WordPress.org

Forums

Wordfence Security
[resolved] Serious security Concern (2 posts)

  1. DNAx
    Member
    Posted 1 year ago #

    I installed the free WordFence security plugin on my site and was immediately unable to login as admin.  No message was received and I was presented with a white screen.  Tried typing various direct urls to sections of my site but same white screen problem.  Cleared browser cache and tried using other browsers but no luck.

    I then logged in as a user with editor permissions and had no problems accessing my site with the expected editor level access restrictions.

    I logged out and used the following address format to access my site again- 

    mysitename.com/wp-admin/plugins

    I logged in as the same user with editor level access and immediately got full admin access to my site.  This was fortunate for me as I was able to uninstall this plugin and now all is well.

    If you have this plugin installed, it might be worth checking that this is NOT POSSIBLE on your site.

    Just thought you should know.

    https://wordpress.org/plugins/wordfence/

  2. Wordfence
    Member
    Plugin Author

    Posted 1 year ago #

    /wp-admin/plugins is a non-existent URL on most WordPress sites and will just generate a 404. Sounds like you've either been hacked or have some other issue on your site.

    Regards,

    Mark.

Topic Closed

This topic has been closed to new replies.

About this Plugin

  • Wordfence Security
  • Frequently Asked Questions
  • Support Threads
  • Reviews

About this Topic