Avatars cannot be uploaded

Hi @manni65929,

Sorry to see Learning Mode hasn’t resulted in a permanent allowance of image uploads from site users. Before we continue, can I just ask whether you are still a premium customer? If your site is not yet due for its license renewal, you would be entitled to that support level to see if we can come to a permanent resolution.

You can access premium support via https://support.wordfence.com, the Help menu item in the plugin, Help link on the plugin’s Dashboard page, on our documentation homepage or via the HELP link in the footer of all wordfence.com pages.

If not and you’ve already reverted back to Wordfence free or this particular site is running the free version, let me know and I can absolutely try to help you out here ASAP.

Thanks,

Peter.

I have actually three premium licenses, two of which auto-renew in June, and one in October. I disabled auto-renew for the two renewing in June, the one in October is (so far) still enabled. The Help links aren’t helping, so I opened a ticket to get this resolved. To make it easy on you I set up a completely fresh installation of WordPress and only installed the Premium Wordfence Plugin. as feared when WAF is set to learning it accepts the avatars/cover images, when set to enabled they are not accepted anymore – even after “learning”. I sent you a ticket as well. Thanks in advance.

So after a little checking in Tools > Life Traffic, I found that file uploads for BuddyPress are “blocked by firewall for Malicious File Upload (PHP)” I now added the respective parameter to the allow list. Do you think that makes my site unsafe? And if so, do you have a better solution?

Hi @manni65929,

Thanks for the extra information, recently due to false-positives being more sensitive with PHP8 for file uploads, we have had to recommend for some free customers to turn off the firewall rule found in Wordfence > All Options > Firewall Options > Advanced Firewall Options > Rules > Malicious File Upload (PHP).

Another rule titled “Malicious File Upload (Patterns)” will actually check the file contents rather than just whether a filetype/extension may be misrepresented, so leaving this turned on, even if you had to turn the other off will provide you with a solid level of protection going forward.

Having said this, because www.ads-software.com allow us to use these forums to assist our free customers, it is against their rules to offer assistance for the paid version here. If the above advice, which has worked for other free customers recently, does not fully help, copy the information given here to a premium ticket using the details in my first reply. Somebody should be able to assist you shortly if they aren’t already. If not, please do so as we wish you to gain the help you need and are entitled to.

Thanks again,

Peter.