• Resolved erniemanifest

    (@erniemanifest)


    Hi there,

    I am having some trouble figuring out the best way to allowlist URLs and domains related to Zapier, which keep getting blocked when I attempt to use an integration I have built to automatically upload the images to the website. The only way I could resolve the issue was to briefly shut off the plugin for a few seconds to allow the desired zap run to go through. (The URL triggering the 403 error is //wp-json/wp/v2/media.)

    I tried following the tips on this page, but they are written for JetPack rather than WordFence: https://zapier.com/help/doc/common-problems-wordpress

    To be clear, we are using the official Zapier plugin, not the WooCommerce Zapier plugin, and this problem has only emerged within the last two weeks. Previously, I did not have issues with the Zapier integration, which I have used for many years.

    Ideally, it would be nice if Zapier had an allowlist checkbox along the lines of the ones you have for Facebook and ManageWP on the Firewall options page. I have attempted to allowlist the user agent as well as some IP addresses, but Zapier uses so many IP addresses that it would be difficult or unsafe to whitelist them all.

    Please let me know if you have any suggestions for how to best handle the allowlist approach.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @erniemanifest, thanks for looking into this and providing plenty of detail.

    I am initially wondering whether enabling Learning Mode when your Zaps are running may have a similar effect to disabling Wordfence but teach the WAF to allow the actions in future. I’ve provided a link there for you to follow if it’s not already been tried.

    Aside from this, have you recently made any major updates like PHP8 from PHP7+? I have noticed that some firewall rules can hit increased levels of false-positives on PHP8 and might be affecting things. PHP7.4 will be supported until November this year so should be safe to continue with until these issues have been ironed out with our ongoing tests.

    If neither of those appear to be the issue, by all means send a diagnostic report to wftest @ wordfence . com so I can troubleshoot your connections/API endpoint myself. You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

    NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

    Peter.

    I think we are experiencing the same issues. Although we use Zapier through FormidableForms. But they aswell as a our Salesforce Connection have both stopped working since a short time.

    Have you found a solution?

    • This reply was modified 2 years, 3 months ago by Gamersea.
    mikenco

    (@mikenco)

    We’re having this issue too. PHP 7.443. Removed anything effecting XML-RPC, unset it in Wordfence. Still getting a 403 refused.

    Any ideas on what to test next?

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Zapier integration issues with WordFence’ is closed to new replies.