Wordfence broken, won't allow updates to Options

Hi Chris,

Usually if you can’t click a button, it is a conflict with another plugin or (more rarely) the theme.

The browser’s javascript console may show some error messages which can help determine which plugin is causing the conflict. If you’re not familiar with the console, we have instructions here:
Open the JavaScript console for troubleshooting plugins

Another option is to try temporarily disabling all other plugins, and see if the button works again — if it does, you can enable the plugins one-by-one and check the button in between, to see which one breaks it.

Also, if you’re running any browser extensions/add-ins (especially “NoScript”), you might need to whitelist your own site, so scripts can run there.

Let me know if this helps, or if you still have questions.

-Matt R

Well, it seems to have worsened! I’m not sure if this is related to the above issue or not but I now have a complete ‘denial of service’ my AV on my PC will not allow me to the site at all; it’s picking up a JS/Iframe.MO Trojan.
I can’t say for sure if this was on the site before or since installing wordfence, however, its obviously not been picked up by it. I will have to see what my hosting company can assist with….

The issue I’ve mentioned in the original post, I should clarify to help;
I have tried multiple browsers, the buttons that I have been unable to click have been in wordfence only like start scan or save changes (everything else in site works(worked!) OK.
my original wordfence scans showed some odler themes and as I had a few installed I have a big cull of older ones, reinstalled a couple(from within wordpress), removed some unactivated plugins etc etc.
General(overdue) tidying up really but prompted by wordfence giving me a kick up the butt! ??

When I can get into my site again, I’ll try to pull up the java log for you, however, my gut instinct is telling me that’s not it.
If it helps diag’s the site is: https://kingstonscoutscc.org.uk just watch out if this trogan is still knocking about in there ??

Chris

Hi Chris,

It might or might not be related — malware that includes javascript can cause conflicts with the javascript in plugins as well.

The buttons do use javascript and AJAX, which other plugins might not always use, so it could also be trouble with the AJAX handler.

For the infection, we have a guide for cleaning hacked sites here — some of the steps can be done outside of WordPress & Wordfence, so that may help you get things working again:
How to clean a hacked website

Make sure to make a backup of the site before removing or modifying files, even though it will include the malicious files — that way, in case you make any mistakes, you can replace files on the site from the backup. Removing plugins manually and later reinstalling them within WordPress can be helpful, and the same with wp-admin and wp-includes (but again, remember the backup before trying it!)

Sometimes malicious files might also be loaded from wp-config.php or .htaccess, so checking the content of those files can be useful too.

-Matt R