@jdembowski I was never going to post credentials publicly. I was waiting for the author to agree, then would mail a test account login directly to him. “I can provide the author with a login if required….” does not meet “Watch out! I’m about to post an admin login to my website for all to see!!”
Thanks for the concern, but not my first BBQ here.
@furkan811 all the sites have a very similar bunch of plugins and WordFence is configured similarly on all sites. No special rules in apache. Problem persists even after migrating to new site with PHP 7.1, so am convinced is some kind of plugin or theme conflict. If I looked hard enough I’d probably find one little thing the affected sites all have in common, but to be honest it’s not a shows topper – the site is working fine otherwise, is accessed via Cloudflare DNS records, I’ve just lost the ability to change Cloudflare settings from within the site itself, and the sites I actually need SSL on I use Let’s Encrypt , so Cloudflare is set to Full (Strict) for SSL.
Thanks for your reply.