Impossible to login with Wordfence activated, because of “CAPTCHA EXPIRED”

Hi @hero2, my apologies, I did miss your diagnostic come in and I’ve picked it up.

There was a W3 Total Cache release that tries to disable the object cache on February 24, and CAPTCHA issues started occurring for a small number of customers on February 25 onwards. We were eventually able to reproduce the issue although for some users it cleared up either when the cache finally expired, or another event/manual action cleared the cache.

Now, I see that you’ve disabled W3TC, but there is an object-cache.php still active in diagnostics as a Drop-In WordPress Plugin. That is precisely how we were able to reproduce the problem at our end. Enabling the object cache, flushing it, and disabling it again may help. If the file is still present even after that, you may need to check its file permissions. It should always be removed automatically when disabling the object cache if it has permission to do so.

Feel free to send a copy of the file to the same email address as before, putting your forum username in the subject line.

Thanks again,
Peter.

Hi @hero2,

You should be able to reenable 2FA without issue, although if you do experience a problem rename /wp-content/plugins/wordfence plugin folder to “wordfence_bak” (without quotes). This should let you access and log into your site normally immediately. You can then rename the folder back to “wordfence” as 2FA is effectively disabled again by doing this.

If you let us know that happened and the specific behavior or error messages you received when it failed, we’ll take another look for you.

Let us know how you get on,
Peter.