ReCaptcha v3 if not set, and add Wordfence to the site and there’s always use Cloudflare.
How did the fix actually work for others? The mod security ID’s should be different unless everyone’s running the same script. And there’s no path I’ve seen in my server for a whitelist.conf. How does the httpd.conf know it’s there?