Cron unschedule event error for hook: wordfence_batch

Hi @aenea, thanks for getting in touch!

These messages generally shouldn’t cause cron not to run, but?may mean that cron is trying to run a job more than once. These log messages were added in a recent WordPress version, but the issues that trigger them may have been more longstanding.

When you look at Wordfence > Tools > Diagnostics > Cron Jobs, do you see anything reporting as overdue, or does everything seem to be running? If it’s the latter, there’s a chance the error came from a double-hit rather than an outright failure.

Thanks,
Peter.

Nothing reporting as overdue in the cron job details but listing makes no mention of the hook wordfence_batch. Where does that come form?

All seems to be running OK but I’m getting repeated occurrences of the error message I listed in my query. Since it started on 2 July, there have been ~70 occurrences. It doesn’t occur every day but often occurs multiple times on the same day.
For example: on 1 Aug it occurred 5 times, all with the same timestamp (15:27:26 UTC). On 2 Aug, it occurred 6 times but each with a different timestamp. Just once on 3 Aug, 6 times on 4 and 5 Aug. 3 times on 6 Aug (all with same timestamp), 2 times on 7 Aug, once on 8 Aug, 2 times on 9 Aug, 4 times on 10 Aug, nothing on 11 and 12 Aug, once on 13 Aug, nothing on 14 Aug and twice on 15 Aug. Nothing, so far, today.
I can’t make out any regular pattern from these occurrences.

Any further suggestions?

Now getting error message for hook: wordfence_processAttackData :

Cron unschedule event error for hook: wordfence_processAttackData, Error code: could_not_set, Error message: The cron event list could not be saved., Data: {“schedule”:false,”args”:[]}

Closely followed by this warning message:

PHP Warning: Cannot modify header information – headers already sent by (output started at /var/www/web/wp-includes/functions.php:5309) in /var/www/web/wp-includes/feed-rss2-comments.php on line 8

Wondering if there might be a link as this warning message has also been appearing after the wordfence_batchReportFailedAttempts error.

Looking at the live traffic at the time these messages were logged, I can see that a bot was accessing the RSS feeds.

Any help with this mystery would be much appreciated.