Wordfence, Gravity Forms & HIPAA Forms Plugin

  • Resolved paige.elena

    (@paigeelena)


    3 years, 6 months ago

    We are using gravity form builder and the hipaa forms plugin to make our web forms hipaa compliant. Unfortunately, our wordfence firewall continues to block form submissions due to background-request. In the back-end, the full details for the block are this: “…was blocked by firewall for XSS: Cross Site Scripting in POST body: formFields=data%3A at https://roguerivercounseling.com/wp-admin/admin-ajax.php”

    I have used Learning Mode and manually whitelisted these actions, but the firewall continues to block form submissions and I can’t figure out why or what to do about it.

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @paigeelena, thanks for your message and sorry to see you’re still having trouble with form submissions after trying Learning Mode and attempting to allowlist the actions manually.

    Traditionally, with Gravity Forms especially, I would think taking the action you have would be sufficient to allow the actions so something else could be happening here.

    Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

    Note: For the fastest response time, please make sure and add any information or questions directly to this topic and not the email address above unless asked.

    It would also be helpful if possible to grab a screenshot of one of the errors or allowlist notifications to see what might be happening. You could take a screenshot using Snipboard and paste the URL here so I can try to further assist you. If you’d like to keep the screenshots private, I would also accept them to wftest @ wordfence . com provided you also put your forum username in the email subject so I can easily find it.

    Thanks,

    Peter.

    Pete,
    It says this was resolved, but there is no resolution. We are getting the exact same error message. Although we are able to click on pop-ups to white list (many of them), I would like to resolved once for all (we see it everything time a plugin is upgraded).

    Thanks

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Wordfence, Gravity Forms & HIPAA Forms Plugin’ is closed to new replies.