WFAdam

Hello @b4b12312 and thanks for reaching out to us!

Would that be the Elementor Pro or the Elementor from the WordPress repo?

When you try to do the update, are you seeing any blocks in the Wordfence > Tools > Live Traffic page for that request? You might be able to see the reason why the request is being blocked.

Let me know what you find! Thanks again.

Hello @kevbud and thanks for reaching out to us!

If you wouldn’t mind, I would like to take a deeper look at this issue.

Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

Thanks again!

Hello @ss_minnow and thanks for reaching out to us!

Yes, Wordfence does create and use tables in the database. If you’re seeing old file paths or something isn’t working correctly, I would suggest to reinstall the plugin by following these steps:

It’s always best to make a backup of the site and database before installing/removing plugins, just to be safe.

Additionally, you can backup your Wordfence settings via the Export option. Navigate to Wordfence > Tools > Import/Export Options and click Export. You can also take note of the current Whitelisted URLs you have in Wordfence > Firewall > All Firewall Options > Whitelisted URLs as these are NOT included in the Import/Export, and will be lost during the re-install.

Here is what is exported: https://www.wordfence.com/help/tools/import-export

During the export, you will be given a long string of text. Keep this safe, you’ll need it in a few minutes. 

After that, enable the option to Wordfence tables and data on deactivation in All Options > General Wordfence Options. You will want to remember to disable this after you reinstall Wordfence again.

After you enable that option, you can deactivate Wordfence from the Plugins area of your site, then delete it. Next, from the plugins area, search for and re-install Wordfence like normal.

It will be like setting Wordfence up for the first time. You will need to enter an email address, and then go into Tools > Import/Export Options and paste that string of text into the Import Wordfence Options field and click the button there.

The firewall will be in Learning Mode by default for 7 days. I would recommend switching this to Enabled and Protecting as soon as possible.

Thanks again!

Hello @adrianalauren and thanks for reaching out to us!

I would like to see what sort of Server API your site is running on just to make sure you’re doing the correct steps.

Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

Thanks again!

Hello @billb101 and thanks for reaching out to us!

Just so I can do some tests on your login page, would you mind sending me a diagnostic to review?

Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

Thanks again!

Hello @glonojake and thanks for reaching out to us!

A 403 is usually when the firewall blocks a user or action, usually something that it thought was malicious in nature.

A 503 is usually when a Brute Force Protection rule is broken. This could be IP blocking, too many failed login attempts or password recoveries.

It sounds like normal behavior on your site and you should be all set.

Thanks again!

Thanks for confirming that.

Let’s try to disable the alerts and reactivate them. Sometimes this can reset the database and get the emails going again.

Log into your site and navigate to Wordfence > All Options > Email Alert Preferences and disable all these options – then SAVE. Once the Save is complete, check the email alert options you would like to have set and then SAVE again.

Let me know if this works.

Hello @ughimire1 and thanks for reaching out to us!

Thanks for providing all that information and screenshots.

It is a false positive because the URL is not actually used in the code. It’s just being flagged because it detected the presence of a malicious domain.

Thanks again!

Hello @kristinubute and thanks for reaching out to us!

XMLRPC.php is a file in the WordPress core that allows remote communication with a WordPress site.

The brute force login attack prevention rules protect against login attacks to the XML-RPC interface in the same way as they protect the login page:

https://www.wordfence.com/help/firewall/brute-force/

Suppose you don’t use the XML-RPC interface to log in to your site, using the WordPress application on a smartphone or tablet for example. In that case, you can disable access using the option Disable XML-RPC authentication on the Login Security >> Settings page.

Thanks!

Hello @asafm7 and thanks for reaching out to us!

Have you ever received the scan results in the past or has this always been an issue?

Can you log into your site and navigate to Wordfence > All Options > General Wordfence Options > Where to email alerts and make sure you have your correct email listed here?

Thanks!

Hello @squelch and thanks for reaching out to us!

I am sorry to hear about the issues you’re having with 2FA on your site.

If you don’t mind, I would like to have a look at a diagnostic from your site to see if possibly there is a plugin conflict on the site causing some issues.

Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

Thanks!

Hello @alexmanase and thanks for reaching out to us!

I am wondering if your site is seeing a lot of human traffic or if the IP detection might be set incorrectly.

Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.
NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

Thanks again!

Hello @cyberbless and thanks for reaching out to us!

If you’re speaking of Wordfence FREE, then yes its one per site.

For anything related to Premium, we aren’t allowed to discuss those here as per forum rules.?

If you have any questions regarding the premium version feel free to put in a support ticket at https://support.wordfence.com or for more information contact presales @ wordfence . com.

Thanks again!

Hello @alloz and thanks for reaching out to us!

I’m happy to provide you with instructions on how to get back into your site. Follow these steps:

• Please use FTP/SFTP — or any file manager your web host provides via their administration panel.
• Look inside the /wp-content/plugins/ directory and rename the wordfence directory to wordfence.bak.
• Once you have logged in to your WordPress admin you can name the folder back to wordfence again.
• Refresh your dashboard and you should be able to see Wordfence Active again. If not, go to the Plugins page and Activate it.

If you are not receiving emails, the unlock emails actually come from your website and not our servers. If you aren’t getting emails then you might want to check:

• The emails (they come from [email protected]) are getting sent to your junk mail folder by your email client or provider.  Make sure and whitelist or add your website to the list of safe domains so you get emails consistently.
• Your web server is having a problem with the email software on it.  This isn’t like regular emails you send and receive, but rather server alert messages. Usually, a restart of postfix or sendmail (whichever is installed) can fix it.  Your hosting provider may need to help with this.
• Your hosting provider has disabled SMTP from the server for some reason like preventing the server from being used to spam people.
• You have a third party plugin for sending emails with another service, like Gmail, which isn’t working.  Reaching out to the plugin author for support can help.

Once you get logged in, send me a Diagnostic so I can see if everything is set up correctly so this doesn’t happen to you again.

Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

Hello @sensibleandy and thanks for reaching out to us!

Currently, this is not possible and it can only be viewed via the WordPress user profile, as you mentioned. I do like this idea though so I have passed it to our Dev/QA team for review.

If they decide to implement it, you might see it on a future release.

Thanks again!