Wordfence - WordPress Security Plugins v8.0.5

websaint said:

I installed Wordfence v7.5.7 on one of my WordPress sites. Really good. Although, I will advice that you create a special email address to send the notifications to. It can be overwhelming. Thanks guys. I appreciate getting access to a good copy here in Babiato.

Click to expand...

NoId said:

Thanks for a great plugin,
i have some issue with Allowlisted IP addresses section, always appear this IP as whitelist
135.125.83.227
I removed and same setting but it appears again,
hope someone can help me with this pl

Thanks lot

Click to expand...

rnr222 said:

Can anyone tell me why are there these lines on code in wp-content/plugins/wordfence/lib/wordfenceClass.php


Why do we need the POST input from the user? As I see it, this has nothing to do with the nullifying process.

Click to expand...

rnr222 said:

You can look at nulled version from other sites, there is no any userDat variable modification in that file, only reg. info is added. I believe, this is some kind of a backdoor.

Click to expand...

rnr222 said:

You can look at nulled version from other sites, there is no any userDat variable modification in that file, only reg. info is added. I believe, this is some kind of a backdoor.

Click to expand...

wfConfig::set('isPaid', 1);
wfConfig::set('keyType', wfAPI::KEY_TYPE_PAID_CURRENT);
wfConfig::set('premiumNextRenew', time()+1131536000);

Click to expand...

Dukessa said:

You'll find it inside the Uncode theme.

Click to expand...

rnr222 said:

You can look at nulled version from other sites, there is no any userDat variable modification in that file, only reg. info is added. I believe, this is some kind of a backdoor.

Click to expand...

NoId said:

i also have doubt, this plugin automatically add ip in whitelist, i tried to delete that but every time it appear again, if that ip belong to wp rocket why not plugin ask me to add that in ip whitelist and when i i try to delete plugin do not let me to do that,
something is wrong

Click to expand...

pentlypop said:

Indeed. Here is the original file the only difference is that I added :
Check the file yourself. after upload then Go to wordfence and do a sacn and click on details then see difference. and then just click on ignore till next change.

Click to expand...

Akbaba said:

hi guys please try and let me know the result v.7.5.7

the error i got

Click to expand...

MrJain121 said:

@Moderators @p.majax @TassieNZ
requesting your expertise here, and comment for better clarification... if you have time please, thank you.

Click to expand...

pentlypop said:

really. not even one response? just lie and say its not a backdoor. even just that

Click to expand...

Drewcifer said:

YES, Just follow M.C's advice. I'm not a hacker, but I felt something like a superhero when I went in, edited a single entry (as described in the activation instructions and it totally unlocked WordFence, it was too easy. It's my understanding that it's been this way for some time. I wonder why a plugin that prides itself on being a "security" plugin can be so easily manipulated and activated?

Click to expand...

M.C said:

Because poor people need use of good plugins too...

Click to expand...