WFAdam

Thanks for confirming that.

Let’s try to disable the alerts and reactivate them. Sometimes this can reset the database and get the emails going again.

Log into your site and navigate to Wordfence > All Options > Email Alert Preferences and disable all these options – then SAVE. Once the Save is complete, check the email alert options you would like to have set and then SAVE again.

Let me know if this works.

Hello @ughimire1 and thanks for reaching out to us!

Thanks for providing all that information and screenshots.

It is a false positive because the URL is not actually used in the code. It’s just being flagged because it detected the presence of a malicious domain.

Thanks again!

Hello @kristinubute and thanks for reaching out to us!

XMLRPC.php is a file in the WordPress core that allows remote communication with a WordPress site.

The brute force login attack prevention rules protect against login attacks to the XML-RPC interface in the same way as they protect the login page:

https://www.wordfence.com/help/firewall/brute-force/

Suppose you don’t use the XML-RPC interface to log in to your site, using the WordPress application on a smartphone or tablet for example. In that case, you can disable access using the option Disable XML-RPC authentication on the Login Security >> Settings page.

Thanks!

Hello @asafm7 and thanks for reaching out to us!

Have you ever received the scan results in the past or has this always been an issue?

Can you log into your site and navigate to Wordfence > All Options > General Wordfence Options > Where to email alerts and make sure you have your correct email listed here?

Thanks!

Hello @squelch and thanks for reaching out to us!

I am sorry to hear about the issues you’re having with 2FA on your site.

If you don’t mind, I would like to have a look at a diagnostic from your site to see if possibly there is a plugin conflict on the site causing some issues.

Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

Thanks!

Hello @alexmanase and thanks for reaching out to us!

I am wondering if your site is seeing a lot of human traffic or if the IP detection might be set incorrectly.

Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.
NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

Thanks again!

Hello @cyberbless and thanks for reaching out to us!

If you’re speaking of Wordfence FREE, then yes its one per site.

For anything related to Premium, we aren’t allowed to discuss those here as per forum rules.?

If you have any questions regarding the premium version feel free to put in a support ticket at https://support.wordfence.com or for more information contact presales @ wordfence . com.

Thanks again!

Hello @alloz and thanks for reaching out to us!

I’m happy to provide you with instructions on how to get back into your site. Follow these steps:

• Please use FTP/SFTP — or any file manager your web host provides via their administration panel.
• Look inside the /wp-content/plugins/ directory and rename the wordfence directory to wordfence.bak.
• Once you have logged in to your WordPress admin you can name the folder back to wordfence again.
• Refresh your dashboard and you should be able to see Wordfence Active again. If not, go to the Plugins page and Activate it.

If you are not receiving emails, the unlock emails actually come from your website and not our servers. If you aren’t getting emails then you might want to check:

• The emails (they come from [email protected]) are getting sent to your junk mail folder by your email client or provider.  Make sure and whitelist or add your website to the list of safe domains so you get emails consistently.
• Your web server is having a problem with the email software on it.  This isn’t like regular emails you send and receive, but rather server alert messages. Usually, a restart of postfix or sendmail (whichever is installed) can fix it.  Your hosting provider may need to help with this.
• Your hosting provider has disabled SMTP from the server for some reason like preventing the server from being used to spam people.
• You have a third party plugin for sending emails with another service, like Gmail, which isn’t working.  Reaching out to the plugin author for support can help.

Once you get logged in, send me a Diagnostic so I can see if everything is set up correctly so this doesn’t happen to you again.

Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

Hello @sensibleandy and thanks for reaching out to us!

Currently, this is not possible and it can only be viewed via the WordPress user profile, as you mentioned. I do like this idea though so I have passed it to our Dev/QA team for review.

If they decide to implement it, you might see it on a future release.

Thanks again!

Hello @simon_a6 and thanks for reaching out to us!

2FA can help but there might be some other things you will want to make sure are in place to help secure your site.

Let’s start with 2FA. Here is a video on our docs page that can help you set up 2FA for your admin accounts on your WordPress site:
https://www.wordfence.com/help/tools/two-factor-authentication/#how-to-enable-two-factor-authentication

Next you will want to make sure your Wordfence Firewall is Optimized. Navigate to Wordfence > Firewall > Manage WAF and make sure the WAF is Enabled and Protected and then run the Firewall Optimization Wizard if you haven’t already.

After that, I would recommend running a High Sensivitivy Scan on your site. Navigate to Wordfence > Scan > Manage Scan > High Sensitivity and then SAVE and run a scan. Make sure to check all the Critical and High scan results.

This should be a good start to a healthy security on the site. Let me know if you have any questions!

Thanks again!

Hello @aljuk and thanks for reaching out to us!

I think this might be related to your other issue you posted. I will help you troubleshoot in that thread.

Hello @aljuk and thanks for reaching out to us!

I am wondering if there is a plugin conflict on the site, PHP issue, or JS issue.

Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

Thanks again!

Hello @btrumpet and thanks for reaching out to us!

A diagnostic might help me see if this is a legitimate file or not.

Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

Thanks again!

Hello @bri001 and thanks for reaching out to us!

A diagnostic might help me see what is happening and also allow me to review some of the found results.

Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

Thanks again!

Hello @dimalifragis and thanks for reaching out to us!

I would like to look more into this issue.

Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

Thanks again!