check this links: https://ibb.co/R47SztQ

An active PHP session was detected
The REST API encountered an error

By disabling plugins, I connected that message to your plugin. Is there a fix for it that I can apply to eliminate the errors?

Thank you,

Cemal

I recently started to use GoDaddy for our website. And in our Site Health, we saw two critical issues ( https://ibb.co/SdKFHQB ) so we contacted to GoDaddy and they told us that we need to identify what plugin cause this issue by deactive our plugin one by one.

We did until we deactivated your Booster, and our critical issues is disappeared ( https://ibb.co/XxBH773 ). When we re-activated your plugin, and they are back again.

This is not good, for giving us the critical issues. Could you please fix these issues in your plugin or what’s your solution for this?

Here are their description on each issues:

1. A PHP session was created by a?session_start()?function call. This interferes with REST API and loopback requests. The session should be closed by?session_write_close()?before making any HTTP requests.
2. The REST API is one way that WordPress and other applications communicate with the server. For example, the block editor screen relies on the REST API to display and save your posts and pages. When testing the REST API, an error was encountered: REST API Endpoint: https://conferenziaworld.com/wp-json/wp/v2/types/post?context=edit REST API Response: (http_request_failed) cURL error 28: Operation timed out after 10001 milliseconds with 0 bytes received

Please and thank you.

How to fix it?
thanks

Salam

A PHP session was created by a session_start() function call. This interferes with REST API and loopback requests. The session should be closed by session_write_close() before making any HTTP requests.

The REST API request failed due to an error.
Error: cURL error 28: Operation timed out after 10003 milliseconds with 0 bytes received (http_request_failed)

Also are people seeing a lot more false positives? I run multiple sites and I have been seeing many more files being reported as critical. We run scans on the entire server and the scans come back clean but Wordfence seems to still there are major issues.

Entire wp-includes folders are being marked as bad, usually across sites that use the same themes. Etc.

Is there a place to see known false positives? If not and all of this is actually malicious I have a pretty serious issue.

Site 1 – 643 Bad Items
Site 2 – Lists an issue but Wordfence will not scan at all
Site 3 – 509 Bad Items
Site 4 – 1 Bad Item – CSS.php
Site 5 – 2 More issues in WP-Includes
Site 6 – 500 Issues
Site 7 – WF will not even start a scan
Site 8 – 503 Issues
Site 9 – Multiple Issues – Mostly Includes issues
Sire 10 – 500 Issues – wp-includes issues

I guess I need to know how I can actually find out if these are real issues or false positives and in turn how to fix the issue where WF will not even scan but the button clearly clicks in the web UI

Yesterday I was informed of 113 critical issues through WordFence which has me worried. I am not a coder so the information about the files is somewhat unclear to me!

For one of the 113
The WordFence alert details say
Details: This file appears to be installed or modified by a hacker to perform malicious activity. If you know about this file you can choose to ignore it to exclude it from future scans. The matched text in this file is: memory_limit = 268435456;\x0apost_max_size = 67108864;\x0asafe_mode = off;\x0aupload_max_filesize = 67108864;

The issue type is: Suspicious:TXT/badphpini.9590
Description: Suspicious php.ini instructions found alongside malware

If I go to view the file it shows
Wordfence: File Viewer
Filename: /homepages/28/d740365789/htdocs/clickandbuilds/vgs/wp-includes/widgets/php.ini
File Size: 101 bytes
File last modified: Friday 18th of May 2018 09:10:59 AM
memory_limit = 268435456;
post_max_size = 67108864;
safe_mode = off;
upload_max_filesize = 67108864;

It seems to me that this may be something that is part of Ionos set-up as it hasn’t changed since the WordPress site was created; but I really need to know whether I have to try and remove all these files. I am worried that if I do the whole link to Ionos will crash.

Any help will be gratefully received.