ContactForm 7.5.4 not sending anymore; messages seen as spam
-
We’ve got a great problem with ipdate 7.5.4.
I’ve done a manual roll-back tot 7.5.3.2 for all our sites.In the latest release all forms are seen as spam by CF7 itself! I checked this by editing the two similar texts in the messages screen.
We use SMTP mail. Test messages are good. But CF7 sending fails.
It seems to me that sending the form is only allowed to IP addresses that are explicitly whitelisted on the mailserver that belongs to the WordPress install domain. ReCaptcha seems not the cause. How this happens is fully unclear to me.A roll back to 7.5.3.2 solves this issue for all our 100+ sites.
I did the rol back by manual FTP (delete and upload) to preserve the plugin settings and forms.
-
I think I found out what happens.
We use disable WP-REST with an exeption for CF7. This is a security measure since WP-REST is used for hackers to retrieve log-in names a.s.o. WP-REST should not be accessible to non-logged-in users. That is a known security leak in WordPress.
We have also an option to disable the visability of usernames.if ( is_author() ) { // wp_redirect( home_url( '/dashboard/' ) ); wp_redirect( home_url('/') ); die; }This worked fine in Contact Form 7.5.3.2
For CF7 v 7.5.4 we had to enhance the disable WP-REST code further. After that the form was send. But the confirmation message was not shown.
Disabling the ‘do not show usernames’ function when ‘disable WP-REST’ is also activated, seemed the solution after long search. Now it is working again.Please reconsider the use of WP-REST and inform us about code changes that may affect functionality of CF7.
So, something must have been changed in the use of WP-REST API in CF 7.5.4.
- The topic ‘ContactForm 7.5.4 not sending anymore; messages seen as spam’ is closed to new replies.
