Title: Wordfence, Gravity Forms & HIPAA Forms Plugin
Last modified: May 12, 2021

---

# Wordfence, Gravity Forms & HIPAA Forms Plugin

 *  Resolved [paige.elena](https://wordpress.org/support/users/paigeelena/)
 * (@paigeelena)
 * [5 years ago](https://wordpress.org/support/topic/wordfence-gravity-forms-hipaa-forms-plugin/)
 * We are using gravity form builder and the hipaa forms plugin to make our web 
   forms hipaa compliant. Unfortunately, our wordfence firewall continues to block
   form submissions due to background-request. In the back-end, the full details
   for the block are this: “…was blocked by firewall for XSS: Cross Site Scripting
   in POST body: formFields=data%3A at [https://roguerivercounseling.com/wp-admin/admin-ajax.php&#8221](https://roguerivercounseling.com/wp-admin/admin-ajax.php&#8221);
 * I have used Learning Mode and manually whitelisted these actions, but the firewall
   continues to block form submissions and I can’t figure out why or what to do 
   about it.
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fwordfence-gravity-forms-hipaa-forms-plugin%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 2 replies - 1 through 2 (of 2 total)

 *  Plugin Support [wfpeter](https://wordpress.org/support/users/wfpeter/)
 * (@wfpeter)
 * [5 years ago](https://wordpress.org/support/topic/wordfence-gravity-forms-hipaa-forms-plugin/#post-14429291)
 * Hi [@paigeelena](https://wordpress.org/support/users/paigeelena/), thanks for
   your message and sorry to see you’re still having trouble with form submissions
   after trying Learning Mode and attempting to allowlist the actions manually.
 * Traditionally, with Gravity Forms especially, I would think taking the action
   you have would be sufficient to allow the actions so something else could be 
   happening here.
 * Can you send a diagnostic report to **wftest @ wordfence . com**? You can find
   the link to do so at the top of the **Wordfence Tools > Diagnostics** page. Then
   click on **“Send Report by Email”**. Please add your forum username where indicated
   and _respond here after you have sent it._
 * _**Note:** For the fastest response time, please make sure and add any information
   or questions directly to this topic and not the email address above unless asked._
 * It would also be helpful if possible to grab a screenshot of one of the errors
   or allowlist notifications to see what might be happening. You could take a screenshot
   using [Snipboard](https://snipboard.io/) and paste the URL here so I can try 
   to further assist you. If you’d like to keep the screenshots private, I would
   also accept them to **wftest @ wordfence . com** provided you also put your forum
   username in the email subject so I can easily find it.
 * Thanks,
 * Peter.
 *  [codemonkeys](https://wordpress.org/support/users/codemonkeys/)
 * (@codemonkeys)
 * [4 years, 8 months ago](https://wordpress.org/support/topic/wordfence-gravity-forms-hipaa-forms-plugin/#post-14936246)
 * Pete,
    It says this was resolved, but there is no resolution. We are getting 
   the exact same error message. Although we are able to click on pop-ups to white
   list (many of them), I would like to resolved once for all (we see it everything
   time a plugin is upgraded).
 * Thanks

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Wordfence, Gravity Forms & HIPAA Forms Plugin’ is closed to new replies.

 * ![](https://ps.w.org/wordfence/assets/icon.svg?rev=2070865)
 * [Wordfence Security - Firewall, Malware Scan, and Login Security](https://wordpress.org/plugins/wordfence/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wordfence/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wordfence/)
 * [Active Topics](https://wordpress.org/support/plugin/wordfence/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wordfence/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wordfence/reviews/)

## Tags

 * [Cross-site scripting](https://wordpress.org/support/topic-tag/cross-site-scripting/)
 * [xss](https://wordpress.org/support/topic-tag/xss/)

 * 2 replies
 * 3 participants
 * Last reply from: [codemonkeys](https://wordpress.org/support/users/codemonkeys/)
 * Last activity: [4 years, 8 months ago](https://wordpress.org/support/topic/wordfence-gravity-forms-hipaa-forms-plugin/#post-14936246)
 * Status: resolved