locallad

Thank you! I appreciate your response and the information.
Rather than turning off the Bot Fight Mode in CloudFlare (which is handy for other issues), I have created an ‘Allow’ rule to allow the request through to the website.
IF: URI query string contains “mailpoet_router&endpoint” – ALLOW
This appears to work perfectly.

Hi Serge, It wasnt an error as such… My website sits behind cloudflare and uses IP and ASN blocking at the cache level to stop issues/attacks, etc, accessing my website. I had a series of scans (about 30 in total) – all from the same IP address. It scanned for various plugins (some of which I know have had vulns and have been upgraded by the OEM).

As it was also scanning for the latest version of CleanTalk, I wondered… was there a vuln on that js script that you arent/werent aware of?

The screengrab above is the only information available from my blocked network log that would be of interest to you.

Regards
C

@onojane: Really great solution – kudos and much appreciated!

Aha! That explains a lot (and I thought it was something I did..!)

Thank you @tstachlewski, I’d appreciate being kept in the loop on this.. Perhaps you could have a shortcode option in the next release (like @writerdan) suggested?

Regards

You’re right! but on the main page (ie: the Whats New page) you dont see the player (and I used to)..?
Confused now!
Thanks for your comment!

Yup – Me too (error code = Warning: mysqli_real_escape_string() expects parameter 2 to be string, array given in /….)
Error is visible at top of public facing website home page.

AVH First Defense Against Spam Plugin version 3.7.2
WordPress version 4.5.3 (en_GB)
MySQL version 5.6.21
PHP version 5.5.26

Temporary working solution – Disabled AVH Plugin

Please fix!
Thank you