WF Blocking API upon activation

  • Good morning, I am reaching out after 2 days of trial and error with 2 issues we are seeing.

    1. Our portfolio tracker has become completely inoperable. Root cause shows wordfence plugin on a conflict test. I have tried to put it the firewall in learning mode and also disabled with the same result. I have attempted to add allowed URLs to support the API data required with no result. Only way is disabling wordfence.

    A second issue we are having is with Ultimate member and and account creation. When a user creates an account and they receive the activate email, it is taking them to a password reset screen where the “Link has expired”. I determined wordfence is also causing this error as it goes away when disabling the plugin as well. Please help me understand what I am overlooking here.

    Thank you!

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @cryptocaddy, thanks for getting in touch and sorry to see you’re having some problems.

    What plugin are you using for your portfolio tracker? I can see if it appears on any of our known incompatibility lists, but it may also help to see why it is being blocked in the Live Traffic page immediately after encountering a problem. Most recent events will be near the top and can be expanded by being clicked, or using the eye icon in the corner. The reason will be in red text.

    The Ultimate Member issue sounds like the behavior when a user fails reCAPTCHA. The verification emails are sent to verify a failed reCAPTCHA score. Google reCAPTCHA v3 only provides a score and nothing else, it doesn’t fall back to picking bicycles/traffic lights/etc., so any fallback is left to the implementer. Wordfence’s Login Security features are only compatible with the default WordPress and WooCommerce login/registration forms. If you have a custom page or modal/popup that has a different login flow to what we’re expecting, that may be another reason for the issue if you have those features enabled.

    Many thanks,
    Peter.

    Thread Starter cryptocaddy

    (@cryptocaddy)

    Thank you for the fast response, Peter.

    The plugin for the portfolio tracker was a custom development from cool plugins to add onto their coins market cap plugin and is called Cryptocurrency Portfolio Tracker. I do have both plugin zip files as well.

    As for the live traffic monitoring, I can see the actions and they are showing successful on the live traffic. but the console is logging the 404 error to-

    wp-json/wp/v2/crypto_portfolio?author=2&&status=private,publish:1

       Failed to load resource: the server responded with a status of 404 ()

    If I disable just the firewall, I am still greeted with the same error. It only goes fully away when I disable Wordfence.

    Thank you again for all the assists on this. Please let me know if you need screen shots or access to the plugin zip file.

    Frank R.

Viewing 2 replies - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.