jonburr

Abandoned. I added an html version of the menu into a custom template.

I had this issue too. I found that switching to html edit mode and back clears it.

It looks like these servers may have changed their headers to prevent loading in iframes.
I’m abandoning the plugin.
More on this

If there’s a workaround, I’d like to know about it..
funny, it worked a couple of years ago. I don’t spend a lot of time going over my site to make sure plugin solutions that used to work still work… but it looks like that’s necessary.

Same question

I found it…
https://geolite.maxmind.com/download/geoip/database/GeoLite2-Country.tar.gz.md5

Thank you, Phil. It showed up in a security scan.. having been hacked recently, I deleted it… ??
Is there a direct link to find and download the .mmdb file in order to restore it?

Hi Pascal –
I found the db file in my uploads – but I didn’t put it there.
I’m wondering how it got there… might it have been installed by Woo Commerce? Or Wordfence?

– and, another thing I learned, after successfully creating the fresh new user and deleting the one under attack… using the “block user name” feature turns em away and doesn’t trigger an alert. The inbox has settled down considerably.
Wordfence is a great freaking tool.

Apologies, thought you were them…:)
I’m sure another hapless user will stumble on this thread and come away wiser for it.

It’s a moot point now – but if that information had been in your article, it would have saved me a lot of time and stress.

Meanwhile, I learned that I could have (temporarily) whitelisted my own IP. I think my error came from failing to save the new user in WP before logging in.

This article might help.
https://jbq.net/migrating-a-wordpress-site-if-wordfence-is-installed-using-duplicator-and-mamp/

Thank you for the boost, Cory! ??

Thank you, Cory ! Glad it can be useful.
I’d love to see a checklist in the FAQ… given that so many users will have security or caching plugins installed, it would be good to include a checklist of things that really should be done manually – and Captcha, login renaming – I’m sure there are a ton of others you run into all the time.

I understand it’s impossible to anticipate the infinite variety of user configs in your FAQ – but there are routine villains that come up all the time that deserve a mention, early on in the manual – and how to avoid them.

I learned today that filtering the Wordfence plugin folder isn’t enough – Wordfence puts wordfence-waf.php out at the top level, and that’s the one that causes the Error 500 fail. If Wordfence has been in there at any point, it’s Manual time… ??

I have this issue too.
https://hopesdoorny.org
It’s pulling an image from the old static homepage –
Admin>Settings>Reading>Front Page is set to “Latest Posts.”

Forgot to mention – a handy trick – using CPanel to create a zipped backup of the directory to be overwritten in case anything goes sideways… and don’t forget to zip up the filtered-out directories for transfer. The usual oversize culprit is wp-content/uploads . after running the Duplicator installer, delete the installed uploads file and replace it with your zip…and uncompress it with cPanel.