Wordfence blocking REST API access to The Events Calendar

  • Resolved Danny

    (@dannycare)


    1 year, 4 months ago

    I installed Wordfence on our site after having some security issues on our staging server. The site is currently in development and so I can’t provide a preview link.

    After installing Wordfence, The Events Calendar Filter Bar on our events page has stopped filtering items properly. Upon inspection, it appears though a 401 error occurs every time a filter is selected.

    Failed to load resource: the server responded with a status of 401 (Unauthorized)

/wp-json/tribe/views/v2/html
    • This only happens when logged out of the site.
    • Logged in users of all roles can successfully use the filters
    • I deactivated Wordfence and the problem disappears

    I have used Wordfence before, but a few years ago now. So any advice on how to fix this or where to start would be appreciated.

Viewing 5 replies - 1 through 5 (of 5 total)
  • Thread Starter Danny

    (@dannycare)

    Many apologies here. It appears as though another plugin was blocking REST API access. BuddyBoss in particular.

    It appears through a recent plugin update, a setting was set to ‘true’ in the REST API settings. I was barking up the wrong tree!

    Plugin Support wfpeter

    (@wfpeter)

    No problem @dannycare, thanks for the update on this. I was going to state before I saw your second message that “401 Unauthorized” looks like a web server response rather than a diverted Wordfence error code, which is more likely a 403 or 503.

    Best of luck with the rest of your site development.

    Peter.

    Hitting the same issue, what is the work around?

    I see this comment:

    “It appears through a recent plugin update, a setting was set to ‘true’ in the REST API settings. I was barking up the wrong tree!”

    Is that in Tribe Events, or in BuddyBoss?

    Workaround is to whitelist the events calendar URL in the BuddyBoss REST API [WP Admin -> BuddyBoss -> Settings -> Privacy].

    Add

    wp-json/tribe/views/v2/html

    to the section “Public Rest APIs”

    Thank you guys so much, I was pulling my hair out looking in the wrong places.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Wordfence blocking REST API access to The Events Calendar’ is closed to new replies.