• Resolved katieorr

    (@katieorr)


    I was attempting to get GTM installed on my site by using the Code Snippets plugin by WP. The Wordfence plugin denied publishing (of the head code specifically) by saying that “a potentially unsafe operation has been detected in your request to this site.” Below, it says “The access to this service has been limited (HTTP response code 403).” The only way to get around it is to deem the statement as a false positive. I am weary about doing that without understanding the problem further. Has anyone had this issue before? What risks are involved with deeming the statement a false positive?

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Contributor Verdi Heinz

    (@ver3)

    Hi @katieorr sorry for the delay, we’re looking into it, expect a reply soon. Thank you for your patience.

    Plugin Author pauserratgutierrez

    (@pauserratgutierrez)

    Hi @katieorr

    The issue you’re encountering with Wordfence blocking the addition of Google Tag Manager (GTM) code via the Code Snippets plugin is not related to Code Snippets plugin itself but is due to Wordfence’s security settings. To resolve this, you can set Wordfence to Learning Mode, which allows it to recognize and permit legitimate actions:

    1. Navigate to the Wordfence Dashboard and click on ‘Manage WAF’.
    2. Under ‘Basic Firewall Options’, set the Web Application Firewall Status to ‘Learning Mode’.
    3. Add your GTM code using the Code Snippets plugin.
    4. After completing the action, revert the Web Application Firewall Status back to ‘Enabled and Protecting’.

    This process helps Wordfence learn that the action is safe and should be allowed in the future. For more detailed instructions, refer to Wordfence’s guide on Learning Mode.

    If you continue to experience issues, consider reaching out to Wordfence support for further assistance.

    Thank you,
    Pau.

Viewing 2 replies - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.