Wordfence - WordPress Security Plugins v7.11.5

[Shadow Man]

plugin activator ? can you explain bit more ...

Check it out here

 

[Shadow Man]

I checked it but this one's for Wordpress Multisite - where as my site's a regular WP install. Anyways I did install it and the Multisite Install and ran a Wordfence file scan = Same Vulnerability prompt ! So this doesn't help any ways.

Sorry, you can find the one for non-multisite wordpress a few posts before the one I linked to you, at most the previous page. As for the message that appears, I believe that ultimately it is understandable that tampering with the file is detected, given that you actually tampered with it... but I'm not expert enough to swear by it.

 

[Pulgafree]

@pavel2950 @imanuky @EagleDotNet
Below are the instructions already reported by others on how to activate WordPress:

1 - Take the zip containing the plugin that you downloaded from Babiato and extract the contents.
2 - Now open the folder and navigate to the file: wordfence.latest-stable\wordfence\wordfence.php


3 - Inside the file find the line:

if(defined('WP_INSTALLING') && WP_INSTALLING){

In the previous line add the code:

const ActivatorRemainingDays     = 365 * 10;
function initWordfenceActivator() {
    try {
        wfOnboardingController::_markAttempt1Shown();
        wfConfig::set( 'onboardingAttempt3', wfOnboardingController::ONBOARDING_LICENSE );
        if ( empty( wfConfig::get( 'apiKey' ) ) ) {
            wordfence::ajax_downgradeLicense_callback();
        }
        wfConfig::set( 'isPaid', true );
        wfConfig::set( 'keyType', wfLicense::KEY_TYPE_PAID_CURRENT );
        wfConfig::set( 'premiumNextRenew', time() + ActivatorRemainingDays * 86400 );
        wfWAF::getInstance()->getStorageEngine()->setConfig( 'wafStatus', wfFirewall::FIREWALL_MODE_ENABLED );
    } catch ( Exception $exception ) {
        add_action( 'admin_notices', function () use ( $exception ) { ?>
            <div class="notice notice-error">
            <p><?php
                printf(
                    esc_html__( 'error' ),
                    esc_html( $exception->getMessage() )
                ); ?></p>
            </div><?php
        } );
    }
}
add_action( 'plugins_loaded', function () {
    if ( class_exists( 'wfLicense' ) ) {
        initWordfenceActivator();
        wfLicense::current()->setType( wfLicense::TYPE_RESPONSE );
        wfLicense::current()->setPaid( true );
        wfLicense::current()->setRemainingDays( ActivatorRemainingDays );
        wfLicense::current()->setConflicting( false );
        wfLicense::current()->setDeleted( false );
        wfLicense::current()->getKeyType();
    }
} );

4 - Now you have 2 options for making changes:
a) Open the ftp program and send the wordfence.php file directly to the hosting service you use
/wp-content/plugins/wordfence/
b) Reassemble the plugin zip package and upload it via WordPress.

So it worked for me.

​

Can confirm this works perfectly

 

[kheops]

Can confirm this works perfectly

I made the changes in wordfence.php, reassembled the plugin zip package, and uploaded it via WordPress. After installation clicked on Activate but did not activate.

 

[betti1965]

Any idea or way to get rid of this message ... its horror when it gets popped up on a client site I had cicked FIXED / Ignored many times earlier but this message popup every scan...

check "IGNORE" ... is normal

 

[wahwee]

WF Licence: 75f6e77ffa13cc4c769eab911b2d4501cedb5eb3b7a7c6dd2f50dc71531f1a1a174c8c8de6bb9ca44e60480be76d323ab117fa100a5164044b4e8a37f64b07e5

 

[aryribeiro]

Any idea or way to get rid of this message ... its horror when it gets popped up on a client site I had cicked FIXED / Ignored many times earlier but this message popup every scan...

please, test this:

 

[wahwee]

please, test this:

Yes, top right corner "ignore" and select always ignore

 

[aryribeiro]

Yes, top right corner "ignore" and select always ignore

see my attachment?

 

[smoovo]

v7.11.4 is out

 

[insanityNL]

Any idea or way to get rid of this message ... its horror when it gets popped up on a client site I had cicked FIXED / Ignored many times earlier but this message popup every scan...

Back in my early days I used to get loads of nulled themes and plugins. With fooling around I found out the hard way, and limiting the places where I download my stuff

Did you initially used a nulled version from this website, or somewhere else?

Cause it seems the version you used was an altered version with malicious code?

 

[bluvia]

I have updated it automatically like below




seems that it works well

 

[insanityNL]

wordfence.php will be updated as well. Need to reapply the code to make is "active" again.

 

[aryribeiro]

here is ok. its work.

 

[abijita]

Please update the code

 

[HarmonyMandarin]

Any idea or way to get rid of this message ... its horror when it gets popped up on a client site I had cicked FIXED / Ignored many times earlier but this message popup every scan...

Did you uncheck "Scan plugin files against repository versions for changes" in All Options ??

 

[abijita]

Premium version?

 

[abijita]

Just replace the Wordfence.php file from this zip and your free license will be converted to premium. Enjoy!!

You can find wordfence.php file on your plugin/wordfence folder

 

[purity]

Babak updated Wordfence - WordPress Security Plugins with a new update entry:

Wordfence v7.11.4

Download Wordfence v7.11.4 - WordPress Security Plugin Nulled Free
= v7.11.4 - March 11, 2024 =
* Change: CAPTCHA verification when enabled now additionally applies to 2FA logins (may send an email verification on low scores) and no longer reveals whether a user exists for the submitted account credentials (credit: Raxis)
* Fix: Addressed a potential PHP 8 notice in the human/bot detection AJAX call
* Fix: Addressed a potential PHP 8 notice when requesting a lockout unlock...

Read the rest of this update entry...

 

[indiaz]

Just replace the Wordfence.php file from this zip and your free license will be converted to premium. Enjoy!!

You can find wordfence.php file on your plugin/wordfence folder

did anyone tried the latest 7.11.4 version, do you still need to replace