wfmark

Hi @wiezo,

You may need to leave the firewall in Learning Mode for a while.

When the blocked action is repeated, an entry should then be placed in the “Allowlisted URLs” section of the Firewall Options page. If you can see the entry being added there it should then be fine to set the Firewall back to “Enabled and Protecting” and it shouldn’t be blocked going forward.  

If Learning Mode doesn’t solve the issue, please access the SmartCrawl plugin with Wordfence activated and navigate to your Wordfence > Tools > Live Traffic page, and see whether you find any blocked requests, click on it to expand it, then click “Add Param to Allowlist”. 

Let me know how it goes.

Thanks,

Mark.

Hi @ chins4, Apologies for the delayed response.

I forgot to turn on notifications for replies on this topic.

Are you still having issues with this?

If so, please send an updated diagnostic report to wftest @ wordfence.com. You can find the link to do so at the top of the Wordfence Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

Thanks,

Mark.

Hi @wattsyourwebsite,

From the scan log above, it doesn’t look like you have enabled debugging. Please confirm that:

• Go to the Tools > Diagnostics page.
• In the “Debugging Options” section check the circle “Enable debugging mode”.
• Be sure to click to “Save Changes”.

Your Maximum execution time is also still set to 300.  Go to your Wordfence > Scan > Manage Scan and locate the “Performance Options” section. Set “Maximum execution time for each scan stage” to 20 then click on “Save Changes”.

Once that’s done, run another scan and copy the last 20 lines or so from the Log (click the “Show Log” link) once the scan finishes and paste them in the post.

Thanks,
Mark.

Hi @lcolvin, Thank you for reaching out.

The only other workaround is if you have added your site to Wordfence Central. You can add your public-facing IP address to the Allowlisted IP addresses that bypass 2FA under the the Login Security options.

You can also have another admin user disable 2FA on your account for you.

If none of the above options work,  you will need to use FTP/SFTP — or any file manager your web host provides via their administration panel to disable Wordfence manually.Let me know if you need any further assistance.

Thanks,

Mark.

Hi @jamieburchell, Thank you for reaching out.

Sometimes it’s been known for a scan to start running around the same time as automatic/manual plugin updates are performed, so picks up the outdated plugins at the start but won’t realize plugins have been updated by the time it ends.

On the free version of Wordfence, a quick scan runs every day, and a full scan runs every 72 hours. The quick scan does check for WPScan vulnerabilities and repository versions, but an updated repository status against your installed plugin list will not refresh until the next full scan is run manually or automatically. This may mean the notice of a modified plugin persists between scans.

Thanks,

Mark.

Hi @johnshweb, Thank you for reaching out to us.

Please try to clear cache (site plugins and local browser). You can also try to log in from a different internet browser where all browser extensions have been disabled. If you don’t have the same issue in the other internet browser where all browser extensions have been disabled then that indicates a browser extension in your normal browser is breaking our JavaScript.

If you still have the same issue in the other internet browser then your theme or another plugin may be loading JavaScript on our admin pages and creating a conflict.Disable all other plugins except Wordfence , then try again to see if there’s a plugin or theme conflict causing the issue. You could also revert to a default theme, such as Twenty Twenty-Three.

If the issue persists,  access wp-admin while keeping a Browser Console open to see if you can detect any JavaScript errors or files that fail to load. If you see any red errors in the console, please take a screenshot and send it to me.

Let me know what you find.

Thanks,

Mark.

Hi @tati19, Thank you for reaching out to us.

As Wordfence has already been deleted, please try to clear cache (site plugins and local browser) and disable all other plugins except Elementor , then try again to see if there’s a plugin or theme conflict causing the issue. You could also revert to a default theme, such as Twenty Twenty-Three.

If it works as expected, then re-enable your plugins and theme one by one until the issue recurs to help find the cause.

Let me know how it goes.

Thanks,

Mark.

Hi @hebhansen,

Please send a diagnostic report to wftest@wordfence.com. You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

Thanks,

Mark.