Hi @plexxa, thanks for showing your settings.
With the skipped 2FA check and lack of disabled XML-RPC, I would expect the plugin to be working. To rule in/out Wordfence blocks (although I appreciate you’ve already tried disabling the firewall), I think the next best step would be to attempt to sign in to the app again and note the time you are doing so.
If Wordfence is intervening in any way, the block will show up in your Live Traffic page for the same timestamp. From here, you can click the entry (or the eye icon) to expand it, where red text will explain the reason for the block. Sometimes you are presented with a “ADD PARAM TO FIREWALL ALLOWLIST” button here that could solve any problems going forward. This button automatically inserts the URL and its required params to the Allowlisted URLs section of the plugin.
If this doesn’t help at all or you’re not seeing blocks, let me know so that I can consult with our development team. I am always cautious about forwarding customers to WooCommerce (or WooCommerce’s app) support, although they could have seen issues before with Wordfence-enabled sites and have a known solution – so it could be worth checking in with them too simultaneously.
Let me know how you get on,
Peter.