David Adams

Drew, yes, sorry for the poor wording in the title. I don’t seem able to change it here.

@olly-owmc ,

My wesbite’s admin page is hosted at https://example.com/wp/wp-admin (note the ‘wp’). The sucuri support guy replied:

“Hi there,

This issue has now been resolved.

As your WordPress dashboard includes ‘/wp’ in the address bar, I had to overwrite the SiteCheck Scan Target on the following page to https://example.com/

https://example.com/wp/wp-admin/admin.php?page=sucuriscan_settings#apiservice”

So I think the plugin picks up the non-standard location, but this is not publicly accessible so causes the 404 error. Changing the “MALWARE SCAN TARGET:” to the public URL appear to fix the issue (for me at least).

Hope this helps.

Regards,
David.

@olly-owmc ,

I am facing this exact same issue, I too am on shared hosting and force HTTPS with a Let’s Encrypt certificate, although I do this via the Sucuri Firewall rather than .htaccess. I’m a Sucuri paid-up customer and submitted a support ticket for this issue earlier today. I’ll let you know how they resolve it.

Interestingly, I have two identically configured sites, both have the Sucuri plugin installed, one has this error, the other doesn’t.

Regards,
David.