecked the wP REST-API. Is that a security problem? Do you have any idea to fix that leak?

    It shouldn’t pose as a immediate security risk, however you can -for example- get access to a list of registered usernames by accessing a specific REST API endpoint. Knowing which usernames exist on your site can help attackers get access to your site: all they’d need now is to guess the password of any of these usernames.

    I’d restrict access to the REST API again and check with the developers of the Ninja Firewall plugin whether it’s possible to allow access to certain REST API endpoints only (and how) so specific plugins (such as WordPress Popular Posts) can use them while keeping everything else blocked.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘does not count – even after deactivating the Cache Plug-in’ is closed to new replies.