Wordfence 2FA is enabled but allows any code to get through

  • Resolved whenders

    (@whenders)


    6 months ago

    I have a web page that has used Wordfence for years. I’m not sure when it stoped working but I can enter ANY code and get past 2FA. Admin please DM me because I do not want to expose my site to possible threats. This is the same on all my websites using this plugin.

    Thanks, William

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Plugin Support wfmargaret

    (@wfmargaret)

    Hi @whenders,

    The Wordfence login security features are primarily made for the default WordPress login flow with added compatibility with WooCommerce.  We have seen our 2FA fail to work on custom login forms generated by other themes and plugins.

    Please try disabling all plugins except Wordfence and test again.  Failing that, also try switching to a default theme such as Twenty Twenty-Four and try again as custom Javascript in themes can also cause conflicts. You can install a maintenance mode plugin during this time if site visitors are likely to be impacted during testing.

    Please let us know how it goes!

    Thanks,
    Margaret

Viewing 1 replies (of 1 total)
  • The topic ‘Wordfence 2FA is enabled but allows any code to get through’ is closed to new replies.