Hi @david9988, thanks for your question.
There’s an “Allowlisted URLs” section in Wordfence > All Options. This can be tricky to get the precise parameters though, even when inspecting the payload sent by certain plugins/forms in your browser, so there are two things you can try that will add items to this list for you.
The easiest thing is to place Wordfence in Learning Mode. From the Wordfence Dashboard click on Manage WAF. Then you will see Basic Firewall Options > Web Application Firewall Status. Change the option to Learning Mode. You could then attempt to perform the actions for trp-ajax.php (and others) that were previously being blocked. If they start to work as normal, switch the WAF from Learning Mode back to Enabled and Protecting to see if it continues to work afterwards.
If that doesn’t start permanently being allowed, repeat the blocked action again so a recent case appears near the top of your Live Traffic page. When clicking the block line (or “eye” icon), it will state the reason in red text. In many cases, an “ADD PARAM TO FIREWALL ALLOWLIST” button appears in this section which you can click to allow these types of request in future.
I hope that helps you out!
Peter.
