Hi Andrew @misplon!

Thank you very much for your answer. In effect, that is the solution to the problem.

I read about this action on the Wordfence help page:
– Firewall Learning Mode: https://www.wordfence.com/help/firewall/learning-mode/

The route is in:
Wordfence> Firewall> All Firewall Options> Web Application Firewall Status:
.- Enabled and Protecting (default is this one)
.- Learning Mode (this option is what interests us for a few seconds to activate, then return to ‘Enabled and Protecting’)
.- Disabled

I have read (and checked) that while ‘Learning Mode’ is active the actions we do go to the whitelist and remain there until we decide to remove them.

The only thing that Wordfence advise against using ‘Learning Mode’ if the website was hacked or is currently under threat attack.

In summary when this option, ‘Learning Mode’, remains active these actions occur:
– Some applications that seem suspicious are included in the white list.
– Other parts of the firewall remain fully active:
.- Including Brute Force Protection
.- Login Security
.- The blocking functions

Although it is a better option than deactivating the plugin, there is a risk of being infected in that period of time, so it will be necessary to act quickly once we use the Page Builder by SiteOrigin.

Greetings and thanks again 🙂

• This reply was modified 1 year, 2 months ago by Joan Morci. Reason: @misplon without parentheses
• This reply was modified 1 year, 2 months ago by Joan Morci. Reason: removing link to Wordfence to avoid management / approval comment