• … when it is activated (doing its great job!), continously a Wordfence pop up window appears, with the following message: “Background Request Blocked. Wordfence Firewall blocked a background request to WordPress for the URL (my website backend url, followed by “admin-ajax.php”. If this occurred as a result of an intentional action, you may consider allowlisting the request to allow it in the future., where I can clicck on “Add action to allowlist” or “Dismiss”. And if I click on dismiss (I am scared about security abuse) the message keeps coming.

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Author robertabela

    (@robert681)

    Thank you for trying our plugin Stefanando.

    We will try to reproduce this and we’ll let you know if we need any further details. Quick question – do you have Wordfence Premium or Free?

    Thread Starter stefanando

    (@stefanando)

    I have Wordfence Free

    Plugin Support Lucian Padureanu

    (@lucianwpwhite)

    Hello again Stefan, and sorry for the slight delay in getting back to you!

    After reviewing this in more detail, we were able to observe the notice and provide some clarification on why you’re seeing it: screenshot.

    The Wordfence warning is simply informing you that our plugin is utilizing AJAX—it’s not an actual issue, nor something that requires a fix from our end. I can confirm that our plugin does indeed use AJAX, and it’s completely safe to add it to the allowlist without any concerns.

    Let me know if you need any further clarification!

    Thread Starter stefanando

    (@stefanando)

    Hello Lucian,

    thanks for your reply. I like your plugin and so I have put my trust on you and decided to add that action to allowlist. Maybe for a future update you could consider to fix this problem with Wordfence, that continue to send me alerts…

    Best wishes,
    Stefano

    Plugin Author robertabela

    (@robert681)

    Hello @stefanando

    This is not something that we have or can do from our end. Wordfence is simply advising you that a plugin, in this case, our plugin is using Ajax and asking you to confirm if you want to allow it or block it. Wordfence will report with other plugins that use Ajax. We do the same ourselves in Melapress Role Editor – when we notice that the roles have changed we alert the user.

    If you have added this to the allow list but Wordfence keeps on prompting you, then there is something wrong in Wordfence and we recommend you to contact them.

    I hope that helps. Should you have any other questions, do not hesitate to ask.

Viewing 5 replies - 1 through 5 (of 5 total)
  • You must be logged in to reply to this review.