Liz,
Thanks for the additional details. Sorry I didn’t remember that the cache exclusions are not saved when exporting options — options on some other pages like blocked IPs are saved in the export, and the 3 cache option checkboxes are too (but not the cache type at the top, since enabling caching requires the server make some changes, unlike the regular options.) I’ve just added this as a feature request in our system (FB940), for a future version!
It’s definitely not normal to lose any settings when Wordfence is updated, and I confirmed that updating from 6.0.15 to 6.0.16 does not affect my cache exclusions, so something else must be going on.
Can you check the permissions on your database, to see if your database user has all privileges on all tables? It’s possible that your settings are only saved in Wordfence’s config cache file, instead of the database. That file would be included when you copied Wordfence to another site, but the settings still might not make it into the site’s database from there.
If the database privileges are ok, I would try turning on the option “Disable config caching” on Wordfence’s Options page, and see if you can save cache exclusions after that. This might cause your cache exclusions to be lost on that site, if there is still a problem saving to the database, but would help narrow down the problem.
I haven’t seen an export token fail like that before either — if you want to email me the token you have, I can see if I can import it on my end. (Don’t post it here, as it would contain your admin email address and other settings.) My email address is mattr (at) wordfence.com
-Matt R