scottm-ldg

Never mind, it appears the problem was in the browser cache after all. I cleared the browser cache, restarted the browser and the old script was gone.

Sorry for the meaningless post /o\

• This reply was modified 6 years, 4 months ago by scottm-ldg.

that generally means the plugins folder is still in your wordpress install’s wp-content/plugins folder. It may not be displaying in your website’s dashboard/Plugins, but it’s still in there. You just need to FTP into your host, remove the folder and then re-install the plugin.

Nevermind I just found the download link:
https://ultimatemember.com/extensions/google-recaptcha/

Hi,
Is there a link to register a free account? I don’t see a place to register an account so that I can download UM Google ReCaptcha 2.0.2?

That’s great! Thank you :]

That did seem to do it, I must have missed the setting to disable REST API in the WordPress tweaks. Thanks for the redirect :]

I will say however that solution is a bit of a meat-cleaver solution – turning off REST all together, I do hope iThemes Security are able to add a check for that one vulnerability so we can still have access to the other benefits of REST.

For now however I’m just glad to have this protection on that one site. Thanks again for you your help proni!

Yes that article is where I got the info from. My problem is that I can’t use Wordfence on one of my clients websites so I’m relying only on iThemes Security to fix the problem. Unfortunately, in its current state iThemes Security doesn’t fix the problem, when I go to my clients site that only has iThemes Security installed and run the URL I still get that JSON list of usernames.

I’m hoping we’ll see a patch coming soon because I can’t install Wordfence on that one clients website without creating other problem for them.

Please ignore my earlier post, I’ve since found the setting by clicking on the “All” link to display the Advanced options. That displayed the “Hide Backend” panel.

Has the Advanced menu been removed? I went looking for the “Hide Backend” section and I don’t see it at all. I don’t see any “Advanced” link either.

Is there still a hide the backend feature?

Thanks for the reply dwinden, that explained the extra field. I’ll send a bug report to iThemes on this one.

Here are some screenshots that show the extra input field:

Has field for setting the Registration slug

Does not have the field that alters the Registration slug

These screenshots are from two different sites, both running the latest WordPress and Security 5.1.0

That’s good to hear Marcus! My clients love your plugin! :]

I’m getting the same thing, I hope they aren’t discontinuing the free version of the plugin :/

Yep, turns out that’s what happened. Everything is working once we got the correct credentials.

Thanks again

…I just wanted to share this with you. I heard back from my client and he said that they had issued him an API Certificate not an API Signature, so he did send me the correct info, it was just that it was not a signature. I guess they are going to switch it over.

I’ve no idea why they issued a certificate rather than a signature

…any thoughts on what that might be?