芝麻web文件管理V1.00
编辑当前文件:/home/conskgoa/ezzyit.com/wp-content/languages/plugins/wordfence-en_GB.mo
k tc " ' 4 ) \ ' * . + L x ) D a h j p I F V w * 3 ! = } _ ( $ 8 > $ E j - > J b { * ; N o } N " ? \ h t X & / . F u $ 8 I b o # 8 X ` n - u @ Y f > / , v p W K! d A" t " # m $ K n$ $ j% V % ` H& d & 7 ' a F' a ' ( ) @* V * '+ > + + - u. 2/ / U0 t 1 G {1 1 2 3 3 4 = h5 f 5 6 7 8 2: ; f n= > @ A B C : C . C . *D - YD W D E D %E E uF 1 G d 4G G : (H > cH H I KJ J M WK G L d L j RM X M N . N $O = O 7P GP > JP $ P 3 P f P IQ G YQ Q Q Q Q Q R R &R % 7R ]R dR R R R R R R R R S /S ES US hS yS S S ) S S S T T 5T AT ]T ! lT T T T T T + T $ +U PU ^U fU ' |U 8 U E U < #V = `V # V T V + W < CW W W W W W W W W D W &X B 7X Z zX < X Y E Y j Z C |Z $ Z Z Z [ 6 &[ . ][ [ [ C\ \ ] '] 9] % N] t] ] ] ] ] 5 ] # ^ 6 0^ g^ D r_ _ = s` ! ` G ` a ; -a H ia + a 4 a b 1 b 4 b + c . Fc 0 uc c c 3 c d ^ e ` ze G e W #f O {f L f Q g D jg ' g $ g " g h , @h + mh ) h ) h h A i * Pi U {i K i h j V j H j I &k pk . k a k , !l Nl il l 6 l 2 l , m ;m Cm Jm ) Sm }m m j m 5 n =n Rn cn rn n n n 6 n * n / *o > Zo o +p E Lp b p p q q vr R r J Ms s s s m s * u Iv w y 4 y )z z z { { G +{ < s{ { { { { { | .| M| k| ' | | | | | | | } } +} 2} ' =} e} |} } } } } ~ ~ ? # W c * ; C 4 M V m ~ v Ɓ = T \ d * k ق " B + n | $ ʃ $ * D ? I ӄ % ; & O v ( % х % $ ! 1 A S ) 1 * ' % D - j ؇ Y R \ l ( } ! 8 F Y v ɉ ߊ $ % " / H x 6 ʋ ( B G ^ g v % W [ ( e H + - 7 L . A ) % E % e 9 ŏ ݐ ( % ' E m ! / Ƒ + = " > ` 8 6 ؒ 8 8 H : 8 # E E _ D D ? / ? o + + ە . G 6 6 ~ , * ( . 4 E K e r + ! ڗ 5 ? J , A ' n s G R + k ) ߚ 9 0 F 6 } ) ՛ > ݛ < 1 Y 1 Ŝ 4 + D W j x % ѝ ~ > a % ˟ ݟ ' < G % _ ͡ ? ڡ 0 E P / ] + / T ; > z 3 : ţ K 5 L ^ A # n : & Х $ ֥ . ? X ' i # զ ݦ ( 8 & T { Ч * 1 I ^ $ x ը $ ? Z w Ω # - L * ; R < e ë ȫ ӫ ޫ 0 B % J p 6 1 / o I ۭ N 5 C y 0 N ۮ $ * Q O : ( 4 D K S b ( o ( 8 ޱ - E Q l 3 ײ , ' 6 ^ } Ŵ ϴ - # Q \ k { # ϵ 4 = H P p ̶ $ ? \ { L L ? _ \ 7 S a 0 9 L 6 \ 0 ľ Ծ * ? M e ( ( % G b h x $ @ ; 0 | 8 9 * C . J y ! - C * c + , j q 8 0 / G \ 9 m D B E / u } M 2 & G a z % 4 s % 2 O + G S e m s $ @ Y l $ B @ ` > z 8 ! / 2 D w ? E G 7 v N K E C @ : I # ? c " q $ ? = } 6 ! < ^ t { & 9 4 % Z w > 0 3 L ' O 3 K X b m < * ! % " H ] v ! " D N ( n U > h - h 6 | 4 & c # < A ` ) ! 6 1 A s y " > E J \ f ; { * " @ P 5 j * 8 @ H Q l & ~ " ! " , E U b h } C - # ) * - T D g E / ! $ 3 Q i r | " 7 6 H % % ! # * 2 5 A L ] q z ' , , M z * k V ` _ # [ 0 3 @ Q M < J 6 0 L } ] R [ ! o } m n b ? Q X l D : X # h ' $ , G % & m 8 > A \ c E P = 3 H ; # = 4 Y J 6 ! < ^ r 4 w A ( 4 0 e A ~ ( L + 6 ( b E E * ? P g k K B j d z = 9 ? G M _ f j q " | * 3 > K \ q # 1 8 C ] } * ; ; ! L \! @ ! ? ! > *" C i" N " " # # 4# A# & I# p# # 7 $ r 8$ $ $ $ $ $ $ % #% =% R% j% 9 x% % % G % . & + >& ? j& & & & & : & !' 9 5' o' B( M( 0 V( & ( ( H ( H ) K) f) n) ) ) A ) ) ) ) * * $* /* & >* ( e* * * G * 4 + F :+ . + * + I + ; %, a, . }, I , I , @- G- Z- 2 o- - ?. C. 6 Z. . . . . . . . . . . . . / / 5/ ; B/ ~/ / / / / / / / 0 0 (0 =0 M0 Z0 + e0 0 L 0 ( 0 '1 2 2 3 $3 B3 b3 y3 3 D 3 E 3 *4 ;4 F4 `4 k4 & u4 2 4 % 4 * 4 + 5 4 L5 5 5 5 5 5 , 5 6 6 *6 /6 86 Q6 i6 r7 7 7 7 ' 7 S 7 a 8 g |8 8 8 9 9 9 19 B9 $: ,: 7: A: Z: r: : : : : : : ; 8; V; ! j; ; ; ; ; ! ; < 8< O< f< 8 x< G < 2 < ! ,= N= i= q= u= {= = = + > A G? ? A A A A * B @ B " B C : 6C 8 qC C C C . C C D D D 1D 7D TD bD xD D D D D D D D E E 7E QE ) [E E E E E & E E E E E F F !F ; +F " gF F " F F F G # !G EG / ^G & G G G $ G H H $ ,H QH cH # H H x H Z 1I I I I I I g J R yJ s J @K ( UK ~K & K 0 K 9 K 2 L NL UL nL L L L L L L L L L L 4 M ?M MM $ [M M / M M y PN O O O P P *P 8P ?P ! YP {P ~P P ! P 5 P P P P Q Q Q I %Q N oQ J Q H R @ RR 7 R R R S $ (S MT TT + `T T T T \ T U O U U % U ' #V KV ZV 1 cV & V ? V ' V $X & 8X _X rX uX / X X X X X X X Y Y > -Y lY {Y Y Y Y Y Y Y Y Y Y Y Y Z 7 [ 5 \ ( T\ }\ \ \ M \ * ] 3] J] b] y] ] ] ] ] ] ] ] ] ] [ ] & U^ |^ M V_ . _ _ T n` U ` E a ) _a " a # a a $ tb < b b } qc v c fd ~d V he e % f 5 f # g $g 5g Fg _g rg g g g g g g g g g h 4 h % Oh uh h h h h h h h h h i & i ! :i # \i i i i i i i i j &j Aj , Qj ) ~j & j } j } Mk 4 k > l > ?l ~l l 2 l ' l l l m "m -m @m * Qm |m % m 9 m . m n 8 $n ]n cn tn n n # n 8 n n n 8 o o M o ;p X Bp p p p p p p q "q >q Rq # iq q q q q ) q & r )r 1r ) :r P dr r ? r s s "s 2s s t t +t 2t , Nt R {t t ; t )u Iu Xu pu u u u W u : v Ev bv xv v v - v , v x "x Bx Hx [x ix x x x x x x x x x ! y 2 3y fy 3 }y y y y y y z &z :z ?z Rz lz z z z z z z z z { { { 1{ D{ K{ Z{ c{ S | f| w| | | | | | | | | } } +} 0} =} B} n Q} } } } } } ~ (~ D~ Z~ j~ |~ ~ ~ ~ ^ ~ 9 F R = 6 Z i 7 ~ = Ԁ % . 8 1 g W @ . 2 , a < ? ˂ 6 q B v 9 + : e ! ! 2 3 R 8 * B G > B < 0 U ' . $ ݇ 5 9 8 6 r / ʈ 2 $ - 6 R - $ Ӊ & 9 4 F { : ' ϊ . & 9 P ` S o Ë 9 + # G k y R , < " N A q ; x C ' + ) 9 c s n v ~ _ % ( ͓ ! - C R 3 c ' ߔ + + , / \ r V ` m + ԙ & . # U y A њ = A $ f z Ǜ כ E ߛ S % 3 y ) ל ޜ , & 2 B H M " X { 0 ͝ 8 = v f ! ( / Z X ҟ G ٟ ! > Z h r Π ; U p v } ˡ ӡ p y D Ԣ ( * S Z e ̣ ' + = 5 Z 9 E ʤ ; 2 U Z - z { \ ث 9 L . 2 { - X ܬ 1 5 g j ; I J ~ U 2 Y S < D = R 5 պ 9 - & 2 T e F + ߽ ɾ } $ ^ " J Q % i & 2 3 2 P P I " a < p 9 0 7 ] M c _ 7 b $ Z ) > J @ ' O w T T | Y & 6 # Z q Y O 0 J & 2 Y w C o B . * Y w / = H X c o R * } C % & ) / 7 Y + 2 H - 9 g U T U J L a c I A \ y \ x u n ] L { C - ~ r ^ _ 1 # C " 1 = 9 L o _ X r C C m - # V b E . . : { u 9 8 r c 8 > A ) 5 P T H z K H j ! * T 3 9 G L T f [ l 5 J 0 ] / { 0 # ! 3 # ; _ s # / A 6 [ 0 0 ~ T s T I ! ` g! ! j Y" Y " # ## ,# ) 9# c# # C # $ # # $ 1$ >$ B$ I$ Q$ q$ $ $ $ 1 $ % . $% ! S% , u% ) % % 7 % & :& & N Z' ' ' ' ' ' ' ' ( ( ( ( ( $ ( ) ) 7) L) b) t) ) " ) ) " ) ) * * &* =* I* _* v* * * * * * & + 7+ J+ h+ s+ > + ' + + , ' , B, - % - C- V- f- y- > - / - - . m . ~. P . . / 10 0 0 K 1 k \1 c 1 ] ,2 d 2 2 / 2 $3 4 )3 < ^3 3 3 3 $ 3 3 4 4 !4 )4 64 U4 s4 4 4 + 4 4 4 5 !5 75 m D5 g 5 6 46 G6 W6 w6 ( 6 6 6 6 6 6 7 !7 ?7 [7 > f7 7 7 7 1 7 " 7 8 ' 8 E8 M8 R8 i8 x8 8 8 8 8 8 8 8 8 9 9 9 29 G9 _9 y9 9 9 9 9 9 : : 2: =: U: b: : : - : : : : 6 : 3; E; i M; ; 7 = = Z = @ S> - > - > , > 3 ? F Q? 2 ? C ? Z @ = j@ v @ / A f OA 3 A 3 A B . 7B ( fB B B B E F + GG f sH V H @ 1I * rJ J A K K I L N *O O DP Q 3Q ) RQ ) |Q Q Q $ Q $ R /R 9R >R GR PR - _R R R @ R # R !T U 7 U V = W X X Y Y ! Y # Y $ Z /[ , G[ Q t[ [ [ [ \ \ ,\ @\ \\ p\ \ \ \ \ \ ] -] K] f] ] ] @^ ^ t X_ 2 _ ` ` + $` P` ^` s` ` ` 3 ` ` a a )a c Ea a a & a a b X b 6 b 3 /c cc wc ) c $ c - c d 'd Fd e e :e Se % ee ) e e e g " h 'h 9h Ph nh h h % h h ) h #i >i Ui : hi i i i i 7 i /j Pj ! bj ! j ! j j j k & k ! Dk # fk J k ! k k l | um _ m - Rn O n n o p p ? ar ) r M r s 3 s Y t $ gt $ t t Gu u w x x z sy P y : ?z I zz 4 z z | { J | Q| v } n~ ~ # < Հ , ? # V Q z ́ ] ɂ ' ԃ e u ۄ @ - = ߈ ۉ 0 ) Z ߍ $ + v 6 - ّ - 8 5 * n 2 M ̒ : C U 2 9 ̓ 9 : @ : { 1 u y P @ p a җ , / И ] F ^ u i 7 $ ߜ p s u ' W i w ; ^ 9 0 1 < ; R ? % Ρ + * 7 ; b F u ) [ ; G u L ̤ | J Ǧ * | N E ب * 6 I l | t r z x . C \ e q v F n R 4 n 7 J c o w # > մ ( ! C ) e ̵ % + 2 ^ } ; 4 ̶ 0 ' . X 2 Ƿ ҷ ط a U ^ c v ø ˸ ظ ߸ # 1 U & : P ( - y H ¼ μ K M 5 d @ B ۽ Y ) " ' ) ο ' * K Y v . + * E R h | j M ^ e m u I ~ F w ! } O ] r | 8 L ` f q $ - ( C M b j N Y b q X & a / . % $ ? d m q 1 : X b # m - @ V ! W > b , \ v p q d t m r K , V c ` d 7 a a | V B > 1 p ! 9 t x G 5 N 9 = f x 4 f G . M - : 2 . m . - W E Q N 1 t d : > 0 A M G d _ j X / . g = k > $ 3 f T G - E [ l u % 0 @ D ^ i ) + U p | ! 0 M e + q $ ' 8 E O < = # T 4 + < ) > G D S B Z < G E = j C $ 2 W l 6 . k % # 9 5 H # ~ 6 D ( = ! " G D ; H + # 4 O 1 $ 4 V + . 0 + 3 A u ^ ` G L W O L < Q D ' $ H " m , + ) ) 4 ^ A * U K B h V H N! I ! ! . " a 0" , " " " " 6 # 2 L# , # # # # ) # # # j $ 5 x$ $ $ $ $ $ % #% 6 9% * p% / % > % & & E & b ' f' ' `( ( R k) J ) * * * m !* * + , a. {/ 4 e0 0 L1 _1 r1 1 G 1 < 1 !2 +2 B2 T2 k2 2 2 2 2 ' 2 3 &3 .3 >3 U3 k3 z3 3 3 3 ' 3 3 3 4 *4 D4 ^4 G5 b5 |5 ? 5 W 5 ,6 76 <6 G6 Y6 f6 * 6 6 6 v7 ~7 7 7 7 7 7 7 7 8 "8 v 78 8 8 8 8 * 8 9 9 9 9 "9 ,9 J9 j9 v9 9 9 B 9 9 9 9 : : 0: $ ;: $ `: * : D : : ; .; I D; ; ; ; & ; ; ( ; % < B< % W< $ }< ! < A < ) = 1 0= * b= ' = % = - = > > !> 2> I> X> Y i> > > > ( > ? '? ! /? Q? h? l? u? ? ? ? ? ? ? ? @ @ :@ Y@ j@ s@ @ @ PA ^A $ nA % A / A A 6 B ;B SB \B eB lB sB B B B B B B B B C % "C HC aC fC W tC C ( C D H D + dD - D 7 D . D A %E ) gE % E E % E 9 E 7F OG ( hG % G ' G G G ! H / 8H + hH = H > H 8 I 6 JI 8 I 8 I : I 8 .J # gJ E J E J D K D \K ? K ? K + !L + ML . yL G L 6 L , 'M * TM M M M M M M M M + N ,N ! LN nN 5 N ? N N O , O ' O s P G |P P + P ) Q 3Q QQ 9 hQ Q F Q Q R R ) R GR > OR < R 1 R 1 R /S 7S TS 4 hS S S S S S T T % T CT ~ TT > T U U V +V =V OV YV sV V ' W W W % W W W X X $X )X ?X ? LX X X X X / X + X / +Y T [Y ; Y Y 3 Z : 7Z K rZ 5 Z ^ Z A S[ [ n [ & \ B\ $ H\ m\ w\ \ \ \ \ \ ' \ # ] '] 0] G] O] X] k] s] }] ] ] ] & ] ] ] ] ^ '^ B^ \^ k^ ^ ^ ^ ^ ^ $ ^ _ (_ G_ V_ b_ x_ _ _ _ _ ` "` @` a` ` ` ` ` ` {a a a a a < a b 5b :b Eb Pb _b tb b b b % b b c 6 "c 1 Yc / c o c +d 2d Md Yd N fd 5 d d d e 0 e N Me $ e Q e f : 1f lf f g g g g g g g ( g h ( 'h 8 Ph - h h h h 3 h ,i Ii Zj bj , {j ' j j j k .k 7k Ak \k wk - k k k k k l l $l # Al el 4 zl l l l l m m >m \m xm m m m m n L n L do p _ p .r r 7 s s s t t t 6 t 0 u 6u Fu Zu ru u u u u u u u u v ox ( y z "z 'z :z Qz % fz G z z z ^{ { { { | ,| @| ]| p| ~| $ | @ | 0 | 8 } 9 X} } } } . } } ~ #~ B~ R~ c~ ! }~ ~ ~ * ~ + , , K j x 8 : 0 X / 9 ߀ D B ^ E M 2 e ӂ % 4 $ Y h s 2 O > Ņ ׅ ߅ % E ` y $ ˆ ކ $ " G [ B o ҇ > 8 + ! d / 2 ? # E c G v N h K C @ G : , I g # Ռ " $ / G _ f u ? ! Џ & ! @ 9 ] 4 ̐ > R m 0 3 ' O j o t ʒ Ԓ ߒ < * G ! r % ϓ ! + K g n x ! ( + = L b r U > ڕ ' G - W h 6 4 % & Z c J # A Қ ) ! > ` 6 | 1 + E L Q h u Μ ; ) : @ G \ * d " 5 ܞ . J e ß ޟ & " ! : \ b l " { Ǡ Ԡ ڠ C # - g ) - ơ + 2 < " * 3 > C M V ] k D r g / O b h ! o * A J O ` x å ۥ . " D g 7 6 % . = % C ! i ϧ ! : T X \ v , * 6 R ) ! k ȫ ` 4 _ [ 0 Q @ î A J < 6 0 ] V R ' z [ o _ m b N 8 ( B _ m z D # ' $ & K , j G & ' 8 @ y > A c W ^ = g H ! 9 C Y k s 4 J , 4 w ! @ ] 4 | w ) G ( Y 4 A ( 0 L Y + ( E E A - k K f j d = O " " ) 0 ; K P ` # $ H 1 W * 6 ; T ; L @ ? Z > C N l z & h 7 p r # : F Z i 9 " * G 7 . + ? * 4 A : V 9 0 & H ) H r A O Y h ~ & ( G - 4 u F . * I K ; . I I f 2 6 . 8 G N W ` e k x ; * H X n } + L ! ( n I ^ s D E T & 2 % ? * e + 4 3 , F s z ' S 6 a g T g r x + A S o 2 R ! i 8 G 2 e ! + A # * @ # " d : 8 # . ) X y ) ; Q ] b t ) & . A U g u ; " " 7 O o # / & ! 8 $ K p $ # x $ Z 1 J e g } R s 8 ( & 0 9 M 2 " ? X _ j 4 v $ / ! y 6 C ^ o ! ! 5 $ Z _ b m x I N J * H u @ 7 7 S s $ + \ r O a % i ' 1 & ? ( # h & / 5 B O a w > & - > G M X c 7 J 5 ( M * l $ ) 5 @ E T [ ] & M . 7 T U ' E } ) " # 4 $ < : } v S V # % 5 . # d * 5 M \ l 4 ~ % $ 1 > P f & s ! # 4 P j , ) & ! } /! } ! 4 +" > `" > " " " 2 " ' "# J# X# r# # # # * # # % # 9 $ . I$ x$ 8 $ $ $ $ $ $ # $ 8 % O% ]% 8 % 6& M M& & X & & ' ' '' @' X' v' ' ' ' # ' ' ' ( -( ) 8( & b( ( ( ) ( P ( ) ? &) f) m) ) ) K* f* }* * * , * R * .+ ; M+ + + + + + + , W , : j, , , , , , - - , 6- c. . . . . . . . / !/ ./ 6/ G/ O/ ]/ ! q/ 2 / / 3 / 0 .0 M0 U0 \0 r0 0 0 0 0 0 0 0 0 1 )1 /1 =1 X1 a1 k1 v1 1 1 1 1 1 S r2 2 2 2 2 3 3 -3 N3 T3 _3 u3 ~3 3 3 3 3 n 3 4 64 B4 N4 [4 s4 4 4 4 4 4 4 4 5 ^ 5 9 x5 F 5 = 5 6 76 Z n6 6 7 6 7 = 47 % r7 . 7 1 7 W 7 @ Q8 . 8 , 8 < 8 ? +9 6 k9 q 9 v : 9 : : : ! ; ! "; 2 D; w; ; ; 8 C< * |< B < < > = A= I= B Y= = 0 = ' = . > $ => 5 b> 9 > 6 > ? / *? 2 Z? $ ? 6 ? ? - @ $ 3@ & X@ @ @ 4 @ @ : @ ' /A . WA A A A A S A #B .B 9 AB + {B # B B B R B @C EC QC ]C rC C C " C A C D E x E ' G DG KG eG rG ~G G ) G G s ZH H H H _ H KI % J ( -J VJ _J lJ wJ J J J J 3 J J ' K ?K HK + RK ~K K , L M M M M N N O O O O O O P P + 4P `P eP mP {P & P # P P A P 1Q = FQ A Q Q Q Q R R 'R 7R E ?R S R 3 R ) S 7S >S LS , YS S S S S S " S S S T 0 -T ^T hT qT T 8 T T T f T bU ! mU ( U Z U V 2V G 9V V V V V V V W W .W FW ]W uW W W W W W W W X +X 3X X X X X Y Y Y D 4Y yY ( Y Y Y Y Y Z Z ,Z ' IZ + qZ Z 5 Z 9 Z E *[ p[ ; y[ 2 [ Z [ C\ ] - ] ^ ^ _ c` a { a 8b 9 Tb L b 2 b - c X <c 1 c c c c d ; me e Qf f g Xi k m m U cn 2 n S n @o < `p D p R p 5 5q kq 9 Lr - r 2 r e r Ms F s + ?t kt )u u rw x y z ^ { z| S} ~ "~ " C~ J f~ ~ % ~ & ~ 2 3 I 2 } P I " K a n < Ѐ 9 , 0 f ] c 7 # [ b J $ d Z > J # @ n ' T | Y n 6 ѐ Y U g 0 J G & ו C ϗ . B G . ט ~ Ù ϙ # 2 S r y R ݚ C % B & h ) 7 + 2 H P - ǜ U _ T L c I r A y \ x x դ n N L ۦ C ( l ~ ? r _ 1 z # " H 1 k 8 L B o O b X y Ҹ q C m - U V ½ E . _ { u 8 H n c 8 h > ) . ) 9 c i u { 5 ~ P H N K j Q 0 ! * T > [ ( 5 ; T i | 0 + B T / ` { # ! ! E 3 g # - 7 ? G N [ t | 6 0 0 # ~ T T T ( I } ` ( j Y $ ~ ) C $ , Q r 1 2 d . ! , ) , 7 E } * N ) 4 B M j . = $ K p x " " / R e | % > Q & p > ' ( P k ' z u % } > / , \ d m p P E : W K p k c ( ] d O / T 4 < , $ 7 \ i v + 2 S t m g z ( % 3 Q h > 1 " O r ' } % 9 F X f o z / F e z - # 9 H 6 \ i 7 < Z X @ - - " , P 3 } F 2 C + Z o = v / f 3 3 J ~ . ( B 2 + f V : @ * A ^ I ( r z ) ) % $ E $ j - @ # ] { 7 : = : P ! $ # F $ j , Q & 6 S g y 4 U v 4 t 2 - ` z + 3 N e u c & * Q j X 6 X 3 ) $ - < j o ~ % ) . K " d % 8 ) Y : , B 7 W ! ! ! ! (! H! b! & }! ! ! # ! J ! ! 5" W" 8# | # _ R$ - $ O $ 0% % f& 8' ? ( ) ) M +) y) 3 9* Y m* $ * $ * + + H, Z. . / z / P N0 : 0 I 0 4 $1 Y1 | 1 J f2 2 v W4 4 T5 # 7 < 57 , r7 7 # 7 Q 7 ,8 F8 c8 8 9 9 9 ] )9 9 4: e : ;; ; < = > ?? ;@ Z@ eA A 0 B C ?D VE AF $ G BG + G 6 H - 9H - gH 8 H * H 2 H M ,I : zI C I 2 I 9 ,J 9 fJ : J : J 1 K HK L u L P OM M p M 2N , O / 0O ] `O F O u P {P "Q Q jR 7 S $ ?S p dS s S ' IT W qT T U ; ]V ^ V V 0 W 1 CW < uW ; W ? W % .X TX + kX * X ; X F X u EY ) Y ; Y G !Z u iZ L Z ,[ B[ Y[ \ | \ '] * A] | l] N ^ E 8_ * ~_ 6 _ _ l a Ic t d Gf z g Sh Zh ch mh . th h h h h h h F h n Ci i 4 i j j 7 @j J xj j j j j k k # k > 5k tk k ! k ) k k k l l ,l Cl Ul ^l gl % ll + l l l ; l 4 ,m am gm 0 m . m 2 m n 'n 2n 8n a Sn n n n n n o o o #o +o 8o ?o Po So ]o uo # o o p p p Kr dr qr r r r y r "s .s Es Js K as s 5 s @ s B ;t ~t k G 2 - G Q Q 5 ) { F V ` n R $ o 6 " , 3 ) 6 1 x 8 Z / & \ f g ` D V S C 2 e Z U E a 0 3 \ < ! @ } q V . H O V > ) Q T Z j ] T ` ' D ^ 0 $ : G ; y 4 ^ p = " L P Z I + i $ / h ^ L @ j 7 = t V J ~ 4 D / O G c k J O U S l 2 ( ] - D 7 j y > @ } _ I W M - 4 \ [ n N # - 3 k V , ? p 6 T w 2 , k f b H T g x z 9 { ~ u M | B U 4 k % . ^ M G < n l . ? ! ; E / t \ ! 6 M K e 5 p } r : j . $ u 5 T ] S C J _ { Y o s + ? w 6 6 M & 3 9 n < % @ 3 d ; q < { 0 | : a + T 1 O 5 l ? X % i < = \ ; E _ * y d Z o q i 9 b ; # . 5 z q E h x z A k F = u E a y Z h 1 X p F ' D V 3 A ] F F > T - G M : x V $ < c = k ? | * W A m ( L _ t c J B f B 0 o W w [ b U $ n a 0 y ! _ u $ 9 f [ + ~ @ I 5 C c Y \ I b ' , 2 { 8 ? * ' r " z , v + R 9 f R . X 9 K i # ^ c 5 % R " x @ 0 ( @ { % O ; r d - g " p & 9 > C T w u # l | u L B Y i s i 7 r ^ A N b f P # w d , K X G " W 0 g x n 6 ~ R i 7 C F \ - _ & 4 Y j ] F & y n \ X C / e { Y E T > ' m [ & I h ~ " D . O m E ! j F ` r C ` < H j G / 0 N h k : C v u _ J ) L Z t 5 m C 3 f ] | W } s E - B I b M t * K 4 @ @ ] P Q X ) s 1 v T x 2 x h @ & ; ` ^ ! l y # [ * + h t : ) K n W m D > s _ I Z b [ Q ` K p @ $ + h M j ! $ 8 8 > s M - ? q H B v S 1 8 H | A L 4 u . t r K K ^ _ e B N # R ? L d G F 7 M D c ` v & * Q t Q # p x * V c J ? / x A ? 8 U X K o s " e w V > S } < D U 8 ! V z w l : B U { & 7 q ! c U Q 0 J 2 9 % { ] Y v 9 m v ( R C g A 7 + N S 0 1 d o ) j r P ` h h s 3 c z f g y a g p ^ , w 6 ~ I - 1 L N T + " ~ 6 H } < O | Y R ] 4 # W j $ B E Y A q 7 ! ' q ` d b K m u M + # m W * h e ' e ! # L c D % \ o 1 w A 3 C 7 l P Y P A 8 } g 8 @ x a N Q t U 5 x J ; k ' m { ' j E a N B o W . F ' = S : H ^ R o f * E R G n h # g O = e * w c K q t [ r g d v o X q 5 V p , d D ~ > r _ S b % Z q . \ r a < / n A e ] 4 U T u ^ 5 r l e s : 6 [ l i k i , 6 - } J 3 O n s L ? P = + % % 8 f S \ = i \ " j Z i > S o / 5 0 6 k C L v } & I H } l , . w d t ) 2 + 9 _ 8 1 E J ( a 2 : ; ( M 1 " Q p Z & ( Q = E $ ^ $ ( I 9 3 N | L G Q z 2 v f / ~ p i J B / ! P P P e w c A T a ^ O O a n N , P y 7 W 1 & u N O * F l H b d ~ m O 6 | } K X 4 ( # | 7 Z % v % ; a H W Y e 0 ` ? / H 0 ? , , b X F b R S 7 f 4 P z + [ y Z ; B ; ] ( : U { ( \ R C Q ( . ) s J S b K 1 L { _ m 7 I k 9 ) B R : J f = m } a > r Y W > ~ I H ' 5 F 9 y - [ ! < z g ) j V . ) ` ` z @ ' - z z [ c 3 ( : 2 > I l [ 8 p s 2 < 8 N 3 G ] G P M ] t * ; i " % N h Y = | y d u & e S $ g / = _ v < 4 X g q ' d 2 X ~ ) H o | D A U k Y 4 W D U [ " 1 X * (%1$d of %2$d attempts remaining) "%s" is not a valid regular expression. "languages" folder is in default location "plugins" folder is in default location "wp-content" folder is in default location # Scan Issues ## Ignored Issues (%d total) ## New Issues (%d total) %1$s Table in Database %1$s Tables in Database %1$s contains a suspected malware URL: %2$s %1$s in POST body: %2$s %1$s in cookie: %2$s %1$s in file: %2$s %1$s in query string: %2$s %d Countries %d Countries Selected %d Country Selected %d Job Overdue %d Jobs Overdue %d address in this network %d addresses in this network %d day %d days %d existing issue was found again and is not shown. %d existing issues were found again and are not shown. %d files indexed %d hit %d hits %d hour %d hours %d ignored issue was also detected. %d ignored issues were also detected. %d issue found in most recent scan %d issues found in most recent scan %d issue was omitted from this email due to length limits. %d issues were omitted from this email due to length limits. %d minute %d minutes %d month %d months %d more similar files were found. %d path was skipped for the malware scan due to scan settings %d paths were skipped for the malware scan due to scan settings %d per minute %d plugin %d plugins %d second %d seconds %d theme %d themes %d unused recovery code remains. You may generate a new set by clicking below. %d unused recovery codes remain. You may generate a new set by clicking below. %s - using constant %s - using template %s AM %s Enabled %s License Active %s License Expired %s License Expiring %s PM %s ago %s contains a suspected malware URL. %s is not valid hostname © %1$d to %2$d Wordfence — Visit <a href="https://www.wordfence.com/">Wordfence.com</a> for help, security updates and more. 'How does Wordfence get IPs' is misconfigured (+ %d more) (.htaccess not present) (.htaccess not readable) (.user.ini not present) (.user.ini not readable) (Unknown) (WORDFENCE_LS_DISABLE_NTP) (default) (definitely a human) (empty) (failures exceeded limit) (not present) (not set) (probably a bot) (probably a human) (recommended based on our tests) (recommended) (settings) (unknown) (you) * User counts currently only reflect the main site on multisite installations. +%d more , and %d more. .htaccess Updated .htaccess change .htaccess other auto prepend .user.ini other auto prepend /bypassurl/ /page-name/ /set-country-bypass/ 0 (Disabled) 0 for default. Must be %d or greater and 10-20 or higher is recommended for most servers 0 means unlimited alerts will be sent. 0 or empty means the default of %s will be used 0 or empty means unlimited issues will be sent 0660 - using default 1 Country 1 more similar file was found. 1. Scan Code or Enter Key 2. Enter Code from Authenticator App 24 Hours 2FA 2FA Activated on User 2FA Active 2FA Deactivated on User 2FA Grace Period 2FA Grace Period Changed 2FA Inactive 2FA Mode: Legacy 2FA Mode: Normal 2FA Notifications 2FA Relative URL (optional) 2FA Role 2FA Role Requirements Changed 2FA Roles 2FA Status 2FA is not required for the %s role 2FA management shortcode 2FA will soon be required on %s 30 Days 404 Not Found 7 Days <a href="%1$s" target="_blank" rel="noopener noreferrer">%1$s</a> is publicly accessible and may expose source code or sensitive information about your site. Files such as this one are commonly checked for by scanners and should be made inaccessible. Alternately, some can be removed if you are certain your site does not need them. Sites using the nginx web server may need manual configuration changes to protect such files. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn more<span class="screen-reader-text"> (opens in new tab)</span></a> <a href="%1$s" target="_blank" rel="noopener noreferrer">%1$s<span class="screen-reader-text"> (opens in new tab)</span></a> is publicly accessible and may expose source code or sensitive information about your site. Files such as this one are commonly checked for by scanners and should be removed or made inaccessible. <a href="%s" target="_blank" rel="noopener noreferrer" class="wf-help-link">Learn more<span class="wf-hidden-xs"> about Whois Lookup</span><span class="screen-reader-text"> (opens in new tab)</span></a> <a href="%s" target="_blank" rel="noopener noreferrer" class="wf-help-link">Learn more<span class="wf-hidden-xs"> about importing and exporting options</span><span class="screen-reader-text"> (opens in new tab)</span></a> <a href="%s" target="_blank" rel="noopener noreferrer" class="wf-help-link">Learn more<span class="wf-hidden-xs"> about the Audit Log</span><span class="screen-reader-text"> (opens in new tab)</span></a> <a href="%s" target="_blank" rel="noopener noreferrer">Get more information.<span class="screen-reader-text"> (opens in new tab)</span></a> <a href="%s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a> <a href="%s" target="_blank">Click here<span class="screen-reader-text"> (opens in new tab)</span></a> to stop receiving security alerts. <a href="%s">Click here</a> to rebuild the configuration file. <html><body><p>You do not currently have two-factor authentication active on your account, which will be required beginning %1$s.</p><p><a href="%2$s">Configure 2FA</a></p></body></html> <span class="wf-hidden-xs">Block </span>Type <strong>AUTHENTICATION FAILURE</strong>: A temporary failure was encountered while trying to log in. Please try again. <strong>CAPTCHA EXPIRED</strong>: The CAPTCHA verification for this login attempt has expired. Please try again. <strong>CHECK YOUR PHONE</strong>: A code has been sent to your phone and will arrive within 30 seconds. Enter it below to sign in. <strong>CHECK YOUR PHONE</strong>: A code has been sent to your phone and will arrive within 30 seconds. Please sign in again and add a space and the code to the end of your password (e.g., <code>wfABCD</code>). <strong>CHECK YOUR PHONE</strong>: A code has been sent to your phone and will arrive within 30 seconds. Please sign in again and add a space, the letters <code>wf</code>, and the code to the end of your password (e.g., <code>wf123456</code>). <strong>CODE EXPIRED. CHECK YOUR PHONE:</strong> The code you entered has expired. Codes are only valid for 30 minutes for security reasons. We have sent you a new code. Please sign in using your username, password, and the new code we sent you. <strong>CODE INVALID</strong>: The 2FA code provided is either expired or invalid. Please try again. <strong>CODE REQUIRED</strong>: Please check your authenticator app for the current code. Enter it below to sign in. <strong>CODE REQUIRED</strong>: Please check your authenticator app for the current code. Please sign in again and add a space, the letters <code>wf</code>, and the code to the end of your password (e.g., <code>wf123456</code>). <strong>CODE REQUIRED</strong>: Please enter your 2FA code immediately after your password in the same field. <strong>CODE REQUIRED</strong>: Please provide your 2FA code when prompted. <strong>Cellphone Sign-in Required</strong>: Cellphone Sign-in is required for all administrator accounts. Please contact the site administrator to enable it for your account. <strong>ERROR</strong>: A username and password must be provided. <a href="%s" title="Password Lost and Found">Lost your password</a>? <strong>ERROR</strong>: An error occurred while sending the message. Please try again. <strong>ERROR</strong>: An error was encountered while trying to authenticate. Please try again. <strong>ERROR</strong>: An error was encountered while trying to send the message. Please try again. <strong>ERROR</strong>: Incorrect username or password. <strong>ERROR</strong>: Login failed with status code 403. Please contact the site administrator. <strong>ERROR</strong>: Login failed with status code 503. Please contact the site administrator. <strong>ERROR</strong>: The password provided is too weak. Please choose a stronger password and try again. A strong password will follow these guidelines: <ul class="wf-password-requirements"> <li>At least 12 characters</li> <li>Uppercase and lowercase letters</li> <li>At least one symbol</li> <li>At least one number</li> <li>Avoid common words or sequences of letters/numbers</li> </ul> <strong>ERROR</strong>: The username or password you entered is incorrect. <a href="%2$s" title="Password Lost and Found">Lost your password</a>? <strong>ERROR</strong>: The username or password you entered is incorrect. <a href="%s" title="Password Lost and Found">Lost your password</a>? <strong>ERROR</strong>: Unable to send message. Please refresh the page and try again. <strong>ERROR</strong>: Unable to send message. You have exceeded the maximum number of messages that may be sent at this time. Please try again later. <strong>ERROR</strong>: You can't register using that username <strong>INSECURE PASSWORD:</strong> Your login attempt has been blocked because the password you are using exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. Please <a href="%1$s">reset your password</a> to reactivate your account. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn More<span style="font-size:0;"> (opens in new tab)</span></a> <strong>INVALID CODE</strong>: Please sign in again and add a space, the letters <code>wf</code>, and the code from your authenticator app to the end of your password (e.g., <code>wf123456</code>). <strong>INVALID CODE</strong>: Please sign in again and add a space, the letters <code>wf</code>, and the code sent to your phone to the end of your password (e.g., <code>wf123456</code>). <strong>INVALID CODE</strong>: You need to enter the code generated by your authenticator app. The code should be a six digit number (e.g., 123456). <strong>INVALID CODE</strong>: You need to enter the code generated sent to your phone. The code should be a six digit number (e.g., 123456). <strong>INVALID CODE</strong>: You need to enter your password and the code we sent to your phone. The code should start with 'wf' and should be four characters (e.g., wfAB12). <strong>LOGIN BLOCKED</strong>: 2FA is required to be active on your account. Please contact the site administrator. <strong>MESSAGE SENT</strong>: Your message was sent to the site owner. <strong>NOTICE: </strong>This site is using Wordfence's legacy 2FA feature, which was replaced with an improved version in 2019. The legacy 2FA feature will be discontinued around July 1, 2026. <strong>REGISTRATION ATTEMPT BLOCKED</strong>: The security token for the login attempt was invalid or expired. Please reload the page and try again. <strong>REGISTRATION ATTEMPT BLOCKED</strong>: This site requires a security token created when the page loads for all registration attempts. Please ensure JavaScript is enabled and try again. <strong>REGISTRATION BLOCKED</strong>: The registration request was blocked because it was flagged as spam. Please try again or <a href="#" class="wfls-registration-captcha-contact" data-token="%s">contact the site owner</a> for help. <strong>REGISTRATION BLOCKED</strong>: The registration request was blocked because it was flagged as spam. Please try again or contact the site owner for help. <strong>This update includes security-related fixes.</strong> <strong>VERIFICATION FAILED</strong>: Two-factor authentication verification failed. Please try again. <strong>VERIFICATION REQUIRED</strong>: Additional verification is required for login. If there is a valid account for the provided login credentials, please check the email address associated with it for a verification link to continue logging in. <strong>WARNING: </strong> Your site is using a PHP version (%1$s) that is no longer supported by Wordfence and needs to be updated. We recommend using the newest version of PHP available but will currently support PHP versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. <strong>WARNING: </strong> Your site is using a PHP version (%1$s) that will no longer be supported by Wordfence in an upcoming release and needs to be updated. We recommend using the newest version of PHP available but will currently support PHP versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. <strong>WARNING: </strong> Your site is using a WordPress version (%1$s) that is no longer supported by Wordfence and needs to be updated. We recommend using the newest version of WordPress but will currently support WordPress versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. <strong>WARNING: </strong> Your site is using a WordPress version (%1$s) that will no longer be supported by Wordfence in an upcoming release and needs to be updated. We recommend using the newest version of WordPress but will currently support WordPress versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. <strong>WARNING: </strong>The password you are using exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. Please <a href="%1$s">change your password</a>. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a> <strong>WARNING: </strong>Your login has been allowed because you have previously logged in from the same IP, but you will be blocked if your IP changes. The password you are using exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. Please <a href="%1$s">change your password</a>. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a> A 'True' result means WordPress thinks the mail was sent without errors. A 'False' result means that WordPress encountered an error sending your mail. Note that it's possible to get a 'True' response with an error elsewhere in your mail system that may cause emails to not be delivered. A Wordfence scan examines all files, posts, pages, and comments on your WordPress website looking for malware, known malicious URLs, and known patterns of infections. It also does several other reputation and server checks. A Wordfence scan looks for malware, malicious URLs, and patterns of infections by examining all of the files, posts, and comments on your WordPress website. It also checks your server and monitors your site's online reputation. A block reason must be provided. A free license key could not be fetched from Wordfence: %s A new version of WordPress (v%s) is available. A new version of the plugin "%s" is available. A new version of the theme "%s" is available. A non-admin user with username "%s" signed in to your WordPress site from a new device. A non-admin user with username "%s" signed in to your WordPress site. A reCAPTCHA score equal to or higher than this value will be considered human. Anything lower will be treated as a bot and require additional verification for login and registration. A reminder to activate two-factor authentication failed sending to %d user. A reminder to activate two-factor authentication failed sending to %d users. A reminder to activate two-factor authentication was sent to %d user. A reminder to activate two-factor authentication was sent to %d users. A request was received to stop the previous scan. A scan is already running. Use the stop scan button if you would like to terminate the current scan. A scan stage has failed to start. This is often because the site either cannot make outbound requests or is blocked from connecting to itself. A server error occurred while saving the configuration: %s A termination request has been sent to stop any running scans. A test request to this website was detected on a different value for this setting. IP blocking and live traffic information may not be accurate. <a href="%s" target="_blank" rel="noopener noreferrer">Get More Information<span class="screen-reader-text"> (opens in new tab)</span></a> A user with 'subscriber' access has a password that is very easy to guess. Please either change it or ask the user to change their password. A user with IP address %1$s has been locked out from signing in or using the password recovery form for the following reason: %2$s. A user with the a role of '%s' has a password that is easy to guess. Please change this password yourself or ask the user to change it. A user with username "%1$s" tried to sign in to your WordPress site. Access was denied because the password being used exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. Please change or reset the password (%2$s) to reactivate this account. Learn More: %3$s A user with username "%s" deactivated Wordfence on your WordPress site. A user with username "%s" deactivated the Wordfence Web Application Firewall on your WordPress site. A user with username "%s" who has administrator access signed in to your WordPress site from a new device. A user with username "%s" who has administrator access signed in to your WordPress site. A user with username "%s" who has administrator access tried to sign in to your WordPress site. Access was denied because all administrator accounts are required to have Cellphone Sign-in enabled but this account does not. A valid server configuration was not provided. A visitor blocked from registration sent the following message. ---------------------------------------- IP: %1$s Username: %2$s Email: %3$s reCAPTCHA Score: %4$f ---------------------------------------- %5$s A wildcard cannot be used to exclude all files from the scan. ADMIN EMAIL: %s AM Ability to connect to the Wordfence servers and your own site. Ability to read/write various files. Ability to save Wordfence settings to the database. Aborting scan because WordPress updated from version %1$s to %2$s. The scan will be reattempted later. About Wordfence Access from your area has been temporarily limited for security reasons Access to Premium Support Access token not found. Accessed a banned URL Acknowledge User Activate Activate 2FA Activate Grace Period Activate Premium Activated - connected by %1$s on %2$s Active Active Plugins Option Changed Active WAF storage engine Activity Detail Activity Log Sent Activity Report Add Add Allowlisted URL/Param Add Filter Add Param to Firewall Allowlist Add action to allowlist Add code to .htaccess Adding issue %s Adding issue: %1$s Adding issue: %s Additional Detail Additional Options Additional scan signatures Additional scan signatures (one per line) Admin Email Option Changed Admin Login Admin Login Blocked Admin Page View Denied Admin Panel Administrative memory limit Advanced Block Advanced Country Blocking Options Advanced Firewall Options Advanced Scan Options Advanced blocking in effect. Advanced caching plugin Afghanistan Agreement to New Terms and Privacy Policies Ajax request received to start scan. Aland Islands Albania Alert generated at %s Alert me when a non-admin user signs in Alert me when someone with administrator access signs in Alert me when there's a large increase in attacks detected on my site Alert me with scan results of this severity level or greater Alert me with scan results of this severity level or greater: Alert when an IP address is blocked Alert when someone is blocked from logging in for using a password found in a breach Alert when someone is locked out from login Alert when the "lost password" form is used for a valid user Algeria All All Countries All Documentation All Events All Firewall Options All Hits All Options All PHP requests will be processed by the firewall prior to running. All Tables Exist All associated Wordfence Central connection data has been cleared. All associated Wordfence Central connection data has been removed from the local database. All capabilities of admin user %s were successfully revoked. All of your blocking rules are in one central location. Choose the Block Type, then enter the details for the rule. Once it has been added, you'll see it saved as a rule for your site. All of your scan options, including scheduling, are now located here. All users with the selected role already have two-factor authentication activated or have been locked out. Allow a grace period for this user prior to requiring Wordfence 2FA Allow remembering device for 30 days Allowed 404s Updated Allowlist Entry Exists Allowlisted 404 URLs Allowlisted IP addresses that bypass 2FA and reCAPTCHA Allowlisted IP addresses that bypass all rules Allowlisted IPs Updated Allowlisted IPs must be placed on separate lines. You can specify ranges using the following formats: 127.0.0.1/24, 127.0.0.[1-100], or 127.0.0.1-127.0.1.100. Allowlisted IPs must be separated by commas or placed on separate lines. You can specify ranges using the following formats: 127.0.0.1/24, 127.0.0.[1-100], or 127.0.0.1-127.0.1.100. Allowlisted Services Updated Allowlisted URLs Allowlisted hosts Allowlisted services Allowlisted via Firewall Options page Allowlisted via Live Traffic Alternate WP cron Always Ignore Always Ignore Version American Samoa Amount of Live Traffic data to store (number of rows) Amount of time a user is locked out An admin user with a suspicious username %s was found. An admin user with a suspicious username %s was found. Administrators accounts with usernames similar to this are commonly seen created by hackers. It's possible a plugin could have created the account, but if you do not recognize the user, we suggest you remove it. An admin user with the username %s was created outside of WordPress. An admin user with the username %s was created outside of WordPress. It's possible a plugin could have created the account, but if you do not recognize the user, we suggest you remove it. An allowlist entry for this URL and parameter already exists. An empty license key was entered. An error occured when fetching the WAF configuration from the database. An error occurred An error occurred when adding the request to the allowlist. An error occurred when fetching the WAF configuration from the database. An error occurred while creating the block. An error occurred while installing your license key. An error occurred while retrieving your license information from the Wordfence servers. Please ensure that your server can reach www.wordfence.com on port 443. An error occurred while saving the configuration. An error occurred while saving the configuration: %s An error occurred while saving the license. An error occurred while saving the license: %s An error occurred while trying to hide the file. An error occurred: An error occurred: %s An error occurred: Invalid options format received. An error was detected with this site's configuration that is preventing a successful connection to Wordfence Central. Disconnecting from Central <a href="%s">on the Wordfence Dashboard</a> and reconnecting may resolve it. If the issue persists, please contact Wordfence support. An error was encountered while trying to activate two-factor authentication. Please try again. An error was encountered while trying to deactivate two-factor authentication. Please try again. An error was encountered while trying to disable NTP. Please try again. An error was encountered while trying to generate new recovery codes. Please try again. An error was encountered while trying to reset the NTP state. Please try again. An error was encountered while trying to send the message. Please try again. An error was encountered while trying to send the notification. Please try again. An error was encountered while validating the reCAPTCHA site key: %s An expected parameter was not provided. An invalid IP address was specified. An invalid IP source was provided. An invalid country was selected. An invalid file %s was specified for repair. An invalid file was requested for deletion. An invalid file was requested for hiding. An invalid file was specified for repair. An invalid operation was called. An invalid status was specified when trying to update that issue. An invalid type was specified to get file. An unexpected error occurred during the request. Please try again or reload the page. An unexpected error occurred while attempting to activate the grace period. An unexpected error occurred while attempting to configure Wordfence to delete its data on deactivation. An unexpected error occurred while attempting to dismiss the notice. Please try again. An unexpected error occurred while attempting to reset the grace period. An unexpected error occurred while attempting to revoke the grace period. An unknown action was provided. An unknown configuration section was provided. An unknown error occurred during the export. We received an undefined error from your web server. An unknown error occurred during the import. An unknown error occurred. An unknown issue type was found: An unknown location at IP An update is available for Updates are available for Analyzed %1$d files containing %2$s of data so far Analyzed %1$d files containing %2$s of data. Andorra Angola Anguilla Anonymous Comments Allowed Option Changed Antarctica Antigua and Barbuda Any previous value for <code>auto_prepend_file</code> will need to be re-enabled manually if still needed. Anyone claiming to be Google will not be rate-limited Apache + CGI/FastCGI Apache + mod_php Apache + suPHP App Password Accepted App Password Created App Password Deleted Application Passwords Application passwords have been disabled by Wordfence. Are you enjoying using Wordfence Security? Are you sure you want to allowlist this action? Are you sure you want to deactivate two-factor authentication? Are you sure you want to delete the selected Wordfence data? If you reactivate Wordfence later, deleted settings and history cannot be recovered. Are you sure you want to delete? Are you sure you want to disconnect your site from Wordfence Central? Are you sure you want to generate new recovery codes? Any remaining unused codes will be disabled. Are you sure you want to repair? Are you sure you want to reset this site's Wordfence License? This will disable Premium features and return the site to the free version of Wordfence. Your settings will still be retained when reinstalling a license. Are you sure you want to restore the default %s settings? This will undo any custom changes you have made to the options on this page. Are you sure you want to restore the default settings? This will undo any custom changes you have made to the options on this page. Are you sure you want to stop blocking the %d selected IPs, ranges, and countries? Are you sure you want to stop blocking the selected IP, range, or country? Argentina Armenia Aruba As a Wordfence Care customer you are entitled to hands-on priority support and have access to our incident response team. Our senior support engineers and incident response team respond to requests quickly within business hours (Monday to Friday, 6am to 5pm Pacific and 9am to 8pm Eastern time) and can sign-in to your site on request to assist with complex issues. As a Wordfence Premium customer you're entitled to paid support via our ticketing system. Our senior support engineers respond to Premium tickets during regular business hours (Monday to Friday, 6am to 5pm Pacific and 9am to 8pm Eastern time) and have a direct line to our QA and development teams. As a Wordfence Response customer you are entitled to hands-on priority support 24 hours a day 365 days a year. Our incident response team is available out of hours to handle urgent issues and security incidents. Our customer support team is available during business hours (Monday to Friday, 6am to 5pm Pacific and 9am to 8pm Eastern time) for product assistance. Both teams can sign-in to your site to assist, on request. As a free Wordfence user, you are currently using the Community version of the Threat Defense Feed. Premium users are protected by additional firewall rules and malware signatures as well as the Wordfence real-time IP blocklist. Upgrade to Premium today to improve your protection. As a free Wordfence user, you are currently using the Community version of the Threat Defense Feed. Premium users are protected by additional firewall rules and malware signatures. Upgrade to Premium today to improve your protection. Asking Wordfence to check URLs against malware list. At that time, 2FA codes will no longer be checked, however a valid login and password will still be required for site access. This applies to both SMS and Authenticator methods. Attachment Created Attachment Deleted Attachment Updated Attacks Blocked for %s Attempt to return to the admin login page (you may still be locked out) Attempting to resume scan stage (%d attempt(s) remaining)... Audit Log Audit Log Mode Changed Audit Log Options Audit Log logging mode Audit log mode: All events Audit log mode: Disabled Audit log mode: Malfunctioning Audit log mode: Not recording Audit log mode: Preview Audit log mode: Significant events only Australia Austria Auth Cookie Set Auth grant is invalid. Auth grant not found. Authentication Authentication Code Authenticator Author Author: %s Authorization header format is invalid. Auto-renew is disabled Automatic Block Duration Updated Automatic Updates Completed Automatic WP Core updates Automatic database repair Automatic uninstallation cannot be completed, but you may still be able to <a href="%s" target="_blank" rel="noopener noreferrer">manually uninstall extended protection<span class="screen-reader-text"> (opens in new tab)</span></a>. Automatic updates disabled Automatic updates enabled Automatically enable on Automatically generated from previous country blocking settings Automatically updates Wordfence to the newest version within 24 hours of a new release. Azerbaijan Back Back to %s Back to Dashboard Back to Scan Background Request Blocked Backtrack limit is %d, reducing to 1000000 Bad URL Bad security token. It may have been more than 12 hours since you reloaded the page you came from. Try reloading the page you came from. If that doesn't work, please sign out and sign-in again. Bahamas Bahrain Bangladesh Banned URLs Updated Banned Usernames Updated Barbados Basic Firewall Options Basic Protection Basic Scan Type Options Basic WordPress Protection Basic config writing Before this file can be deleted, the configuration for the <code>auto_prepend_file</code> setting needs to be removed. Beginning file hashing Belarus Belgium Belize Below is a sample of these recent attacks: Benin Bermuda Bhutan Block Block All Block Author Scanning Toggled Block Bad POST Requests Toggled Block Count Block Deleted Block Duration Block IP Block IPs who send POST requests with blank User-Agent and Referer Block Pattern Block Reason Block Reason: Block Technical Data Block This Network Block Type Block Visitors Matching this Pattern Block access to the rest of the site Block countries even if they are logged in Block crawlers that are using too many resources or stealing content Block external URL requests Block the Selected Countries Block this IP Address Block traffic by country, IP, IP range, user agent, referrer, or hostname Blocked Blocked (Brute Force) Blocked By Firewall Blocked User Registration Contact Form Blocked WAF Blocked attack counts not available yet. Blocked because the IP is blocklisted Blocked by Wordfence Blocked by Wordfence Security Network Blocked by Wordfence plugin settings Blocked by login security setting Blocked by the Wordfence Application Firewall and plugin settings Blocked by the Wordfence Security Network Blocked by the Wordfence Web Application Firewall Blocked for %1$s in POST body: %2$s = %3$s Blocked for %1$s in cookie: %2$s = %3$s Blocked for %1$s in file: %2$s = %3$s Blocked for %1$s in query string: %2$s = %3$s Blocked for %s Blocking Blocking Builder Blocking IP %1$s. %2$s Blocking IP %s Blocking Options Blocking is disabled when the option "Enable Rate Limiting and Advanced Blocking" is off. Blocklist Blocklist Check Blocklist Status Blocks requests from known malicious IPs Blog Highlights Bolivia Bonaire, Saint Eustatius and Saba Bosnia and Herzegovina Bot Botswana Bouvet Island Brazil British Indian Ocean Territory Browser Time: Browser User Agent Browser user-agent to ignore Brunei Darussalam Brute Force Brute Force Protection Brute Force Protection Status Brute Force Protection Toggled Built-in caching Bulgaria Burkina Faso Burundi By default, Wordfence will scan your site daily. Start your first scan now to see if your site has any security issues that need to be addressed. From here you can run manual scans any time you like. Bypass Cookie Bypass Redirect Bypass the LiteSpeed "noabort" check Cached result for scan start test: %s Call to Wordfence API to resolve IPs failed: %s Calling Wordfence API v%s: Calling fork() from wordfenceHash with maxExecTime: %s Calling startScan(true) Cambodia Cameroon Canada Cancel Cancel Changes Cancel Scan Cape Verde Captcha Test Mode Toggled Care Care License Installed Category Cayman Islands Cellphone Sign-In Recovery Codes Cellphone Sign-in Enabled Cellphone Sign-in activated for user. Central African Republic Chad Change Filter Change the recording mode setting above to begin recording events to Wordfence Central. Changelog Check Password Strength on Reset Toggled Check for a server outage. Check for publicly accessible configuration files, backup files and logs Check if this website IP is generating spam Check if this website is being "Spamvertised" Check if this website is being "Spamvertised" Check if this website is on a domain blocklist Check if your site is being Spamvertized is for paid members only Check password strength on profile update Check spam & spamvertising blocklists Check the strength of passwords Checking %1$d URLs from %2$d sources. Checking %d host keys against Wordfence scanning servers. Checking <code>display_errors</code><br><em> (<a href="http://php.net/manual/en/errorfunc.configuration.php#ini.display-errors" target="_blank" rel="noopener noreferrer">Should be disabled on production servers<span class="screen-reader-text"> (opens in new tab)</span></a>)</em> Checking OpenSSL version Checking Web Application Firewall status Checking basic config reading/writing Checking cronkey: %1$s (expecting %2$s) Checking for OpenSSL support Checking for cURL support Checking for future GeoIP support Checking for paths skipped due to scan settings Checking for the most secure way to get IPs Checking if MySQL user has <code>ALTER TABLE</code> privilege Checking if MySQL user has <code>CREATE TABLE</code> privilege Checking if MySQL user has <code>DELETE</code> privilege Checking if MySQL user has <code>DROP</code> privilege Checking if MySQL user has <code>INSERT</code> privilege Checking if MySQL user has <code>SELECT</code> privilege Checking if MySQL user has <code>TRUNCATE</code> privilege Checking if MySQL user has <code>UPDATE</code> privilege Checking if scan is already running Checking if web server can read from <code>~/plugins/wordfence</code> Checking if web server can read from <code>~/wp-content/wflogs</code> Checking if web server can write to <code>~/plugins/wordfence</code> Checking if web server can write to <code>~/wp-content/wflogs</code> Checking if your IP is generating spam is for paid members only Checking if your server discloses the path to the document root Checking if your site IP is generating spam Checking if your site is being Spamvertised Checking if your site is on a domain blocklist Checking if your site is on a domain blocklist is for paid members only Checking password strength of user '%1$s' with ID %2$d Checking saved cronkey against cronkey param Checking serialized config reading/writing Child Theme Option Changed Chile China Christmas Island Clear Clear All Connection Data Clear Filter Clear Local Connection Data Clear all Wordfence Central connection data Click here for our help article Click here for steps you can try. Click here to configure Click here to download a backup copy of this file now Click here to download a backup copy of your .htaccess file now Click here to learn more Click here to learn more: <a href="%s" target="_blank" rel="noopener noreferrer">Documentation<span class="screen-reader-text"> (opens in new tab)</span></a> Click here to manage your Wordfence licenses Click here to unblock all IP addresses. Click here to unlock all IP addresses and disable the Wordfence Firewall and Wordfence login security for all users Click here to unlock your ability to sign-in and to access to the site. Click here to update now Click here to upgrade to Wordfence Premium: Click here to use the recommended setting Click inside window to resume Click to fix .htaccess Click to view your system's configuration in a new window Close Cloudflare appears to be blocking your site from connecting to itself. Cocos (Keeling) Islands Collapse All Colombia Comment Moderation Default Option Changed Comoros Comparing core WordPress files against originals in repository Comparing open source themes against WordPress.org originals Comparing plugins against WordPress.org originals Completed checking password strength of user '%s' Complex Concatenate JavaScript files Configuration Issue Configured WAF storage engine (WFWAF_STORAGE_ENGINE) Configured but not valid Confirm 2FA Switch Confirm Disconnect Confirm Reset Confirm Restore Defaults Confirm Unsubscribe Congo Congo, The Democratic Republic of the Congratulations! Congratulations! Wordfence Care is now active on your website. Please note that some Care features are not enabled by default. Congratulations! Wordfence Free is now active on your website. Congratulations! Wordfence Premium is now active on your website. Please note that some Premium features are not enabled by default. Congratulations! Wordfence Response is now active on your website. Please note that some Response features are not enabled by default. Connect Site Connect This Site Connect Timestamp Connected Connected by %1$s on %2$s Connecting back to this site Connecting back to this site via IPv6 (Not required; this may not be an issue on some sites. <a href="%s" target="_blank" rel="noopener noreferrer" class="wfhelp"><span class="wfhelpextra">Click here to learn whether this is an issue</span></a>) Connecting to Wordfence servers (https) Connection Connection not finished Contacting Wordfence to initiate scan Content Content Safety Continue Cook Islands Core Core Update Completed Core Upgrade Core hashes data received from Wordfence servers was not valid. Corrected Time (NTP): Corrected Time (WF): Costa Rica Cote dIvoire Could not connect to database to start scan: %s Could not delete file %1$s. Error was: %2$s Could not delete file %1$s. The error was: %2$s Could not delete file because that issue does not appear to be a file related issue. Could not delete file because we could not find that issue. Could not delete files Could not fetch core hashes from Wordfence servers. Could not fetch malware signatures from Wordfence servers. Could not get username for user with ID %d when checking password strength. Could not remove the option %1$s. The error was: %2$s Could not remove the option because that issue does not appear to be a database related issue. Could not remove the option because we could not find that issue. Could not repair files Could not understand the response we received from the Wordfence servers when applying for a free license key. Could not verify Wordfence License: %s Count Count failures over what time period Countries Countries to Block Country Country Block Country Blocking Country Blocking Updated Country blocking Crawler 404 Rate Limit Settings Updated Crawler Rate Limit Settings Updated Crawlers Create a Blocking Rule Created Critical Critical Problems: Croatia Cron Jobs Cron Status Cron is disabled Cron is enabled Cron running frequency lock Cron test received and message printed Cuba Curacao Current Plugin Version Current Theme Version Current WAF configuration. Current WordPress Version Current blocks Current blocks for %s Currently in Learning Mode Custom Custom "usermeta" table Custom "users" table Custom Block Text Updated Custom Capabilities / Multiple Roles Custom PHP error message Custom PHP fatal error handler Custom Pattern Custom Scan Custom database class Custom database error message Custom installation script Custom maintenance message Custom scan options selected Custom site deleted message Custom site inactive message Custom site suspended message Custom text shown on block pages Custom upload folder location Cyprus Czech Republic Dashboard Dashboard Notification Options Dashboard notifications will also be displayed for Security Alerts, Promotions, Blog Highlights, and Product Updates. These notifications can be disabled by upgrading to a premium license. Data is invalid. Database Tables Database Version Database character set Database collation Database table names, sizes, timestamps, and other metadata. Database version and privileges. Date Date Range Deactivate Deactivate 2FA Deactivate Wordfence Deactivate and Delete Data Debug this Request Debugging Options Default Default Comment Status Option Changed Default User Role Option Changed Deferring scheduled scan by %s Defines the multisite database ID for the current site Defines the multisite domain for the current site Defines the multisite path for the current site Delay IP and Country blocking until after WordPress and plugins have loaded (only process firewall rules early) Delete Delete All Deletable Files Delete File Delete Files Delete Login Security tables and 2FA codes, but keep Wordfence tables and data Delete Login Security tables and data on deactivation Delete Option Delete User Delete Wordfence Data? Delete Wordfence tables and data on deactivation Delete Wordfence tables and data, but keep Login Security tables and 2FA codes Delete all Wordfence tables and data Deleted %1$d files but we encountered the following errors with other files: %2$s Deleted %d files successfully Deleted %d files successfully. No errors were encountered. Deleted some files with errors Deleting an infected wp-config.php file must be done outside of Wordfence. The wp-config.php file contains your database credentials, which you will need to restore normal site operations. Your site will NOT function once the wp-config.php file has been deleted. Denmark Description Description: %s Detail Details Detected IP(s) Detected IP: Detected loop in malware scan, aborting. Detection of security issues Diagnostic Wordfence settings/constants. Diagnostic connection information for Wordfence Central. Diagnostic report has been sent successfully. Diagnostics Directory Listing Disabled Directory Listing Enabled Directory listing has been disabled on your server. Directory listing is enabled Directory listing provides an attacker with the complete index of all the resources located inside of the directory. The specific risks and consequences vary depending on which files are listed and accessible, but it is recommended that you disable it unless it is needed. Disable Disable Author Scanning. Disable Code Execution for Uploads directory Disable WordPress application passwords Disable XML-RPC authentication Disable reading of php://input Disable the fatal error handler Disabled Disabled Disabled (premium feature) Disables automatic updates Disallow plugin/theme editing Disallow plugin/theme update and installation Disconnect Disconnect All Disconnect Site Disconnect This Site Disconnect Timestamp Disconnected Disconnected by %1$s on %2$s Disconnected from Wordfence Central Disconnected on %1$s Discounts for multi-year and multi-license purchases Disk Space Dismiss Display "All Options" menu item Display "Audit Log" menu item Display "Blocking" menu item Display "Live Traffic" menu item Display All Options menu item Display Audit Log menu item Display Audit Log menu option Display Blocking menu item Display Blocking menu option Display Live Traffic menu item Display Live Traffic menu option Djibouti Do not delete files on your system unless you're ABSOLUTELY sure you know what you're doing. If you delete the wrong file it could cause your WordPress website to stop functioning and you will probably have to restore from backups. If you're unsure, Cancel and work with your hosting provider to clean your system of infected files. Do not repair files on your system unless you're ABSOLUTELY sure you know what you're doing. If you repair the wrong file it could cause your WordPress website to stop functioning and you will probably have to restore from backups. If you're unsure, Cancel and work with your hosting provider to clean your system of infected files. Do not upgrade global tables Do this if you keep getting locked out or blocked and can't access your site. You can re-enable login security and the firewall once you sign-in to the site by visiting the Wordfence Firewall menu, clicking and then turning on the firewall and login security options. If you use country blocking, you will also need to choose which countries to block. Do this if you simply need to regain access because you were accidentally locked out. If you received an "Insecure Password" message before getting locked out, you may also need to reset your password. Do this if you still can't regain access using the link above. It causes everyone who is blocked or locked out to be able to access your site again. Do you want Wordfence to stay up-to-date automatically? Documentation Documentation about Wordfence may be found on our website by clicking the button below or by clicking the <i class="wf-fa wf-fa-question-circle-o" aria-hidden="true"></i> links on any of the plugin's pages. Dominica Dominican Republic Don't ask again Don't let WordPress reveal valid users in login errors Don't log signed-in users with publishing access Done URL check. Done examining URLs Done file contents scan Done host key check. Download Download %s Download Backup File Download File Download Recovery Codes Drop-In WordPress Plugins Duration Each feature contains a status that reminds you what's enabled, disabled or needs attention. The Notifications section will highlight actions you need to take. Each line of %d letters and numbers is a single recovery code, with optional spaces for readability. To use a recovery code, after entering your username and password, enter the code like "1234 5678 90AB CDEF" at the 2FA prompt. If your site has a custom login prompt and does not show a 2FA prompt, you can use the single-step method by entering your password and the code together in the Password field, like "mypassword1234 5678 90AB CDEF". Your recovery codes are: Each line of 16 letters and numbers is a single recovery code, with optional spaces for readability. When typing your password, enter "wf" followed by the entire code like "mypassword wf1234 5678 90AB CDEF". If your site shows a separate prompt for entering a code after entering only your username and password, enter only the code like "1234 5678 90AB CDEF". Your recovery codes are: Easily Monitor Your Wordfence Protection Ecuador Edit Edit Blocking Rule Edit Wordfence Options Edit trusted proxies Edit two-factor authentication for %s Editing User: %1$s <span class="wfls-text-plain">%2$s</span> Egypt Either you or someone at IP address <b>%1$s</b> requested an alert unsubscribe link for the website <a href="%2$s"><b>%3$s</b></a>. Either you or someone else at IP address <b>%1$s</b> requested instructions to regain access to the website <a href="%2$s"><b>%3$s</b></a>. El Salvador Email Email Alert Preferences Email Diagnostic Report Email Limit Reached Email Wordfence Activity Log Email activity log Email address Email log Email me if Wordfence is deactivated Email me if the Wordfence Web Application Firewall is turned off Email me when Wordfence is automatically updated Email verification invalid or expired. Please try again. Email verification succeeded. Please continue logging in. Email: %s Empty file path provided Enable Enable %d scan option. Enable %d scan options. Enable Automatic Scans Enable Block Admin Registration. Enable Brute Force Protection. Enable Firewall Enable Firewall. Enable Mask Login Errors. Enable Premium Reputation Checks. Enable Premium Rules. Enable Premium Scan Signatures. Enable Rate Limiting and Advanced Blocking Enable Rate Limiting and Advanced Blocking. Enable Real-Time IP Blocklist. Enable Real-Time Wordfence Security Network. Enable SSL Verification (Disable this if you are consistently unable to connect to the Wordfence servers.) Enable Wordfence translations Enable activity report widget on the WordPress dashboard Enable brute force protection Enable country blocking by upgrading to Premium. Enable debugging mode (increases database load) Enable email summary Enable firewall. Enable reCAPTCHA on the login and user registration pages Enable scan option to check if this website is being "Spamvertised". Enable scan option to check if your website IP is generating spam. Enable scan option to check if your website is on a domain blocklist. Enabled Enabled and Protecting Enabled until... Encountered bad date string for plugin "%1$s" in abandoned plugin check: %2$s Encountered file that is too large: %s - Skipping. Enforce Strong Passwords Toggled Enforce Strong Passwords. Enforce strong passwords Enter Premium Key Enter a duration (default is forever) Enter a full URL (e.g., http://example.com/blocked/) Enter a reason Enter a valid IP or domain Enter an IP address Enter the code from your authenticator app below to verify and activate two-factor authentication for this account. Enter the email address you would like to send the Wordfence activity log to. Note that the activity log may contain thousands of lines of data. This log is usually only sent to a member of the Wordfence support team. It also contains your PHP configuration from the phpinfo() function for diagnostic data. Enter your premium license key to enable real-time protection for your website. Entered fork() Entering start scan routine Entire Site Equatorial Guinea Eritrea Error Error Activating 2FA Error Deactivating 2FA Error Disabling NTP Error Enabling All Options Page Error Generating New Codes Error Installing License Error Resetting NTP Error Resetting reCAPTCHA Statistics Error Restoring Defaults Error Saving Block Error Saving Option Error Saving Options Error Sending Notification Error checking domain blocklists: %s Error during Export Error during Import Error finishing writing value for %1$s (MySQLi error: [%2$s] %3$s) Error reassembling value for %s Error removing option: %s Error writing value chunk for %1$s (MySQLi error: [%2$s] %3$s) Error writing value for %1$s (MySQLi error: [%2$s] %3$s) Error writing value header for %s Errors occurred while saving the configuration. Errors occurred while saving the configuration: %s Estonia Ethiopia Europe Events Every Other Day Everything Examining URLs found in posts we scanned for dangerous websites Examining URLs found in the options we scanned for dangerous websites Exceeded the maximum global requests per minute for crawlers or humans. Exceeded the maximum number of login failures which is: %1$s. The last username they tried to sign in with was: '%2$s' Exceeded the maximum number of page not found errors per minute for a crawler. Exceeded the maximum number of page not found errors per minute for humans. Exceeded the maximum number of page requests per minute for humans. Exceeded the maximum number of requests per minute for crawlers. Exceeded the maximum number of tries to recover their password which is set at: %1$s. The last username or email they entered before getting locked out was: '%2$s' Exclude files from scan that match these wildcard patterns Exclude files from scan that match these wildcard patterns (one per line) Executed before Multisite is loaded Existing User Existing WAF Installation Detected Expand All Expand All Results Expiration Explicitly set blog URL Explicitly set site URL Export Export All IPs Export Options Export Successful Export Wordfence Options Export this site's Wordfence options for import on another site Extended Protection Extended Protection Mode has not been disabled. This may be because <code>auto_prepend_file</code> is configured somewhere else or the value is still cached by PHP. Extended Protection Mode of the Wordfence Web Application Firewall uses the PHP ini setting called <code>auto_prepend_file</code> in order to ensure it runs before any potentially vulnerable code runs. This PHP setting currently refers to the Wordfence file at: Extended Protection Still Enabled External object cache Failed Failed Login Failed Login Failure Threshold Updated Failed Login: Invalid Username Failed Login: Valid Username Failed obtaining core vulnerability data, skipping check. Failed obtaining vulnerability data, skipping check. Failed to reset grace period Falkland Islands (Malvinas) Faroe Islands Fetching core, theme and plugin file signatures from Wordfence Fetching fresh core hashes Fetching fresh malware prefixes Fetching list of known core files from Wordfence Fetching list of known malware files from Wordfence Fetching stored cronkey for comparison. Fetching token for Wordfence Central authentication due to configuration issue. Fiji File File "%s" does not exist File "%s" is unreadable File "%s" is unwritable File Changes File Name File Size: File System Credentials Required File Type File access blocked. (WORDFENCE_DISABLE_FILE_VIEWER is true) File appears to be malicious or unsafe: %s File contains illegal characters. File contains suspected malware URL: File does not exist. File hidden successfully File last modified: File restored OK File type: Filename Filename: Filesystem Credentials Required Filesystem Permission Error Filter Filter By Filter Traffic Filter Value Filter by Type, Detail, or Reason Filter... Finalizing malware scan results Find the documentation and help you need Finland Firewall Firewall Options Firewall Response Firewall Rules Firewall Rules Status Firewall Status Firewall Summary: Firewall issues may be caused by file permission changes or other technical problems. Firewall optimization is not currently supported on NGINX Unit Fix .htaccess Fixing wp_mail from address: %s For admins only For all users with "publish posts" capability For entry-level hosting plans. Provides limited detection capability with very low resource utilization. For help on setting up an app, visit our help article. For maximum security use PHP's built in REMOTE_ADDR. For most sites, we recommend allowing access from the United States, where Google and other benign crawlers are generally located. Many well-known crawlers also have locations in Europe, so be careful when blocking other countries, especially if you have not seen significant attacks from them. For roles that require 2FA, users will have this many days to set up 2FA. Failure to set up 2FA during this period will result in the user losing account access. This grace period will apply to new users from the time of account creation. For existing users, this grace period will apply relative to the time at which the requirement is implemented. This grace period will not automatically apply to admins and must be manually enabled for each admin user. For site owners who think they may have been hacked. More thorough but may produce false positives. Force SSL for administrative logins Force admins and publishers to use strong passwords (recommended) Force all members to use strong passwords Forgot Password Threshold Updated Forking during indexing: %s Forking during malware scan (%s) to ensure continuity. Forking during malware scan to ensure continuity. Found Found %d plugin Found %d plugins Found %d theme Found %d themes Found .suspected file: %s France Free Free License Installed Free Support French Guiana French Polynesia French Southern Territories Friday From Front-end Website Full Name Full Path Disclosure Full Path Disclosure (FPD) vulnerabilities enable the attacker to see the path to the webroot/file. e.g.: /home/user/htdocs/file/. Certain vulnerabilities, such as using the load_file() (within a SQL Injection) query to view the page source, require the attacker to have the full path to the file they wish to view. GDPR Information Gabon Gambia Gathering host keys. General General Blocking and Rate Limiting Toggled General Data Protection Regulation General Options General Wordfence Options General information about the Wordfence installation. Generate Generate New Codes Generate New Recovery Codes Generated by Wordfence at Generated by Wordfence at %s Generated in %.4f seconds GeoIP Version Georgia Germany Get Help Get Your Wordfence License Get a new license Get help with Cloudflare compatibility Getting plugin list from WordPress Getting theme list from WordPress Ghana Gibraltar Global Options Global Rate Limit Settings Updated Global Wordfence Options Go To Dashboard Go To Option Go to Go to Login Security Go to Support Forums Go: Google Bot Google Crawlers Got a true deserialized value back from 'wfsd_engine' with type: %s Got error response from Wordfence servers: %s Got it Got max_execution_time value from ini: %s Got value from wf config maxExecutionTime: %s Grace Period Grace Period Override Greater than 2 Gigs Greece Greenland Greetings! The default configuration for Wordfence Live Traffic has changed. The new default saves only logins and blocked requests, while this site is currently recording all traffic. Would you like to change to the new default? Grenada Group By Guadeloupe Guam Guatemala Guernsey Guinea Guinea-Bissau Guyana HIGH SENSITIVITY scanning is enabled, it may produce false positives HTML tags will be stripped prior to output and line breaks will be converted into the appropriate tags. HTTP %1$d received from Wordfence Central: %2$s HTTP Response Code Haiti Header Heard Island and McDonald Islands Help Here's where you'll see all the blocking rules you've created. You can also manage them as well as remove or modify them from this table. Hide File Hide WordPress version Hide log High High Sensitivity High Severity Problems: Hit enter to add Hit enter to add a username Holy See (Vatican City State) Home URL Option Changed Honduras Hong Kong Hostname Hostname for a proxy server How are these categorized? How do I get to 100%? How does Wordfence determine this? How does Wordfence get IPs How long is an IP address blocked when it breaks a rule How much memory should Wordfence request when scanning How should we treat Google's crawlers How to block a network How to get IPs Human Human 404 Rate Limit Settings Updated Human Rate Limit Settings Updated Human/Bot Humans Hungary IP IP / Action IP Address IP Address Range IP Address to Block IP Block IP Detection IP Range IP Source Changed IP Throttled IP reputation monitoring IP(s) used by this server IP: IPs IPs Bypassing 2FA Updated IPv6 DNS resolution failed Iceland Idle If a crawler's page views exceed If a crawler's pages not found (404s) exceed If a human's page views exceed If a human's pages not found (404s) exceed If anyone's requests exceed If autorenew is enabled for the current license, the license will renew at the next expiration date. If you would like to turn renewal off or assign the license to another site, log into wordfence.com to change it. If enabled, XML-RPC calls that require authentication will also require a valid 2FA code to be appended to the password. You must choose the "Skipped" option if you use the WordPress app, the Jetpack plugin, or other services that require XML-RPC. If enabled, all settings and 2FA records will be deleted on deactivation. If later reactivated, all users that previously had 2FA active will need to set it up again. If enabled, users with 2FA enabled may choose to be prompted for a code only once every 30 days per device. If the email address provided was on the alert email list, it has been sent an unsubscribe link. If this is a false positive, you can exclude this parameter from being filtered by the firewall If this is a single site with multiple domains or subdomains, you can dismiss this message. If this is your first attempt, please try again. If this option is disabled, Wordfence can look up countries for visitor IP addresses using a local database, but cannot look up regions or cities If user from a blocked country hits the relative URL ____ then redirect that user to ____ and set a cookie that will bypass all country blocking If user hits the relative URL If user who is allowed to access the site views the relative URL If user who is allowed to access the site views the relative URL ____ then set a cookie that will bypass country blocking in future in case that user hits the site from a blocked country If you are a WordPress user with administrative privileges on this site please enter your email in the box below and click "Send". You will then receive an email that helps you regain access. If you are using a web server not listed in the dropdown or if file permissions prevent the installer from completing successfully, you will need to perform the change manually. Click Continue below to create the required file and view manual installation instructions. If you cannot complete the setup process, <a href="%s" target="_blank" rel="noopener noreferrer">click here for help<span class="screen-reader-text"> (opens in new tab)</span></a> If you cannot complete the setup process, <a target="_blank" rel="noopener noreferrer" href="%s">click here for help<span class="screen-reader-text"> (opens in new tab)</span></a>. If you cannot complete the uninstall process, <a href="%s" target="_blank" rel="noopener noreferrer">click here for help<span class="screen-reader-text"> (opens in new tab)</span></a> If you delete the wrong file, it could cause your WordPress website to stop functioning, and you will probably have to restore from a backup. If you did not request these instructions then you can safely ignore them. If you did not request this, you can safely ignore it. If you don't have one, you can purchase one now. If you don't recognize this file, please <a href="https://wordpress.org/support/plugin/wordfence" target="_blank" rel="noopener noreferrer">contact us on the WordPress support forums<span class="screen-reader-text"> (opens in new tab)</span></a> before proceeding. If you have automatic updates enabled (see above), you'll get an email when an update occurs. If you have separate WordPress installations with Wordfence installed within a subdirectory of this site, it is recommended that you perform the Firewall installation procedure on those sites before this one. If you know your web server's configuration, please select it from the list below. If you need to continue using the legacy 2FA mode, you will need to downgrade to the 8.1.4 version of Wordfence temporarily. This feature will be discontinued around July 1, 2026, and legacy 2FA codes will no longer be required at that time, even when using an old plugin version. If you think you have been blocked in error, contact the owner of this site for assistance. If you use country blocking to block countries from accessing the entire site, it is important to review the allowed services setting to ensure that search engines and other desired services may continue to see the site regardless of a crawler's location. Additionally, ad services like Google Ads may penalize listings when a country is blocked from the entire site. If you use external services that may send POST requests without these headers, do not use this option, as they will be blocked. If you want to reenable Wordfence Live Traffic, you need to deactivate %1$s and then go to the Wordfence options page and reenable Live Traffic there. Wordfence does work with %1$s, however Live Traffic will be disabled and the Wordfence firewall will also count less hits per visitor because of the %1$s caching function. All other functions should work correctly. If you were attempting to log in to this site, <a href="%s"><strong>Verify and Log In</strong></a> If you would like to sign-in to <a href="%1$s">%1$s</a> please <a href="%2$s">click here</a> now. You can change the frequency of this email or turn it on and off by visiting your <a href="%3$s">Wordfence options page</a>. If you're looking for a more comprehensive solution, the <a href="https://wordpress.org/plugins/wordfence/" target="_blank" rel="noopener noreferrer">full Wordfence plugin</a> includes all of the features in this plugin as well as a full-featured WordPress firewall, a security scanner, live traffic, and more. The standard installation includes a robust set of free features that can be upgraded via a Premium license key. If you're moving to a new host or a new installation location, you may need to temporarily disable extended protection to avoid any file not found errors. Use this action to remove the configuration changes that enable extended protection mode or you can <a href="%s" target="_blank" rel="noopener noreferrer">remove them manually<span class="screen-reader-text"> (opens in new tab)</span></a>. Ignore Ignore All for User Ignore Only this Password Ignore Only this Title Ignore Option Ignore URL Ignore Until File Changes Ignore Until Version Changes Ignore Update Ignore Value Ignore this URL Ignored Ignored Alert IPs Updated Ignored IP addresses for Wordfence Web Application Firewall alerting Ignored IPs must be separated by commas or placed on separate lines. These addresses will be ignored from any alerts about increased attacks and can be used to ignore things like standalone website security scanners. Ignored Results Ignoring invalid base scan file: %s Ignoring invalid expected scan file: %s Ignoring invalid scan file child: %s Ignoring invalid scan path: %s Immediately block IPs that access these URLs Immediately block the IP of users who try to sign in as these usernames Immediately lock out invalid usernames Import Options Import Successful Import Wordfence Options Import Wordfence options from another site using a token Import/Export Options Importing and exporting of options has moved to the Tools page Importing and exporting of options is available on the Tools page In addition to the above list, the IPs (or CIDR ranges) in the selected preset will be ignored when determining the requesting IP via the X-Forwarded-For HTTP header. In order to use 2FA with the WooCommerce customer role, you must either enable the "WooCommerce integration" option or use the "wordfence_2fa_management" shortcode to provide customers with access to the 2FA management interface. The default interface is only available through WordPress admin pages which are not accessible to users in the customer role. In this mode, the Wordfence Web Application Firewall is actively blocking requests matching known attack patterns and is actively protecting your site from attackers. In this mode, the Wordfence Web Application Firewall is functionally turned off and does not run any of its rules or analyze the request in any way. In use Inactive Inactive<small class="wfls-sub-status">(Grace Period)</small> Include Including files that are outside the WordPress installation in the scan. Increased Attack Rate Index time: %s India Individual Allowlisting Indonesia Initiating quick scan Insecure Password Install Install License Install Wordfence Install Wordfence License Install an existing license Install your license to finish activating Wordfence. Installation Failed Installation Successful Internal error when connecting to Wordfence Central (see server error log) Interval the trash is automatically emptied at in days Introducing the New Wordfence 2FA Invalid IP address. Invalid IP range. Invalid block duration. Invalid block type. Invalid bulk operation selected Invalid email address given. Invalid email address provided Invalid file requested. (Relative paths not allowed) Invalid function specified. Please check the link we emailed you and make sure it was not cut-off by your email reader. Invalid grace period override Invalid hostname. Invalid key provided for authentication. Invalid log type to wfLog: %s Invalid number of scan resume attempts specified: %d Invalid option specified Invalid response from Wordfence API during check_possible_malware Invalid response from Wordfence Central. Invalid response from Wordfence Central. Parameter %s not found in response. Invalid response from Wordfence Central: %s Invalid response from Wordfence servers. Invalid response received from Wordfence Central when fetching nonce. Invalid response received from Wordfence Central when fetching token. Invalid response: Invalid response: %s Invalid user ID. Invalid user specified Iran, Islamic Republic of Iraq Ireland Isle of Man Israel Issue Found Issue Found: %s It failed sending to %d user. Failures typically occur because of a missing or invalid email address. It failed sending to %d users. Failures typically occur because of a missing or invalid email address. It has unpatched security issues and may have compatibility problems with the current version of WordPress. It is currently configured to use an older version of PHP and may become deactivated if PHP is updated. You may perform the configuration update automatically by <a href="%1$s">clicking here</a>. <a class="wfhelp" target="_blank" rel="noopener noreferrer" href="%2$s"><span class="screen-reader-text"> (opens in new tab)</span></a> It is not currently in extended protection mode but was configured to use an older version of PHP and may have become deactivated when PHP was updated. You may perform the configuration update automatically by <a href="%1$s">clicking here</a> or use the "Optimize the Wordfence Firewall" button on the Firewall Options page. <a class="wfhelp" target="_blank" rel="noopener noreferrer" href="%2$s"><span class="screen-reader-text"> (opens in new tab)</span></a> It looks like you've tried to connect this site to Wordfence Central, but the installation did not finish. It may have compatibility problems with the current version of WordPress or unknown security issues. It was last updated %1$s ago and tested up to WordPress %2$s. It was last updated %s ago. Italy Jamaica Japan JavaScript Errors Jersey Job Jordan Kazakhstan Keep all Wordfence tables and data Kenya Key Kiribati Kosovo Kuwait Kyrgyzstan LICENSE KEY: %s LOG: Language choice Lao Peoples Democratic Republic Last Attempt Last CAPTCHA Last Hit Last Login Last Updated Last Updated: %s Last Updated: %s ago Last scan failed Latvia Learn More Learn More About Wordfence Care Learn More About Wordfence Response Learn More: %s Learn about Wordfence Care and Wordfence Response Learn about Wordfence Response Learn more Learn more about Blocking Learn more about Global Options Learn more about Live Traffic Learn more about repairing modified files. Learn more about the Firewall Learn more<span class="wf-hidden-xs"> about Blocking</span> Learn more<span class="wf-hidden-xs"> about Scanning</span> Learn more<span class="wf-hidden-xs"> about Two-Factor Authentication</span> Learn more<span class="wf-hidden-xs"> about the Dashboard</span> Learn more<span class="wf-hidden-xs"> about the Firewall</span> Learn more<span class="wf-hidden-xs"> about the Scanner</span> Learn more<span class="wfls-hidden-xs"> about Login Security</span> Learn more<span class="wfls-hidden-xs"> about Two-Factor Authentication</span> Learning Mode Learning Mode Enabled Learning Mode Until Leave Review Lebanon Legacy Two-Factor Authentication Users Legacy support for SMS-based two-factor authentication has been phased out, as it is less secure than using a modern authenticator app. Lesotho Let Wordfence choose when to scan my site (recommended) Let Wordfence use the most secure method to get visitor IP addresses. Prevents spoofing and works with most sites. Liberia Libyan Arab Jamahiriya License Key License Key Changed License Status License already in use License is expired License renews in %d days License renews today License renews tomorrow Liechtenstein Limit the number of issues sent in the scan results email Limited Limited Scan List of WordPress cron jobs scheduled by WordPress, plugins, or themes. List of comma separated IP addresses to ignore List of comma separated usernames to ignore List of directories to exclude from recently modified file list LiteSpeed/lsapi Lithuania Live Traffic Live Traffic Options Live Traffic, Whois Lookup, Import/Export, and Diagnostics Live Updates Paused Live Updates Paused — Click inside window to resume Live traffic defaults to a summary view of all security-related traffic. Details are viewable by clicking anywhere within the summary record. To switch to the expanded view, click the Expand All Records switch. Loading... Location Lock out after how many forgot password attempts Lock out after how many login failures Locked Out Locked Out<small class="wfls-sub-status">(Grace Period Disabled)</small> Locked Out<small class="wfls-sub-status">(Grace Period Exceeded)</small> Locked out from logging in Lockout Lockout Invalid Users Toggled Log Files Log In Log Security Events to an Off-Site Audit Log on Wordfence Central Logged In Login Attempts Login Captcha Toggled Login Form Login Name Login Only Login Security Login Security Counting Period Updated Login Security Lockout Threshold Updated Login Security Options Login Security Settings Login Security options are available on the Login Security options page Login Security: Allow remembering device for 30 days Login Security: Allowlisted IP addresses that bypass 2FA and reCAPTCHA Login Security: Disable XML-RPC authentication Login Security: Enable 2FA for these roles Login Security: Enable reCAPTCHA on the login and user registration pages Login Security: Require 2FA for XML-RPC call authentication Login Verification Required Login and firewall activity will appear below. Login failed with status code 403. Please contact the site administrator. Login failed with status code 503. Please contact the site administrator. Logins Logins and Logouts Look up IP or Domain Look up visitor IP locations via Wordfence servers Looks like the Wordfence database tables have been deleted. You can fix this by de-activating and re-activating the Wordfence plugin from your Plugins menu. Low Low Severity Problems: Low resource utilization, limited detection capability Luxembourg Macao Madagascar Mail Send Failed Mail Sent Make Permanent Malawi Malaysia Maldives Mali Malta Malware Scan Malware Signatures Malware Signatures Status Malware URLs Malware data received from Wordfence servers was not valid. Manage Manage 2FA Manage 2FA Settings Manage Blocking Rules Manage Brute Force Protection Manage Firewall Manage Firewall Rules Manage Options Manage Plugins Manage Scan Manage Scan Settings Manage Settings Manage Users Manage WAF Manage global and advanced firewall options Manage global blocking options. Manage global options for Wordfence such as alerts, premium status, and more Manage scan options including scheduling Management of legacy two-factor authentication using SMS-based codes is deprecated, and the old method of appending "wf" and a code will not be supported in the future. An improved interface and usage by non-administrators is available by activating the login security module. Users who have legacy 2FA enabled will still be required to enter a code while logging in currently, but legacy 2FA users can no longer be added or removed. Manual Block Created Manual Configuration Manual Installation Instructions Manual block by administrator Manual permanent block by admin Manually Refresh Rules Manually schedule scans Mark as Fixed Marking comment as spam for containing a malware URL. Comment has %s Marking comment as spam for containing a phishing URL. Comment has %s Marshall Islands Martinique Mask Login Errors Toggled Mauritania Mauritius Maximum days to keep Live Traffic data Maximum days to keep Live Traffic data (1-30 days) Maximum email alerts to send per hour Maximum execution time for each scan stage Maximum execution time for each scan stage Maximum number of attempts to resume each scan stage Mayotte Medium Medium Severity Problems: Memory size in megabytes Message to Support Methods of detecting a visitor's IP address. Mexico Micronesia, Federated States of Mode Modified Modified plugin file: %s Modified theme file: %s Modifying the .htaccess file did not resolve the issue, so the original .htaccess file was restored. You can fix this manually by setting <code>display_errors</code> to <code>Off</code> in your php.ini if your site is on a VPS or dedicated server that you control. Moldova, Republic of Monaco Monday Mongolia Monitor Web Application Firewall status Monitor background requests from an administrator's web browser for false positives Monitor background requests from an administrator's web browser for false positives (Admin Panel) Monitor background requests from an administrator's web browser for false positives (Front-end Website) Monitor disk space Montenegro Month Montserrat More Details and Instructions More Information More than %d users exist for the selected role. This notification is not designed to handle large groups of users. In such instances, using a different solution for notifying users of upcoming 2FA requirements is recommended. Morocco Mozambique Multisite Multisite Blog Activated Multisite Blog Archived Multisite Blog Created Multisite Blog Deactivated Multisite Blog Deleted Multisite Blog Domain Multisite Blog ID Multisite Blog Made Private Multisite Blog Made Public Multisite Blog Marked as Spam Multisite Blog Moved to Trash Multisite Blog Path Multisite Blog Removed from Trash Multisite Blog Signup Submitted Multisite Blog Unarchived Multisite Blog Unmarked as Spam Multisite Blog Updated Multisite Network Plugins Changed Multisite User Activated Multisite User Created Multisite User Deleted Multisite enabled Multisite enabled, Older subdomain installation constant Multisite enabled, WordPress will load the /wp-content/sunrise.php file Multisite enabled, subdomain installation constant Multisite/network ability enabled Must-Use WordPress Plugins Myanmar N/A NGINX NGINX Unit NOTE NOTE: This checkbox enables ALL blocking/throttling functions including IP, country and advanced blocking, and the "Rate Limiting Rules" below. NOTE: You are using the free version of Wordfence and are missing out on features like real-time firewall rule and malware signature updates, country blocking, and detecting if your site IP is sending spam. <a href="https://www.wordfence.com/zz6/">Click here to upgrade to Wordfence Premium now</a>. NOTE: You are using the free version of Wordfence. Upgrade today: NOTE: You are using the free version of Wordfence. Upgrade today: - Receive real-time Firewall and Scan engine rule updates for protection as threats emerge - Real-time IP Blocklist blocks the most malicious IPs from accessing your site - Country blocking - IP reputation monitoring - Schedule scans to run more frequently and at optimal times - Access to Premium Support - Discounts for multi-year and multi-license purchases Click here to upgrade to Wordfence Premium: https://www.wordfence.com/zz1/wordfence-signup/ NTP NTP Status NTP Time Offset NTP is a protocol that allows for remote time synchronization. Wordfence Login Security uses this protocol to ensure that it has the most accurate time which is necessary for TOTP-based two-factor authentication. NTP is currently <strong>enabled</strong>. NTP is currently disabled as %d subsequent attempts have failed. NTP updates are currently failing. NTP was manually disabled. NTP will be automatically disabled after %d more attempts. NTP will be automatically disabled after 1 more attempt. Name Namibia Nauru Need help from the WordPress security experts? Need help with a security issue? Nepal Netherlands Network Activated Never Never Block Crawlers Toggled New Caledonia New Issues (%d total) New Login Page Captcha Feature New Plugin Version New Recovery Codes New Theme Version New WordPress Version New Zealand Next Next Update Check Next Update Check: %s Next scan in %1$s (%2$s) Next scan is starting now Nicaragua Nice work! The firewall is now optimized. Niger Nigeria Niue No No Data Available During Learning Mode No Events Detected No IPs blocked yet. No Ignored Issues No MU-Plugins No New Issues No Thanks No Themes No activity to report yet. Please complete your first scan. No allowlisted URLs currently set. No block parameters provided. No block parameters were provided. No blocked attacks yet. No blocks are currently active. No blocks have been recorded. No blocks match the current filter. No blocks were provided. No configuration changes were provided to save. No configuration section was provided. No countries selected. No data currently. No failed logins have been recorded. No failed logins yet. No files readable No files remaining for malware scan. No files writable No issues have been ignored. No license was provided to install. No log files found. No longer an administrator for this site? <a href="%s" target="_blank">Click here</a> to stop receiving security alerts. No longer an administrator for this site? Click here to stop receiving security alerts: %s No new issues have been found. No notifications received No requests blocked yet. No requests to report yet. No rules currently set. No rules were updated. Please verify you have permissions to write to the /wp-content/wflogs directory. No rules were updated. Please verify your website can reach the Wordfence servers. No rules were updated. Your website has reached the maximum number of rule update requests. Please try again later. No scan is scheduled No successful logins have been recorded. No thanks. No updates are available at this time. No users currently exist with the selected role. No users currently have legacy cellphone sign-in enabled. No users found in the %1$s state for the %2$s role No: %s Nonce format is invalid. Nonce is invalid. None Norfolk Island Normal Normal request North Korea North Macedonia, Republic of Northern Mariana Islands Norway Not Active Not Allowed Not a core, theme, or plugin file from wordpress.org Not connected Not recording Not recording (Central disconnected) Note Note: Status will update when changes are saved Note: This does not include Login Security settings and tables. An option to delete those must be selected separately on the Login Security settings page. Note: This feature requires a free site key and secret for the <a href="https://www.google.com/recaptcha/about/" target="_blank" rel="noopener noreferrer">Google reCAPTCHA v3 Service</a>. To set up new reCAPTCHA keys, log into your Google account and go to the <a href="https://www.google.com/recaptcha/admin" target="_blank" rel="noopener noreferrer">reCAPTCHA admin page</a>. Nothing done Nothing selected to block. Notice Dismissed Notification Results Notification Sent Notifications Notify Number of Database Tables Number of scan results to return. OK Odd Days & Weekends Off Offset of scan results to return. Old WordPress core file not removed during update: %s Oman On Once Daily Once a day Once a month Once a week Once you have downloaded the files, click Continue to complete the setup. Once you have downloaded the files, click Continue to complete uninstallation. Once you have entered credentials, click Continue to complete the removal. Once you have entered credentials, click Continue to complete the setup. Only alert me when that administrator signs in from a new device Only alert me when that user signs in from a new device Optimize Wordfence Firewall Optimize the Wordfence Firewall Optimize the Wordfence Firewall. Optimizing the Wordfence Web Application Firewall may not be possible in the current environment. Some firewall rules cannot offer full protection on your hosting platform, but many will still work. You can attempt to configure the firewall if you believe the platform has been misidentified. Option Option Name Option contains a suspected malware URL: %s Optional Options Other Tests Our recommendation for all websites. Provides the best detection capability in the industry. Our senior support engineers <strong>respond to Premium tickets within a few hours</strong> on average and have a direct line to our QA and development teams. Outdated plugin scan adjusted invalid return value in plugins_api filter for %s Overdue Overridden permissions for a new file Overridden permissions for a new folder Overridden: %s Override Overwrite image edits when restoring the original PHP Update Needed for Country Blocking PHP error logs generated by your site, if enabled by your host. PHP version >= PHP %1$s<br><em> (<a href="https://wordpress.org/about/requirements/" target="_blank" rel="noopener noreferrer">WordPress requirements</a>)</em> <a href="%2$s" target="_blank" rel="noopener noreferrer" class="wfhelp"><span class="screen-reader-text"> (opens in new tab)</span></a> PHP version too old PHP version, important PHP extensions. PLUGIN VERSION: %s PM POST Body POST received with blank user-agent and referer Page Page %d is out of range Page Created Page Deleted Page Moved to Trash Page Removed from Trash Page Updated Page Visited Page contains %d malware URL: Page contains %d malware URLs: Page not found Pages Not Found Paid Members Only Pakistan Palau Palestinian Territory Panama Papua New Guinea Paraguay Param Param Name Param Type Parent Theme Option Changed Part of the Firewall configuration procedure for NGINX depends on creating a <code>%1$s</code> file in the root of your WordPress installation. This file can contain sensitive information and public access to it should be restricted. We have <a href="%2$s" target="_blank" rel="noreferrer noopener">instructions on our documentation site<span class="screen-reader-text"> (opens in new tab)</span></a> on what directives to put in your nginx.conf to fix this. Participate in the Real-Time Wordfence Security Network Participate in the Wordfence Security Network Toggled Passing public key to Wordfence Central. Password Reset Password Strength Password recovery attempted Passwords containing a space followed by "wf" without quotes are not allowed. Pause live updates when window loses focus Payment Method Expired Payment Method Expiring Payment Method Invalid Payment Method Missing Performance Options Permanent Permission Denied Peru Philippines Phone (%s) Pick Pick from List Pitcairn Please <a href="%s">click here</a> to configure the Firewall to run correctly on this site. Please Complete Wordfence Installation Please choose a different password. The password you are using exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. <a href="%s">Learn More</a> Please confirm the switch to the new 2FA mode. This change will be permanent. Please confirm the unsubscribe request for %s. Please consider leaving us a 5-star review on wordpress.org. Your review helps other members of the WordPress community find plugins that fit their needs. Please contact the site administrators if they are not already aware of this change. Please download a backup of the following files before we make the necessary changes: Please enter a valid IP address or domain name for your whois lookup. Please enter a valid IP address to block. Please enter a valid email address Please enter a valid email address. Please enter an email address to unsubscribe from alerts. If this email address exists on the alert email list, it will receive a confirmation link to unsubscribe. Please enter the license to install. Please include your support ticket number or forum username. Please make a backup of this file before proceeding. If you need to restore this backup file, you can copy it to the following path from your site's root: Please make sure you separate your IP addresses with commas or newlines. The following allowlisted IP addresses are invalid: Please read this article in our FAQ to make an important change that will ensure your site stability during an update. Please specify a reason Please specify a valid IP address range in the form of "1.2.3.4 - 1.2.3.5" without quotes. Make sure the dash between the IP addresses in a normal dash (a minus sign on your keyboard) and not another character that looks like a dash. Please specify either an IP address range, Hostname or a web browser pattern to match. Please try again. If the problem persists, please <a href="https://www.wordfence.com/help/api-key" target="_blank" rel="noopener noreferrer">contact Wordfence Support<span class="screen-reader-text">(opens in new tab)</span></a> Please use the login security module. Please verify a login attempt for your account on: %s Please wait 3 minutes and try again Plugin Abandoned Plugin Activated Plugin Alerting Disabled Plugin Deactivated Plugin Deleted Plugin File Plugin Installed Plugin Name Plugin Name: Plugin Removed Plugin URL Plugin Update Completed Plugin Upgrade Plugin Version: Plugin Vulnerable Plugin contains an unpatched security vulnerability. Plugin has unpatched security issues. Plugin/Themes/Updates Plugins Poland Port for a proxy server Portugal Post Post Created Post Deleted Post Moved to Trash Post Removed from Trash Post Updated Post editing automatic saving interval Post revisions saved by WordPress Post title contains suspicious code Posted on Posts, Comments, & Files Premium Premium Feature Premium License Conflict Premium License Deactivated Premium License Installed Premium Protection Disabled Premium Protection Enabled Premium Support Prevent Use of Application Passwords Toggled Prevent Use of Breached Passwords Toggled Prevent Using "admin" Username Toggled Prevent discovery of usernames through "/?author=N" scans, the oEmbed API, the WordPress REST API, and WordPress XML Sitemaps Prevent discovery of usernames through '/?author=N' scans, the oEmbed API, the WordPress REST API, and WordPress XML Sitemaps Prevent the use of passwords leaked in data breaches Prevent users registering "admin" username if it doesn't exist Prevent users registering 'admin' username if it doesn't exist Preview Previous Previous scan terminated with an error. See below. Previous scan was stopped successfully. Process Owner Processing pending issues Product Updates Promotions Protect More Sites Protection Level Protection from known and emerging threats Public Files Publicly Accessible Config/Backup/Log Publicly accessible config, backup, or log file found: %s Publicly accessible quarantined file found: %s Puerto Rico Put Geographic Protection In Place With Country Blocking Qatar Quarantined File Query String Quick Quick Scan Quick Scan Complete. Scanned in %s. Ranges mixing IPv4 and IPv6 addresses are not supported. Rate Limiting Rate limiting based on type of request (human vs crawler) may be less accurate because this prevents loading the extra JavaScript used for that identification. Re-enable %d firewall rule. Re-enable %d firewall rules. Real-Time IP Blocklist Real-time IP Blocklist blocks the most malicious IPs from accessing your site Reason Receive real-time Firewall and Scan engine rule updates for protection as threats emerge Recent Recent Activity Recent Event Summary Recently Blocked Attacks Recently Modified Files Recently removed wflogs files Recommended Recommended Settings Change Reconnect This Site Recording (all events) Recording (significant events only) Recovery Codes Recovery Key Generated Redirect to the URL below Redirected Redirected by Country Blocking bypass URL Redirecting back to Wordfence Central. Referer Referrer Regex compilation failed for signature %d Register with Wordfence to secure your site with the latest threat intelligence. Registered Users Regular traffic and security-related traffic will appear below. Reload Remember for 30 days Remind Me Later Reminder: If you lose access to your authenticator device, you can use recovery codes to log in. If you have not saved a copy of your recovery codes, we recommend downloading them now. Remove Extended Protection Remove Invalid License Renew License Repair Repair All Repairable Files Repair the Wordfence Firewall configuration. Repaired %1$d files but we encountered the following errors with other files: %2$s Repaired %d files successfully Repaired %d files successfully. No errors were encountered. Repaired some files with errors Repository URL Reputation Check Status Reputation Checks Reputation check Request Response Request Time: Request received via unlock email link to unblock all IPs via disabling firewall rules. Request received via unlock email link to unblock all IPs. Request was generated at: %s Requesting max memory Requests Required Required parameters not sent. Requires downloading from the server directly Requiring 2FA for customers is not recommended as some customers may experience difficulties setting up or using two-factor authentication. Instead, using the "Optional" mode for users with the customer role is recommended which will allow customers to enable 2FA, but will not require them to do so. Rescheduled missing daily cron Rescheduled missing hourly cron Reset Reset Grace Period Reset License Reset Score Statistics Reset site to a free license Response Response License Installed Rest of site Restore Restore Defaults Results Results Found Resume Installation Resuming malware scan at rule %s. Retrieving access token using authorization grant. Return to scan results Return to the <a href="%s">Wordfence Admin Page</a> Return to the site home page Return value of is_multisite() Reunion Review Review Payment Method Revoke Capabilities Revoke Grace Period Role Role Added to User Role Capabilities Changed Role Removed from User Romania Rule Added Rule Update Failed Rule updates delayed by 30 days Rules Rules Updated Rules updated in real-time Run Time Run Whois Run a Scan Run reCAPTCHA in test mode Russian Federation Rwanda SHOW ALL RULES SITE: %s SSL is not supported by your web server and is required to use this function. Please ask your hosting provider or site admin to install cURL with openSSL to use this feature. SUM_KILLED:A request was received to stop the previous scan from Wordfence Central. Saint Bartelemey Saint Helena Saint Kitts and Nevis Saint Lucia Saint Martin Saint Pierre and Miquelon Saint Vincent and the Grenadines Samoa San Marino Sao Tome and Principe Saturday Saudi Arabia Save Save Changes Scan Scan Complete. Scan Complete. Scanned %1$d files, %2$d plugins, %3$d themes, %4$d posts, %5$d comments and %6$d URLs in %7$s. Scan Engine Error: %s Scan Failed Scan Issues Scan Options Scan Options & Settings Scan Options Updated Scan Options and Scheduling Scan Schedule Updated Scan Scheduling Scan Stage Failed Scan Status Scan Stopping Scan Time Limit Exceeded Scan Type Scan WordPress core, plugin, and theme options for known dangerous URLs and suspicious content Scan can't continue - stored data not found after a fork. Scan can't continue - stored data not found after a fork. Got type: %s Scan comments for known dangerous URLs and suspicious content Scan complete. Congratulations, no new problems found. Scan complete. You have %d new issue to fix. Scan complete. You have %d new issues to fix. Scan completed on %s Scan core files against repository versions for changes Scan engine received request. Scan file contents for backdoors, trojans and suspicious code Scan file contents for malicious URLs Scan files outside your WordPress installation Scan for misconfigured How does Wordfence get IPs Scan for out of date, abandoned, and vulnerable plugins, themes, and WordPress versions Scan for publicly accessible configuration, backup, or log files Scan for publicly accessible quarantined files Scan for signatures of known malicious files Scan for suspicious admin users created outside of WordPress Scan images, binary, and other files as if they were executable Scan interrupted. No problems found prior to stopping. Scan interrupted. Scanned %1$d files, %2$d plugins, %3$d themes, %4$d posts, %5$d comments and %6$d URLs in %7$s. Scan interrupted. You have %d new issue to fix. See below. Scan interrupted. You have %d new issues to fix. See below. Scan plugin files against repository versions for changes Scan posts for known dangerous URLs and suspicious content Scan process ended after forking. Scan result group or all results. Scan stop request received from Wordfence Central. Scan stop request received. Scan terminated with error: %s Scan the code below with your authenticator app to add this account. Some authenticator apps also allow you to type in the text version instead. Scan theme files against repository versions for changes Scan was stopped on administrator request. Scan wp-admin and wp-includes for files not bundled with WordPress Scanned comment with %s Scanned contents of %1$d additional files at %2$.2f per second Scanner Scanner Options Scanning additional paths is optional and is not always necessary. Scanning comment with %s Scanning comments for URLs on a domain blocklist Scanning comments with %d left to scan. Scanning contents: %1$s (Size: %2$s Mem: %3$s) Scanning contents: %1$s (Size: %2$s) Scanning file contents for URLs on a domain blocklist Scanning file contents for infections and vulnerabilities Scanning for admin users not created through WordPress Scanning for known malware files Scanning for old themes, plugins and core files Scanning for publicly accessible quarantined files Scanning for suspicious site options Scanning for unknown files in wp-admin and wp-includes Scanning for weak passwords Scanning posts for URLs on a domain blocklist Scanning posts with %d left to scan. Scanning to check available disk space Scanning: %1$s (Mem:%2$s) Scanning: %s Scans are not functional because SSL is unavailable. Schedule Wordfence Scans Schedule scans to run more frequently and at optimal times Scheduled Wordfence scan starting at %s Scheduled time for day %1$s hour %2$s is: %3$s Search All Options Seconds since last hit Security Alerts Security Event Security token has expired. Click <a href="%s">here</a> to return to the scan page. See below. See recent traffic See the details of these scan results on your site at: %s Seek error occurred in file: %s - Skipping. Select Countries to Block from List Select row %d Select/deselect all Selected automatically when General Options have been customized for this website. Send Send Anyway Send Report Send Report by Email Send Test Activity Report Send Test Email Send Unlock Email Send a test activity report email: Send a test email from this WordPress server to an email address: Send an email to users with the selected role to notify them of the grace period for enabling 2FA. Select the desired role and optionally specify the URL to be sent in the email to setup 2FA. If left blank, the URL defaults to the standard wordpress login and Wordfence’s Two-Factor Authentication plugin page. For example, if using WooCommerce, input the relative URL of the account page. Senegal Separate multiple URLs with commas or place them on separate lines. Asterisks are wildcards, but use with care. If you see an attacker repeatedly probing your site for a known vulnerability you can use this to immediately block them. All URLs must start with a "/" without quotes and must be relative. e.g. /badURLone/, /bannedPage.html, /dont-access/this/URL/, /starts/with-* Separate multiple addresses with commas Serbia Serialized config writing Server State Server Time Server Time: Server Update Server time accuracy and applied offsets. Set up the way you want the firewall to protect your site including the web application firewall, brute force protection, rate limiting, and blocking. Set up the way you want the scan to monitor your site security including custom scan configurations and scheduling. Set: %s Setting Setting Name Setting higher will reduce browser traffic but slow scan starts, live traffic & status updates. Setting the grace period to 0 will prevent users in roles where 2FA is required, including newly created users, from logging in if they have not already enabled two-factor authentication. Setting up error handling environment Setting up scanRunning and starting scan Settings Severity: %s Seychelles Shortcuts Should be: Show Advanced Filters Show Automatic Show User Counts Show Wordfence 2FA menu on WooCommerce Account page Show Wordfence Automatic Blocks Show last login column on WP Users page Show log Show more Show the standard Wordfence blocked message Sierra Leone Sign up for Wordfence Care and we'll take care of it. Our security experts will clean your site, resolve the infection, and perform a security audit. Get hands-on support with any security issue including help installing, configuring and optimizing Wordfence. Sign up for Wordfence Care today and get expert help with any security issue. Wordfence Care is for business owners who put a premium on their time. With Wordfence Care, we take care of it, so that you can focus on your customers. Check out Wordfence Response for mission-critical WordPress websites. Signature is invalid. Signatures updated in real-time Significant Significant Events Since you have High Sensitivity scanning enabled, there is a very high likelihood that your results will include false positives. If you think you have indeed been hacked, our team of security experts can help. Since you have the beta threat defense feed enabled, there is a high likelihood that your results could include false positives. If you think you have indeed been hacked, our team of security experts can help. Singapore Sint Maarten Site Data Exported Site Except Login Site ID Site ID is invalid. Site Settings Site URL Option Changed Site is not connected to Wordfence Central. Skip Skipped Skipped Paths Skipping core scan Skipping file larger than max size: %s Skipping inaccessible directory: %s Skipping malware scan Skipping password scan for non-admin user %s with bcrypt password Skipping plugin scan Skipping scan of file contents for URLs on a domain blocklist Skipping scan of file contents for infections and vulnerabilities Skipping theme scan Skipping unknown core file scan Skipping unneeded hash: %s Slovakia Slovenia Solomon Islands Somalia Someone tried to recover the password for user with email address: %s Sorry but your browser sent an invalid security token when trying to use this form. Sorry, but no data for that IP or domain was found. Sorry, you are not allowed to list users. Source Source IP: %s South Africa South Georgia and the South Sandwich Islands South Korea Space Remaining Spain Spam Spam Check Specific config options to return. Specific config options to set. Specify a valid IP range Specify a valid hostname Specify an IP range, Hostname or Browser pattern Sri Lanka Standard Standard Scan Standard detection capability Standard detection capability, chance of false positives Start New Scan Start Your First Scan Start all scans remotely (Try this if your scans aren't starting and your site is publicly accessible) Start time Starting cron via proxy at URL %s Starting cron with normal ajax at URL %s Starting password strength check on %d user. Starting password strength check on %d users. Starting scan of file contents Status Status Updates Paused<br /><small>Click inside window to resume</small> Status of installed plugins. Status of installed themes. Stop Ignoring Stop Scan Stops Complex Attacks Stops Password Guessing Attacks Submit Feedback Success deleting file Success removing option Success restoring file Success updating option Successful Successfully deleted admin Successfully removed data Successfully revoked admin Sudan Sunday Super Admin Granted to User Super Admin Revoked from User Super Administrator Support Support for free customers is available via our forums page on wordpress.org. The majority of requests <strong>receive an answer within a few days.</strong> Suriname Svalbard and Jan Mayen Swaziland Sweden Switch to New 2FA Switzerland Syrian Arab Republic System configuration, memory test, send test email from this server. TOTP Time Source Tables missing (prefix %1$s, %2$s): %3$s Taiwan Tajikistan Tanzania, United Republic of Terms of Use and Privacy Policy Test Email Sent Test email failed to send Test email sent successfully Test result of scan start URL fetch: %s Test your WordPress host's available memory Testing accessibility of: %s Testing initial communication with Wordfence Central. Testing public key authentication with Wordfence Central. Testing that Wordfence Central is able to communicate with this site. Thailand Thank you for providing your feedback on Wordfence Security Thanks for sending your diagnostic page over email The 'How does Wordfence get IPs' option was successfully updated to the recommended value. The <code>auto_prepend_file</code> setting has been successfully removed from <code>.htaccess</code> and <code>.user.ini</code>. Once this change takes effect, Extended Protection Mode will be disabled. The Audit Log has failed to successfully send events for two days. Please verify the connection with Wordfence Central, connectivity to the Wordfence servers, and that the database has no damaged tables. The Full Path disclosure issue has been fixed The GDPR is a set of rules that provides more control over EU personal data. Defiant has updated its terms of service, privacy policies, and software, as well as made available standard contractual clauses to meet GDPR compliance. The GeoIP database that is required for country blocking has been updated to a new format. This new format requires sites to run PHP 5.4 or newer, and this site is on PHP %s. To ensure country blocking continues functioning, please update PHP. The IP address %s is allowlisted and can't be blocked. You can remove this IP from the allowlist on the Wordfence options page. The IP address %s is in a range of IP addresses that Wordfence does not block. The IP range may be internal or belong to a service safe to allow access for. The IP address you're trying to block belongs to Google. Your options are currently set to not block these crawlers. Change this in Wordfence options if you want to manually block Google. The IP you provided must be in dotted quad notation or use ranges with square brackets. e.g. 10.11.12.13 or 10.11.12.[1-50] The IP/range %s is invalid. The Plugin "%1$s" appears to be abandoned (updated %2$s). The Plugin "%1$s" appears to be abandoned (updated %2$s, tested to WP %3$s). The Plugin "%1$s" needs an upgrade (%2$s -> %3$s). The Plugin "%s" has a security vulnerability. The Plugin "%s" has been removed from wordpress.org but is still installed on your site. The Theme "%1$s" needs an upgrade (%2$s -> %3$s). The URL %s is on the blocklist. The URL is: %s The URL/parameters in this table will not be tested by the firewall. They are typically added while the firewall is in Learning Mode or by an admin who identifies a particular action/request is a false positive. The WAF storage engine is currently set to mysqli, but Wordfence is unable to use the database. The WAF will fall back to using local file system storage instead. The Web Application Firewall is currently in Learning Mode. The Wordfence 2FA Code can be found within the authenticator app you used when first activating two-factor authentication. You may also use one of your recovery codes. The Wordfence Assistant plugin is currently installed. It should only be retained during use and should be removed once it's no longer needed. The Wordfence Assistant plugin is currently installed. It should only be retained during use and should be removed once it's no longer needed. <a href="%s" target="_blank">Click here to learn more.</a> The Wordfence Audit Log is a premium feature that records a history of events on your site to assist in monitoring for unauthorized actions or signs of compromise. Events can include everything from user creation and editing to plugin/theme installation and updates. All data captured for relevant events is saved remotely to Wordfence Central to prevent any tampering that may interfere with post-incident analysis and response. The Wordfence Audit Log is designed to monitor all changes and actions in security-sensitive areas of the site. Actions such as user creation, plugin installation and activation, changes to settings, and similar are all logged with relevant contextual information for later review or forensic analysis. Additionally, the log is securely saved outside of the site on Wordfence Central (sample below) to avoid tampering or deletion by malicious actors. The Wordfence Audit Log records a history of events on your site to assist in monitoring for unauthorized actions or signs of compromise, ranging from user creation and editing to plugin/theme installation and updates. You can choose to log all events or significant events only, which includes all authentication, site configuration, and site functionality events. Events are securely saved to Wordfence Central to prevent any tampering with the data that may interfere with post-incident analysis and response. The Wordfence Dashboard provides valuable insights into the current state of your site's security. You'll find useful data summarized here as well as important status updates and notifications. The Wordfence Live Traffic feature has been disabled because you have %s active which is not compatible with Wordfence Live Traffic. The Wordfence Premium License in use on this site has been removed from your account. The Wordfence Web Application Firewall cannot run. The Wordfence Web Application Firewall has blocked %1$d attacks over the last %2$s. The Wordfence Web Application Firewall is a PHP-based, application-level firewall that filters out malicious requests to your site. It is designed to run at the beginning of WordPress' initialization to filter any attacks before plugins or themes can run any potentially vulnerable code. The Wordfence Web Application Firewall is in read-only mode. The Wordfence Web Application Firewall needs a configuration update. The Wordfence activation server returned an unexpected response. Please try again. The Wordfence administrative URL for this site is: %s The Wordfence firewall is still optimized. You should remove the firewall's extended protection before deleting to avoid PHP errors if some firewall files cannot be removed, or if PHP's "auto_prepend_file" setting is cached. The Wordfence firewall protects your sites from attackers The Wordfence license could not be installed. The Wordfence license provided has been installed. The Wordfence license you're using does not match this site's address. Premium features are disabled. The Wordfence scanning servers are currently unavailable. This may be for maintenance or a temporary outage. If this still occurs in an hour, please contact support. [%s] The Wordfence server's response did not contain the expected elements. The admin user %s was successfully deleted. The audit log is currently recording all monitored events to Wordfence Central, including content changes, user actions and changes, site modifications, and Wordfence configuration updates. The audit log is currently recording all significant events to Wordfence Central, which includes user actions and updates, site modifications, and Wordfence configuration changes. The changes have not yet taken effect. If you are using LiteSpeed or IIS as your web server or CGI/FastCGI interface, you may need to wait a few minutes for the changes to take effect since the configuration files are sometimes cached. You also may need to select a different server configuration in order to complete this step, but wait for a few minutes before trying. You can try refreshing this page. The code provided does not match the expected value. Please verify that the time on your authenticator device is correct and that this server's time is correct. The configuration files are corrupt or inaccessible by the web server, which is preventing the WAF from functioning. Please verify the web server has permission to access the configuration files. You may also try to rebuild the configuration file by <a href="%1$s">clicking here</a>. It will automatically resume normal operation when it is fixed. <a class="wfhelp" target="_blank" rel="noopener noreferrer" href="%2$s"><span class="screen-reader-text"> (opens in new tab)</span></a> The constant WORDFENCE_LS_DISABLE_NTP is defined which disables NTP entirely. Remove this constant or set it to a falsy value to enable NTP. The core files scan has not run because this version is not currently indexed by Wordfence. New WordPress versions may take up to a day to be indexed. The core files scan will not be run because this version of WordPress is not currently indexed by Wordfence. This may be due to using a prerelease version or because the servers are still indexing a new release. If you are using an official WordPress release, this issue will automatically dismiss once the version is indexed and another scan is run. The current scan looks like it has failed. Its last status update was more than %s ago. You may continue to wait in case it resumes or stop and restart the scan. Some sites may need adjustments to run scans reliably. The current site URL does not match the Wordfence Central connection information. Local connection information has been removed, but %s is still registered in Wordfence Central. The disk has %s MB available The duration of the block is %s. The duration of the lockout is %s. The email address provided has been unsubscribed from future alert emails. The error returned was: The file %s was successfully deleted. The file %s was successfully restored. The file <code>%s</code> was deleted successfully. The file <code>%s</code> was restored successfully. The file was successfully hidden from public view. The following IPs you selected to ignore in live traffic reports are not valid: The following IPs/ranges you selected to trust as proxies are not valid: The following emails are invalid: The following users you selected to ignore in live traffic reports are not valid on this system: The given user already has two-factor authentication active. The given user does not exist. The grace period day limit must be between %1$d and %2$d. The grace period end time must be in the future. The issue type is: %s The key used to start a scan expired. The value is: %1$s and split is: %2$s and time is: %3$d The last rules update for the Wordfence Web Application Firewall was unsuccessful. The last successful update check was %s, so this site may be missing new rules added since then. The license key entered is not in a valid format. It must contain only numbers and the letters A-F. The license provided is already in use on another site. The license you were using has been removed from your account. Please reach out to <a href="mailto:billing@wordfence.com">billing@wordfence.com</a> or create a Premium support case at <a href="https://support.wordfence.com/support/tickets" target="_blank">https://support.wordfence.com/support/tickets<span class="screen-reader-text"> (opens in new tab)</span></a> for more information. Our staff is happy to help. The license you were using has been removed from your account. Please reach out to billing@wordfence.com or create a Premium support case at https://support.wordfence.com/support/tickets for more information. Our staff is happy to help. The link you used to access this page has expired, has already been used, or is otherwise invalid. The malicious URL matched The matched text in this file is: %s The most recently-detected events on this site are listed below. When the audit log is enabled and your site is connected to Wordfence Central, full details of each event can be found on Central. This includes information such as record IDs, version numbers, and which modifications were made. Log entries in preview mode are only stored locally. The multisite blog with ID %d is listed on a domain blocklist. The multisite blog with ID %d is listed on the Wordfence domain blocklist. The option "Scan files outside your WordPress installation" is off by default, which means %1$d path and its file(s) will not be scanned for malware or unauthorized changes. To continue skipping this path, you may ignore this issue. Or to start scanning it, enable the option and subsequent scans will include it. Some paths may not be necessary to scan, so this is optional. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a><br><br>The path skipped is %3$s The option "Scan files outside your WordPress installation" is off by default, which means %1$d paths and their file(s) will not be scanned for malware or unauthorized changes. To continue skipping these paths, you may ignore this issue. Or to start scanning them, enable the option and subsequent scans will include them. Some paths may not be necessary to scan, so this is optional. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a><br><br>The paths skipped are %3$s The option %s was successfully removed. The plugin will load as a regular plugin after WordPress has been loaded, and while it can block many malicious requests, some vulnerable plugins or WordPress itself may run vulnerable code before all plugins are loaded. The previous scan has failed. Some sites may need adjustments to run scans reliably. The previous scan has terminated because the time limit of %s was reached. This limit can be customized on the options page. The previous scan has terminated because we detected an update occurring during the scan. The rate limit for alert emails of %d alert(s) per hour from Wordfence has been reached. No alerts will be sent for the remainer of the hour. The reason is: "%s". The request has been allowlisted. Please try it again. The request was flagged as suspicious, and we need verification that you attempted to log in to allow it to proceed. This verification link <b>will be valid for 15 minutes</b> from the time it was sent. If you did not attempt this login, please change your password immediately. The required file has been created. You'll need to insert the following code into your <code>php.ini</code> to finish installation: The results of your scan may indicate that you could benefit from Wordfence Site Cleaning The scan has failed because we received an unexpected response from the Wordfence servers. This may be a temporary error, though some sites may need adjustments to run scans reliably. The scan has failed because we were unable to contact the Wordfence servers. Some sites may need adjustments to run scans reliably. The scan time limit of %1$s has been exceeded and the scan will be terminated. This limit can be customized on the options page. <a href="%2$s" target="_blank" rel="noopener noreferrer">Get More Information<span class="screen-reader-text"> (opens in new tab)</span></a> The scan was terminated early because it reached the time limit for scans. If you would like to allow your scans to run longer, you can customize the limit on the options page: <a href="%1$s">%2$s</a> or read more about scan options to improve scan speed here: <a href="%3$s">%4$s</a> The selected trusted proxy preset is not valid: The signature on the request to start a scan is invalid. Please try again. The site admin can change this option. The specified URL is invalid. The two panels below show a before and after view of a file on your system that has been modified. The left panel shows the original file before modification. The right panel shows your version of the file that has been modified. Use this view to determine if a file has been modified by an attacker or if this is a change that you or another trusted person made. If you are happy with the modifications you see here, then you should choose to ignore this file the next time Wordfence scans your system. The update check performed during the scan encountered an error: %s The update was successful! The user does not exist. The user specified does not have two-factor authentication active. The view %s does not exist or is not readable. The view could not be loaded. The whois service gives you a way to look up who owns an IP address or domain name that is visiting your website or is engaging in malicious activity on your website. Theme Customized Theme Deleted Theme File Theme Installed Theme Name Theme Name: Theme Sidebar Updated Theme Switched Theme URL Theme Update Completed Theme Upgrade Theme Version: Theme stylesheet folder override Theme template folder override Themes Themes & Plugins There are no differences between the original file and the file in the repository. There is already a scan running. There was an error connecting to the Wordfence scanning servers: %s There was an error deleting the file. There was an error restoring the file. There was an error starting the scan: %s. There was an error while downgrading to a free license. There was an error while sending the email. There was an error writing to your .htaccess file. There was an unknown error connecting to the Wordfence scanning servers. There was an unknown error starting the scan. These IPs (or CIDR ranges) will be ignored when determining the requesting IP via the X-Forwarded-For HTTP header. Enter one IP or CIDR range per line. These URL patterns will be excluded from the throttling rules used to limit crawlers. These instructions <b>will be valid for 30 minutes</b> from the time they were sent. These options are also available throughout the plugin pages, in the relevant sections. This page is provided for easier setup for experienced Wordfence users. These options let you choose which site events to record in the audit log. When enabled and your site is connected to Wordfence Central, these events are automatically sent to Central to prevent any tampering by an attacker. When <strong>Audit Log logging mode</strong> is set to "Significant Events", all events except content changes will be recorded. "All Events" will include content-related events and may be used to monitor for unauthorized post or page changes. "Preview" and "Disabled" modes do not send any events to Central. These options let you choose which traffic to log and to ignore certain types of visitors, based on their level of access, usernames, IP address, or browser type. If you run a high-traffic website where it is not feasible to see your visitors in real-time, simply change the <strong>Traffic logging mode</strong> to "Security Only." This %1$s contains a URL that is currently listed on Wordfence's domain blocklist. The URL is: %2$s This IP address is in a range of addresses that Wordfence does not block. The IP range may be internal or belong to a service that is always allowed. Allowlisting of external services can be disabled. <a href="%s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a> This PHP setting is currently in use, and is including this file: This WordPress core file has been modified and differs from the original file distributed with this version of WordPress. This additional info may help you diagnose the issue. The response headers we received were: This could be caused by a database problem. You may need to repair your "wfconfig" database table or fix your database user's privileges if they have changed recently, or you may need to reinstall Wordfence. Please <a href="%s" target="_blank" rel="noopener noreferrer">contact Wordfence support<span class="screen-reader-text"> (opens in new tab)</span></a> if you need help. This diagnostic is unavailable as cURL appears to be supported, but was not used by WordPress for this request This diagnostic requires cURL This email was sent from your website "%1$s" by the Wordfence plugin at %2$s This email was sent from your website "%s" by the Wordfence plugin. This email was sent from your website <a href="%1$s">%1$s</a> and is a summary of security related activity that Wordfence monitors for the period %2$s to %3$s. This feature blocks all traffic from IPs with a high volume of recent malicious activity using Wordfence's real-time blocklist. This file appears to be installed or modified by a hacker to perform malicious activity. If you know about this file you can choose to ignore it to exclude it from future scans. This file belongs to plugin "%1$s" version "%2$s" and has been modified from the file that is distributed by WordPress.org for this version. Please use the link to see how the file has changed. If you have modified this file yourself, you can safely ignore this warning. If you see a lot of changed files in a plugin that have been made by the author, then try uninstalling and reinstalling the plugin to force an upgrade. Doing this is a workaround for plugin authors who don't manage their code correctly. <a href="%3$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a> This file belongs to theme "%1$s" version "%2$s" and has been modified from the original distribution. It is common for site owners to modify their theme files, so if you have modified this file yourself you can safely ignore this warning. <a href="%3$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a> This file contains a URL that is currently listed on Wordfence's domain blocklist. The URL is: This file is a PHP executable file and contains the word "eval" (without quotes) and the word "%s" (without quotes). The eval() function along with an encoding function like the one mentioned are commonly used by hackers to hide their code. If you know about this file you can choose to ignore it to exclude it from future scans. This file was detected because you have enabled HIGH SENSITIVITY scanning. This option is more aggressive than the usual scans, and may cause false positives. This file is in a WordPress core location but is from an older version of WordPress and not used with your current version. Hosting or permissions issues can cause these files to get left behind when WordPress is updated and they should be removed if possible. This file is in a WordPress core location but is not distributed with this version of WordPress. This scan often includes files left over from a previous WordPress version, but it may also find files added by another plugin, files added by your host, or malicious files added by an attacker. This file is in a WordPress core location but is not distributed with this version of WordPress. This scan often includes files left over from a previous WordPress version, but it may also find files added by another plugin, files added by your host, or malicious files added by an attacker. <a href="%s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a> This file is suspected malware: %s This file may contain malicious executable code: This file was detected because you have enabled "Scan images, binary, and other files as if they were executable", which treats non-PHP files as if they were PHP code. This option is more aggressive than the usual scans, and may cause false positives. This file was detected because you have enabled HIGH SENSITIVITY scanning. This option is more aggressive than the usual scans, and may cause false positives. This file's signature matches a known malware file. The title of the malware is '%s'. Immediately inspect this file using the 'View' option below and consider deleting it from your server. This is a test email from %1$s. The IP address that requested this was: %2$s This is the severity of the vulnerability itself, which can differ from the scan result severity. Some lower-severity vulnerabilities may still be important to address depending on your site's configuration and user base, so they are still important for you to review. This is where future security alerts for your website will be sent. This can also be changed in Global Options. This is where you can monitor the work Wordfence is doing to protect your site and also where you can manage the options to optimize the firewall's configuration. This is your Dashboard This is your main configuration file and cannot be deleted. It must be cleaned manually. This key may already be used on several sites. To avoid scan scheduling issues and other problems, you should get a new key or remove it from the other sites. This likely indicates that the server either does not support IPv6 or does not have an IPv6 address assigned or associated with the domain. Original error message: %s This likely means that your hosting provider is blocking requests to noc1.wordfence.com or has set up a proxy that is not behaving itself. This link has expired. Refresh the scan results page and try again. This list may include WordPress core/plugin/theme updates, error logs, cache files, and other normal changes. This may cause duplicated scan issues if both sites are currently active and reporting and is generally caused by duplicating the database from one site to another (e.g., from a production site to staging). We recommend disconnecting this site only, which will leave the matching site still connected. This option contains a URL that is currently listed on Wordfence's domain blocklist. It may indicate your site is infected with malware. The URL is: %s This option enables all "Brute Force Protection" options, including strong password enforcement and invalid login throttling. You can modify individual options below. This option requires cURL. (This may have no effect on some old PHP or cURL versions.) This page only shows users and roles on the main site of this network This page shows information that can be used for troubleshooting conflicts, configuration issues, or compatibility with other plugins, themes, or a host's environment. Failing tests are not always a sign of something that you need to fix, but can help the Wordfence team when troubleshooting a problem. This plugin will be discontinued on or around July 1, 2026, because its features are already included in the main Wordfence plugin. This post contains code that is suspicious. Please check the title of the post and confirm that the code in the title is not malicious. This site appears to be behind Cloudflare, so using the Cloudflare "CF-Connecting-IP" HTTP header will resolve to the correct IPs. This site appears to be behind a front-end proxy, so using the X-Forwarded-For HTTP header will resolve to the correct IPs. This site appears to be behind a front-end proxy, so using the X-Real-IP HTTP header will resolve to the correct IPs. This site is currently using PHP's built in REMOTE_ADDR. This site is currently using the Cloudflare "CF-Connecting-IP" HTTP header, which should only be used when the site is behind Cloudflare. This site is currently using the X-Forwarded-For HTTP header, which should only be used when the site is behind a front-end proxy that outputs this header. This site is currently using the X-Real-IP HTTP header, which should only be used when the site is behind a front-end proxy that outputs this header. This user's email is the network admin email. It will need to be changed before deleting this user. This was a premium license key, but it is no longer valid, so premium features are disabled. You can either remove the invalid key and continue using Wordfence's free features, or enter a new premium key to upgrade. If you have questions, contact <a href="mailto:billing@wordfence.com">billing@wordfence.com</a>. This will be shown only once. Keep these codes somewhere safe. Throttled Throttling IP %1$s. %2$s Thursday Ticket Number/Forum Username Time Time Limit Time limit that a scan can run in seconds Time: Timor-Leste Title To To change your alert options for Wordfence, visit: %s To clone one site's configuration to another, use the import/export tools below. To connect your site your site to Wordfence Central, use the link below: To continue receiving updates and security improvements, please install and activate the main Wordfence plugin — also available for free. To continue using 2FA, you will need to switch this site to the newer method on the <a href="%s">Legacy Two-Factor Authentication page</a>, and then users will need to set up 2FA with an authenticator app. To continue using Defiant products and services including the Wordfence plugin, all customers must review and agree to the updated terms and privacy policies. These changes reflect our commitment to follow data protection best practices and regulations. The Wordfence interface will remain disabled until these terms are agreed to. To ensure uninterrupted Premium Wordfence protection on your site, please renew your license by visiting https://www.wordfence.com/ Sign in, go to your dashboard, select the license about to expire and click the button to renew that license. To make your site as secure as possible, take a moment to optimize the Wordfence Web Application Firewall: To make your site as secure as possible, the Wordfence Web Application Firewall is designed to run via a PHP setting called <code>auto_prepend_file</code>, which ensures it runs before any potentially vulnerable code runs. To preserve the integrity of your website we are not running Wordfence auto-update. You are running the LiteSpeed web server which has been known to cause a problem with Wordfence auto-update. Please go to your website now and make a minor change to your .htaccess to fix this. You can find out how to make this change at: %s Alternatively you can disable auto-update on your website to stop receiving this message and upgrade Wordfence manually. To protect your site from this vulnerability, the safest option is to deactivate and completely remove "%1$s" until a patched version is available. <a href="%2$s" target="_blank" rel="noopener noreferrer">Get more information.<span class="screen-reader-text"> (opens in new tab)</span></a> To see current Wordfence alerts, visit: %s To update your license settings please visit https://www.wordfence.com/zz9/dashboard Today Toggle row %d Togo Tokelau Token is invalid. Tonga Too many installation requests have been made from your IP address. Please try again later. Tool Options Tools Top %d Countries Blocked Top %d Failed Logins Top %d IPs Blocked Top 10 Countries Blocked Top 10 Failed Logins Top 10 IPs Blocked Top Countries by Number of Attacks - Last 7 Days Top IPs Blocked Top Topics and Questions Total Total Attacks Total Attacks Blocked: Total IPs Blocked Total Users Total disk space: %1$s -- Free disk space: %2$s Total of %d users left to process in password strength check. Total of %d users left to process in password strength check. Traffic logging mode Traffic logging mode (Live Traffic) Traffic logging mode: All traffic Traffic logging mode: Security-related traffic only Treat Google like any other Crawler Trinidad and Tobago Trusted Proxies Trusted Proxies Updated Trusted Proxy Preset Trusted Proxy Preset Changed Try Again Tuesday Tunisia Turkey Turkmenistan Turks and Caicos Islands Turn On Tuvalu Twice Daily Two Factor Status Two-Factor Authentication Two-Factor Authentication Recovery Codes - %1$s (%2$s) Two-Factor Authentication, or 2FA, significantly improves login security for your account. Wordfence 2FA works with a number of TOTP-based apps like Google Authenticator, FreeOTP, and Authy. For a full list of tested TOTP-based apps, <a href="%s" target="_blank" rel="noopener noreferrer">click here</a>. Two-Factor Authentication, or 2FA, significantly improves login security for your website. Wordfence 2FA works with a number of TOTP-based apps like Google Authenticator, FreeOTP, and Authy. For a full list of tested TOTP-based apps, <a href="%s" target="_blank" rel="noopener noreferrer">click here</a>. Two-factor authentication is not currently enabled for this account type. To enable it, visit the Wordfence 2FA Settings page. Two-factor authentication is required for this account, but has not been configured. Two-factor authentication is required for your account, but has not been configured. Two-factor authentication must be activated for this account prior to %s. Two-factor authentication must be activated for your account prior to %s to avoid losing access. Two-factor authentication now has its own IP allowlist. If necessary, you can allow specific IP addresses or ranges to skip 2FA when logging in. Two-factor authentication will be required for user <strong>%1$s</strong> beginning <strong>%2$s</strong>. Two-factor authentication will be required for your account beginning <strong>%s</strong> Type Type: %s U.S. Blocked UA/Hostname/Referrer/IP Range not allowed UA/Referrer/IP Range not allowed URL URL redirected to if the visitor tries to access a nonexistent blog URL to redirect blocked countries to URL to redirect blocked users to URL to the "wp-content" folder URLs Checked UTC Uganda Ukraine Unable to Activate Grace Period Unable to Install Unable to Reset Grace Period Unable to Revoke Grace Period Unable to Uninstall Unable to access available disk space information Unable to accurately detect IPs Unable to authenticate with Wordfence Central. Unable to automatically hide file Unable to communicate with Wordfence Central Unable to determine version for plugin %s Unable to dismiss notice Unable to output phpinfo content because it is disabled Unable to read file contents Unable to remove code execution protections applied to the .htaccess file in the uploads directory. Please check your permissions on that file. Unable to save the .htaccess file needed to disable script execution in the uploads directory. Please check your permissions on that directory. Unable to validate the reCAPTCHA site key. Please check the key and try again. Unavailable Unblock Unblock All Unblock IP Unblock range Unblocking Uninstall Wordfence Firewall Uninstallation from this site was successful! The Wordfence Firewall is still active because it is installed in another WordPress installation. Uninstallation was successful! United Arab Emirates United Kingdom United States United States Minor Outlying Islands Unknown Unknown (mixed plugin version) Unknown AJAX action. Unknown Administrator Unknown Core File Unknown Events Unknown Type Unknown WordPress core version: %s Unknown dashboard data set. Unknown file in WordPress core: %s Unknown file size. Unknown firewall mode. Unlimited Unlock email requested Unspecified Unsubscribe Requested Unsubscribe Successful Unsubscribe from Security Alerts Unsubscription Confirmation Sent Update Block Update Blocked Countries Update Blocked IPs Update Check Encountered Error Update Check Encountered Error on '%s' Update Check Error Update Login Security Options Update Now Update Payment Method Update Wordfence automatically when a new version is released? Update includes security-related fixes. Update interval in seconds Updates Needed Updates Needed (Plugin, Theme, or Core) Updating the .htaccess did not fix the issue. You may need to add <code>Options -Indexes</code> to your httpd.conf if using Apache, or find documentation on how to disable directory listing for your web server. Upgrade Upgrade Now to Access Premium Support Upgrade To Premium Upgrade to Care Upgrade to Premium Upgrade to Response Upgrade to a 24/7 1-hour response time with Wordfence Response Upgrade to hands-on support with Wordfence Care Uruguay Use New 2FA Use PHP's built in REMOTE_ADDR and don't use anything else. Very secure if this is compatible with your site. Use Recommended Value Use low resource scanning (reduces server load by lengthening the scan duration) Use one of these %1$d codes to log in if you lose access to your authenticator device. Codes are %2$d characters long plus optional spaces. Each one may be used only once. Use one of these %s codes to log in if you are unable to access your phone. Codes are 16 characters long, plus optional spaces. Each one may be used only once. Use one of these %s codes to log in if you lose access to your authenticator device. Codes are 16 characters long, plus optional spaces. Each one may be used only once. Use only IPv4 to start scans Use preferred start time Use single-column layout for WooCommerce/shortcode 2FA management interface Use the Cloudflare "CF-Connecting-IP" HTTP header to get a visitor IP. Only use if you're using Cloudflare. Use the X-Forwarded-For HTTP header. Only use if you have a front-end proxy or spoofing may result. Use the X-Real-IP HTTP header. Only use if you have a front-end proxy or spoofing may result. Use the most secure method to get visitor IP addresses. Prevents spoofing and works with most sites. Used Used an invalid username '%s' to try to sign in User User "%1$s" with "%2$s" access has an easy password. User "%s" with 'subscriber' access has a very easy password. User & Option Audit User Added to Multisite Blog User Agent User Capabilities Meta Value Changed User Created User Deleted User Email User ID User IP: %s User Invited to Multisite Blog User Level Meta Value Changed User Logged In User Logged Out User Marked as Spam User Registration Permission Option Changed User Removed from Multisite Blog User Signed Up on Multisite Blog User Summary User Unmarked as Spam User Updated User counts are currently disabled as the most recent attempt to count users failed to complete successfully. User counts are hidden by default on sites with large numbers of users in order to improve performance. User defined scan pattern User hostname: %s User location: User locked out from signing in User login User login blocked for insecure password User/Permissions Username Users Checked Users without 2FA active (%s) Using MySQLi directly. Using cached core hashes Using cached malware prefixes Using low resource scanning Uzbekistan Validation error: 'fields' parameter is empty or not an array. Value Vanuatu Venezuela Verified Google crawlers will not be rate-limited Verifying start request signature. Version %s Very strict. May cause false positives. Vietnam View View Additional Detail View Audit Log View Customization View Differences View Documentation View File View Option View Recent Traffic View Updates View every issue: View full log View log View users Virgin Islands, British Virgin Islands, U.S. Visit Wordfence Central Vulnerability Information Vulnerability Scan Vulnerability Severity Vulnerability Status WAF .htaccess contents WAF .user.ini contents WAF Currently in Learning Mode WAF File Permissions WAF Loaded Successfully WAF Status WAF auto prepend active WAF log path WAF subdirectory installation WARNING WHOIS LOOKUP WORDFENCE_WAF_PREPEND_DIRECTORY path constant WORDPRESS VERSION: %s WP cron status Waiting for Changes Waiting for it to take effect. This may take up to %s. Wallis and Futuna Warning We are about to change your <em>.htaccess</em> file. Please make a backup of this file before proceeding. We are excited to announce the release of a completely rebuilt two-factor authentication (2FA) feature within Wordfence. 2FA is an important layer of security that protects you from password guessing and credential stuffing attacks. Previously a Premium-only feature, it is now available for sites running the free version of Wordfence. You are now able to enable 2FA for any role, we’ve added a number of important security features, and we’ve significantly improved the admin interface. We can't modify your .htaccess file for you because: %s We cannot read $_SERVER[%s] We could not delete any of the files you selected. We encountered the following errors: %s We could not fetch a core WordPress file from the Wordfence API. We could not find that issue in our database. We could not find that issue in the database. We could not find that user in the database. We could not find your .htaccess file to modify it. We could not get the contents of the original file to do a comparison. We could not get the original file to do a repair. We could not open the requested file for reading. The error was: %s We could not repair any of the files you selected. We encountered the following errors: %s We could not retrieve the original file of %s to do a repair. We could not write to %1$s. (%2$d bytes written) You may not have permission to modify files on your WordPress server. We could not write to %1$s. The error was: %2$s We could not write to that file. You may not have permission to modify files on your WordPress server. We didn't delete anything and no errors were found. We didn't repair anything and no errors were found. We encountered a problem We encountered an error trying load more data. We failed to send a termination request. We found your .htaccess file but could not open it for writing: %s We have updated our policies. To continue using Wordfence, you will need to read and agree to the <a href="%1$s" target="_blank" rel="noopener noreferrer">Wordfence License Terms and Conditions<span class="screen-reader-text"> (opens in new tab)</span></a>, the <a href="%2$s" rel="noopener noreferrer" target="_blank">Services Subscription Agreement<span class="screen-reader-text"> (opens in new tab)</span></a>, and <a href="%3$s" target="_blank" rel="noopener noreferrer">Terms of Service<span class="screen-reader-text"> (opens in new tab)</span></a>, and read and acknowledge the <a href="%4$s" target="_blank" rel="noopener noreferrer">Wordfence Privacy Policy<span class="screen-reader-text"> (opens in new tab)</span></a>. We have updated our policies. To continue using Wordfence, you will need to read and agree to the Wordfence License Terms and Conditions, the Services Subscription Agreement, and Terms of Service, and read and acknowledge the Wordfence Privacy Policy by clicking Review. We received a data structure that is not the expected array when contacting the Wordfence scanning servers and calling the '%s' function. We received a request to email "%s" instructions to unlock their access. If that is the email address of a site administrator or someone on the Wordfence alert list, they have been emailed instructions on how to regain access to this system. The instructions we sent will expire 30 minutes from now. We received an empty data response from the Wordfence scanning servers when calling the '%s' function. We received an error while trying to activate the license with the Wordfence servers: We successfully exported your site options. To import your site options on another site, copy and paste the token below into the import text box on the destination site. Keep this token secret – it is like a password. If anyone else discovers the token it will allow them to import your options excluding your license. We successfully imported the site options. We were unable to create the <code>wordfence-waf.php</code> file in the root of the WordPress installation. It's possible WordPress cannot write to the <code>wordfence-waf.php</code> file because of file permissions. Please verify the permissions are correct and retry the installation. We were unable to generate the user list for your password check. We were unable to make changes to the %1$s file. It's possible WordPress cannot write to the %1$s file because of file permissions. Please verify the permissions are correct and retry the installation. We were unable to make changes to the .htaccess file. It's possible WordPress cannot write to the .htaccess file because of file permissions, which may have been set by another security plugin, or you may have set them manually. Please verify the permissions allow the web server to write to the file, and retry the installation. We were unable to remove the <code>wordfence-waf.php</code> file in the root of the WordPress installation. It's possible WordPress cannot remove the <code>wordfence-waf.php</code> file because of file permissions. Please verify the permissions are correct and retry the removal. We were unable to write to %s which the WAF uses for storage. Please update permissions on the parent directory so the web server can write to it. We've preselected your server configuration based on our tests, but if you know your web server's configuration, please select it now. We've preselected your server configuration based on our tests, but if you know your web server's configuration, please select it now. You can also choose "Manual Configuration" for alternate installation details. Web Application Firewall Web Application Firewall (WAF) Web Application Firewall Allowlisted URLs Web Application Firewall Protection Level Web Application Firewall Rules Web Application Firewall Status Web Application Firewall is disabled Web server exposes the document root Wednesday Week Weekdays Weekends Western Sahara What can we do to improve Wordfence Security? What to Block What to do when we block someone What to do when we block someone visiting from a blocked country When enabled, a Wordfence 2FA tab will be added to the WooCommerce account menu which will provide access for users to manage 2FA settings outside of the WordPress admin area. Testing the WooCommerce account interface after enabling this feature is recommended to ensure theme compatibility. When enabled, reCAPTCHA and 2FA prompt support will be added to WooCommerce login and registration forms in addition to the default WordPress forms. Testing WooCommerce forms after enabling this feature is recommended to ensure plugin compatibility. When enabled, the "wordfence_2fa_management" shortcode may be used to provide access for users to manage 2FA settings on custom pages. When enabled, the 2FA management interface embedded through the WooCommerce integration or via a shortcode will use a vertical stacked layout as opposed to horizontal columns. Adjust this setting as appropriate to match your theme. This may be overridden using the "stacked" attribute for individual shortcodes. When enabled, the last login timestamp will be displayed for each user on the WP Users page. When used in conjunction with reCAPTCHA, the most recent score will also be displayed for each user. When you first install the Wordfence Web Application Firewall, it will be in learning mode. This allows Wordfence to learn about your site so that we can understand how to protect it and how to allow normal visitors through the firewall. We recommend you let Wordfence learn for a week before you enable the firewall. Where to email alerts While in test mode, reCAPTCHA will score login and registration requests but not actually block them. The scores will be recorded and can be used to select a human/bot threshold value. Whois Lookup Windows (IIS) WooCommerce & Custom Integrations WooCommerce 2FA Integration Toggled WooCommerce appears to be installed, but the Wordfence Login Security WooCommerce integration is not currently enabled. Without this feature, WooCommerce forms will not support all functionality provided by Wordfence Login Security, including CAPTCHA for the login page and user registration. WooCommerce integration WordPress "drop-in" plugins that are active. WordPress "mu-plugins" that are always active, including those provided by hosts. WordPress (v%s) WordPress Configuration File WordPress Core File WordPress Plugins WordPress Settings WordPress Time Zone WordPress admin cookie path WordPress base path WordPress cookie domain WordPress cookie path WordPress core file modified: %s WordPress debug mode WordPress error display override WordPress error logging override WordPress memory limit WordPress plugins cookie path WordPress query debug mode WordPress script debug mode WordPress site cookie path WordPress version %s is now available for your site's current branch. Please upgrade immediately to get the latest fixes and compatibility updates from WordPress. WordPress version %s is now available for your site's current branch. Please upgrade immediately to get the latest security updates from WordPress. WordPress version %s is now available. Please upgrade immediately to get the latest fixes and compatibility updates from WordPress. WordPress version %s is now available. Please upgrade immediately to get the latest security updates from WordPress. WordPress version and internal settings/constants. WordPress version too old Wordfence Wordfence - Securing your WordPress Website Wordfence 2FA Wordfence 2FA Active Wordfence 2FA Code Wordfence 2FA is active. Wordfence 2FA is inactive. Wordfence 2FA: Required change for legacy 2FA on %s Wordfence Activity Log Wordfence Alert Wordfence Assistant Wordfence Assistant Present Wordfence Assistant is currently installed and is not needed unless instructed by Wordfence support Wordfence Care Wordfence Central Wordfence Central Installation Process Wordfence Central Status Wordfence Central allows you to manage Wordfence on multiple sites from one location. It makes security monitoring and configuring Wordfence easier. Wordfence Central is not connected, which is required for recording of audit log events. Wordfence Central secret key has not been created yet. Wordfence Central site ID has not been created yet. Wordfence Dashboard Wordfence Deactivated Wordfence Firewall & Care License Enabled Wordfence Firewall & Premium Enabled Wordfence Firewall & Response License Enabled Wordfence Firewall Activated Wordfence Firewall Deactivated Wordfence Firewall blocked a background request to WordPress for the URL %s. If this occurred as a result of an intentional action, you may consider allowlisting the request to allow it in the future. Wordfence Free Wordfence Full Activity Log Wordfence Global Options Wordfence License Wordfence License Installation Failed Wordfence License Installation Successful Wordfence Live Activity: Wordfence Live Traffic shows you what is happening on your site in real-time, including user logins, hack attempts, and requests that were blocked by the Wordfence Firewall. You can choose to log security-related traffic only or all traffic. Traffic is logged directly on the server, which means it includes visits that don't execute JavaScript. Google and other JavaScript-based analytics packages typically only show visits from browsers that are operated by a human, while Live Traffic can show visits from crawlers like Google and Bing. Wordfence Login Security Wordfence Login Security Installed Wordfence Network Wordfence Network Time Wordfence Network Time Offset Wordfence Premium Wordfence Protection Activated Wordfence Response Wordfence Scan & Care License Enabled Wordfence Scan & Premium Enabled Wordfence Scan & Response License Enabled Wordfence Scan Deactivated Wordfence Scan Enabled Wordfence Security Wordfence Security - Anti-virus, Firewall and Malware Scan Wordfence Settings Wordfence System Info Wordfence Table Check Wordfence Test Email Wordfence Upgrade not run. Please modify your .htaccess Wordfence Upgraded to version %s Wordfence Version Wordfence WAF Allow Entry Created Wordfence WAF Allow Entry Deleted Wordfence WAF Allow Entry Toggled Wordfence WAF Blocklist Toggled Wordfence WAF Deactivated Wordfence WAF Mode Changed Wordfence WAF Protection Level Changed Wordfence WAF Rule Status Changed Wordfence activity for %1$s on %2$s Wordfence activity from <br><strong>%1$s</strong> to <strong>%2$s</strong> Wordfence activity in the past %s Wordfence automatically allowlists <a href="%s" target="_blank" rel="noopener noreferrer">private networks<span class="screen-reader-text"> (opens in new tab)</span></a> because these are not routable on the public Internet. Wordfence cannot detect if the installed plugins and themes are up to date. This might be caused by a PHP compatibility issue in one or more plugins/themes. Wordfence cannot detect if this plugin/theme is up to date. This might be caused by a PHP compatibility issue in the plugin. Wordfence could not find a saved cron key to start the scan so assuming it started and exiting. Wordfence could not find your .htaccess file. Wordfence could not get the attack signature patterns from the scanning server. Wordfence could not read the content of your WordPress directory. This usually indicates your permissions are so strict that your web server can't read your WordPress directory. Wordfence could not start a scan because the cron key does not match the saved key. Saved: %1$s Sent: %2$s Current unexploded: %3$s Wordfence country blocking is currently set to block the United States. We recommend allowing access from the United States for Google and other benign crawlers, unless you choose to only block the login page. Wordfence country blocking is designed to stop an attack, prevent content theft, or end malicious activity that originates from a geographic region in less than 1/300,000th of a second. Blocking countries who are regularly creating failed logins, a large number of page not found errors, and are clearly engaged in malicious activity is an effective way to protect your site during an attack. Wordfence encountered an internal error executing that request. Wordfence error: No encryption key found! Wordfence file scanner detected a possible infinite loop. Exiting on file: %s Wordfence found the following new issues on "%1$s" (%2$d existing issue was also found again). Wordfence found the following new issues on "%1$s" (%2$d existing issues were also found again). Wordfence found the following new issues on "%1$s". Wordfence generated an error on activation. The output we received during activation was: Wordfence has blocked IP address %s. Wordfence installation is incomplete Wordfence is a security plugin installed on over 5 million WordPress sites. The owner of this site is using Wordfence to manage access to their site. Wordfence is already installed on this site. If you need to replace the current license, you may do so by visiting the "All Options" page of the Wordfence menu. Wordfence is blocking these attacks, and we're sending this notice to make you aware that there is a higher volume of the attacks than usual. Additionally, the Wordfence Real-Time IP Blocklist can block known attackers' IP addresses automatically for Premium users, including any probing requests that may not be malicious on their own. All Wordfence users can also opt to block the attacking IPs manually if desired. As always, be sure to watch your scan results and keep your plugins, themes and WordPress core version updated. Wordfence is configured to send no more than %d alert(s) each hour. That limit has been reached and no further emails will be sent this hour. Wordfence is working... Wordfence lets you take control of protecting your site with powerful blocking features. Block traffic based on IP, IP range, hostname, browser, or referrer. Country blocking is available for Premium customers. Wordfence protects your site from password-guessing attacks by locking out attackers and helping you avoid weak passwords. Wordfence received malformed attack signature patterns from the scanning server. Wordfence scan failed because of license site URL conflict Wordfence scan script accessed directly, or WF did not receive a cronkey. Wordfence scan starting at %s from Wordfence Central Wordfence two-factor authentication is currently active on the account <strong>%s</strong>. You may deactivate it by clicking the button below. Wordfence two-factor authentication is currently active on your account. You may deactivate it by clicking the button below. Wordfence used %1$s of memory for scan. Server peak memory usage was: %2$s Wordfence was unable to validate a test request to your website. This can happen if your website is behind a proxy that does not use one of the standard ways to convey the IP of the request or it is unreachable publicly. IP blocking and live traffic information may not be accurate. <a href="%s" target="_blank" rel="noopener noreferrer">Get More Information<span class="screen-reader-text"> (opens in new tab)</span></a> Wordfence will make one attempt to resume each failed scan stage. This scan may recover if this attempt is successful. Wordfence will make up to %d attempts to resume each failed scan stage. This scan may recover if one of these attempts is successful. Wordfence's Web Application Firewall has been unexpectedly disabled. If you see a notice at the top of the Wordfence admin pages that says "The Wordfence Web Application Firewall cannot run," click the link in that message to rebuild the configuration. If this does not work, you may need to fix file permissions. <a href="%s" target="_blank" rel="noopener noreferrer">More Details<span class="screen-reader-text"> (opens in new tab)</span></a> Wordfence's license key is missing. Wordfence's terms of service and privacy policy have changed Wordfence: All recent hits for IP address %s Wordfence: File Viewer Wordfence: Viewing File Differences Would you like WordPress security and vulnerability alerts sent to you via email? XML-RPC Interface Toggled XML-RPC Requires 2FA Toggled XML-RPC authentication is disabled. Jetpack is currently active and requires XML-RPC authentication to work correctly. <a href="%s">Manage Settings</a> Yemen Yes Yes Please Yes, enable auto-update. You are about to deactivate Wordfence. Would you like to delete its data or keep it in place? You are currently running the WAF from another WordPress installation. These rules can be disabled or enabled once you configure the firewall to run correctly on this site. You are currently running the WAF from another WordPress installation. This option can be changed once you configure the firewall to run correctly on this site. You are currently running the Wordfence Web Application Firewall from another WordPress installation. You are currently running the Wordfence Web Application Firewall from another WordPress installation. Please <a href="%s">click here</a> to configure the Firewall to run correctly on this site. You are currently running the Wordfence Web Application Firewall from another WordPress installation. Please configure the firewall to run correctly on this site. You are running PHP version %1$s that is not supported by Wordfence %2$s. Wordfence features will not be available until PHP has been upgraded. We recommend using PHP version 8.1, but Wordfence will run on PHP version %3$s at a minimum. You are running WordPress version %1$s that is not supported by Wordfence %2$s. Wordfence features will not be available until WordPress has been upgraded. We recommend using the current version of WordPress, but Wordfence will run on WordPress version %3$s at a minimum. You are running WordPress version %1$s, which is not supported by the Wordfence Audit Log. In order to use it, please upgrade to at least WordPress version %2$s. You are running the LiteSpeed web server and Wordfence can't determine whether "noabort" is set. Please verify that the environmental variable "noabort" is set for the local site, or the server's global External Application Abort is set to "No Abort". You are temporarily locked out You are using Nginx as your web server. You'll need to disable autoindexing in your nginx.conf. See the <a target='_blank' rel='noopener noreferrer' href='https://nginx.org/en/docs/http/ngx_http_autoindex_module.html'>Nginx docs for more info</a> on how to do this. You are using an Nginx web server and using a FastCGI processor like PHP5-FPM. You will need to manually delete or hide those files. You are using an Nginx web server and using a FastCGI processor like PHP5-FPM. You will need to manually modify your php.ini to disable <em>display_error</em> You can <a class="wf-onboarding-link" href="%s" target="_blank">get a new free license<span class="screen-reader-text">(opens in new tab)</span></a> for this site directly, or click the "Get a free license" button at the top of the Licenses page when logged in to wordfence.com if you need more than one. You can also read the documentation to learn about Wordfence's blocking tools, or visit wordfence.com to learn more about Wordfence. You can find more details on alternative setup steps, including installation on SiteGround or for multiple sites sharing a single php.ini, <a href="%s" target="_blank" rel="noopener noreferrer">in our documentation<span class="screen-reader-text"> (opens in new tab)</span></a>. You can log in to <a href="%s" target="_blank" rel="noopener noreferrer">wordfence.com<span class="screen-reader-text"> (opens in new tab)</span></a> to accept the updated terms and privacy policy for all of your license keys at once. You can proceed with the installation and we will include this from within our <code>wordfence-waf.php</code> file which should maintain compatibility with your site, or you can opt to override the existing PHP setting. You can't block your own IP address. You do not currently have two-factor authentication active on your account, which will be required beginning %1$s. <a href="%2$s">Configure 2FA</a> You do not have permission to activate 2FA. You do not have permission to activate the given user. You do not have permission to change options. You do not have permission to deactivate 2FA. You do not have permission to deactivate the given user. You do not have permission to disable NTP. You do not have permission to dismiss this notice. You do not have permission to generate new recovery codes for the given user. You do not have permission to generate new recovery codes. You do not have permission to manage 2FA settings for your account. You do not have permission to perform this action. You do not have permission to reset reCAPTCHA statistics. You do not have permission to reset the 2FA grace period. You do not have permission to reset the NTP failure count. You do not have permission to revoke the 2FA grace period. You do not have permission to send notifications. You don't have permission to repair %s. You need to either fix the file manually using FTP or change the file permissions and ownership so that your web server has write access to repair the file. You don't have permission to repair .htaccess. You need to either fix the file manually using FTP or change the file permissions and ownership so that your web server has write access to repair the file. You forgot to include a reason you're blocking this IP range. We ask you to include this for your own record keeping. You have %d new Wordfence notification. You have %d new Wordfence notifications. You have %s disk space remaining You have been temporarily locked out of this system. This means that you will not be able to log in for a while. You have just installed the Wordfence Login Security plugin. It contains a subset of the functionality found in the full Wordfence plugin: Two-factor Authentication, XML-RPC Protection and Login Page CAPTCHA. You have successfully installed Wordfence %s You have successfully installed a free license. You have unsaved changes to your options. If you leave this page, those changes will be lost. You have used this form too much. Please wait 3 minutes and try again. You may close this alert and try again later, or click the button below to register for a new free Wordfence license. You may wait for the next automatic attempt at %1$s or try to <a href="%2$s">Manually Update</a> by clicking the "Manually Refresh Rules" button below the Rules list. You may wait for the next automatic attempt at %s or log into the parent site to manually update by clicking the "Manually Refresh Rules" button below the Rules list. You may wait for the next automatic attempt or log into the parent site to manually update by clicking the "Manually Refresh Rules" button below the Rules list. You may wait for the next automatic attempt or try to <a href="%s">Manually Update</a> by clicking the "Manually Refresh Rules" button below the Rules list. You must install a license to continue using Wordfence. You must select either "Yes" or "No" You need to upgrade "%s" to the newest version to ensure you have any security fixes the developer has released. You only have %s of your disk space remaining. Please free up disk space or your website may stop serving requests. You will be reminded again in 12 hours. You will not be able to preview events and events will not record to Wordfence Central. You'll find this icon throughout the plugin. Clicking it will show you the options and features for each section of Wordfence. From the dashboard, you can find the Global Options for Wordfence such as alerts, automatic updates, and managing your site's Premium License. You've optimized configurations for this feature! If you want to learn more about how this score is determined, click the link below. Your 'How does Wordfence get IPs' setting is misconfigured. Your .htaccess has been updated successfully. Please verify your site is functioning normally. Your IP with this setting Your Premium Wordfence License expires in 1 day. Your Premium Wordfence License expires in 2 days. Your Premium Wordfence License expires in less than 2 weeks. Your Premium Wordfence License expires in less than a week. Your Premium Wordfence License is set to auto-renew in 10 days. Your WordPress version is out of date Your Wordfence License Your Wordfence Premium License has Expired! Your Wordfence activity log was sent to %s Your Wordfence installation has been upgraded to version %s Your access to this service has been limited. (HTTP response code 503) Your access to this service has been temporarily limited. Please try again in a few minutes. (HTTP response code 503) Your access to this site has been limited Your access to this site has been limited by the site owner Your access to this site has been temporarily limited by the site owner Your browser sent an invalid security token to Wordfence. Please try reloading this page or signing out and in again. Your browser sent an invalid security token. Please try reloading this page. Your computer's time: Your computer's time: Your options have been saved, but you left your license key blank, so we tried to get you a free license key from the Wordfence servers. There was a problem fetching the free key: Your options have been saved. However we noticed you changed your license key, and we tried to verify it with the Wordfence servers but received an error: Your options have been saved. However we tried to verify your license key with the Wordfence servers and received an error: Your request was received Your rules have been updated successfully. Your rules have been updated successfully. You are currently using the free version of Wordfence. Upgrade to Wordfence premium to have your rules updated automatically as new threats emerge. <a href="https://www.wordfence.com/wafUpdateRules1/wordfence-signup/">Click here to purchase a premium license</a>. <em>Note: Your rules will still update every 30 days as a free user.</em> Your site is currently linked to Wordfence Central under a different site URL. Your site is currently using the "Wordfence Login Security” plugin. Your site is listed on a domain blocklist. Your site is listed on the Wordfence domain blocklist. Your site is still using this plugin, but it is not currently available on wordpress.org. Plugins can be removed from wordpress.org for various reasons. This can include benign issues like a plugin author discontinuing development or moving the plugin distribution to their own site, but some might also be due to security issues. In any case, future updates may or may not be available, so it is worth investigating the cause and deciding whether to temporarily or permanently replace or remove the plugin. Your site is using a PHP version (%1$s) that is no longer supported by Wordfence and needs to be updated. We recommend using the newest version of PHP available but will currently support PHP versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. Your site is using a PHP version (%1$s) that will no longer be supported by Wordfence in an upcoming release and needs to be updated. We recommend using the newest version of PHP available but will currently support PHP versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. Your site is using a WordPress version (%1$s) that is no longer supported by Wordfence and needs to be updated. We recommend using the newest version of WordPress but will currently support WordPress versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. Your site is using a WordPress version (%1$s) that will no longer be supported by Wordfence in an upcoming release and needs to be updated. We recommend using the newest version of WordPress but will currently support WordPress versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. Your test email was sent to the requested email address. The result we received from the WordPress wp_mail() function was: Zambia Zimbabwe [invalid] [none] `runInstall` called with previous version = %s a Wordfence Central user a moment allowlisted and and %d additional attacks and %d more and attempted a <span class="wf-error-text">failed login</span> as %s. and attempted a <span class="wf-error-text">failed login</span> using an invalid username <strong>%s</strong>. and changed their password. and logged in successfully as "<strong>%s</strong>". and logged out successfully. and requested a password reset. and set a cookie that will bypass all country blocking. and tried to access a <span class="wf-error-text">non-existent page</span> and visited and was and was redirected when visiting arrived from at block it blocked access via country blocking blocked access via country blocking and redirected to URL (%s) blocked by firewall blocked by firewall for %s blocked by real-time IP blocklist blocked by the Wordfence Security Network blocked for %s cURL Features Code cURL Host cURL SSL Version cURL Support Protocols cURL libz Version contains day days days e.g., *.amazonaws.com or *.linode.com e.g., *badRobot*, *MSIE*, or *browserSuffix e.g., *badwebsite.example.com* e.g., /my-account/ e.g., 192.168.200.200 - 192.168.200.220 or 192.168.200.0/24 each Wordfence installation should have a unique key false getHits got invalid hitType: %s getMaxExecutionTime() returning config value: %s getMaxExecutionTime() returning default of: 15 getMaxExecutionTime() returning half ini value: %d host setting hour hours hours https://www.wordfence.com/ ini value of %1$d is higher than value for WORDFENCE_SCAN_MAX_INI_EXECUTION_TIME (%2$d), reducing just now left less than 1 second less than a minute locked out from logging in lowercase match minute minutes minutes month months months opens in new tab or reCAPTCHA reCAPTCHA Score History reCAPTCHA Threshold Changed reCAPTCHA human/bot threshold score reCAPTCHA test mode is enabled. While enabled, login and registration requests will be checked for their score but will not be blocked if the score is below the minimum score. <a href="%s">Manage Settings</a> reCAPTCHA v3 Secret reCAPTCHA v3 Site Key reCAPTCHA v3 does not make users solve puzzles or click a checkbox like previous versions. The only visible part is the reCAPTCHA logo. If a visitor's browser fails the CAPTCHA, Wordfence will send an email to the user's address with a link they can click to verify that they are a user of your site. You can read further details <a href="%s" target="_blank" rel="noopener noreferrer">in our documentation</a>. redirected to bypass URL regular case second seconds seconds then then redirect that user to then set a cookie that will bypass country blocking in the future in case that user hits the site from a blocked country. throttle it to manually update it. true visit the options page wfConfig::set() got an array as second param with key: %1$s and value: %2$s wordfence-waf.php path wp_mail from address is incomplete, attempting to fix wp_remote_post() test back to this server failed! Response was: wp_remote_post() test to noc1.wordfence.com failed! Response was: year years PO-Revision-Date: 2026-06-21 00:02:35+0000 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Plural-Forms: nplurals=2; plural=n != 1; X-Generator: GlotPress/4.0.3 Language: en_GB Project-Id-Version: Plugins - Wordfence Security – Firewall, Malware Scan, and Login Security - Stable (latest release) (%1$d of %2$d attempts remaining) "%s" is not a valid regular expression. "languages" folder is in default location "plugins" folder is in default location "wp-content" folder is in default location # Scan Issues ## Ignored Issues (%d total) ## New Issues (%d total) %1$s Table in Database %1$s Tables in Database %1$s contains a suspected malware URL: %2$s %1$s in POST body: %2$s %1$s in cookie: %2$s %1$s in file: %2$s %1$s in query string: %2$s %d Countries %d Countries Selected %d Country Selected %d Job Overdue %d Jobs Overdue %d address in this network %d addresses in this network %d day %d days %d existing issue was found again and is not shown. %d existing issues were found again and are not shown. %d files indexed %d hit %d hits %d hour %d hours %d ignored issue was also detected. %d ignored issues were also detected. %d issue found in most recent scan %d issues found in most recent scan %d issue was omitted from this email due to length limits. %d issues were omitted from this email due to length limits. %d minute %d minutes %d month %d months %d more similar files were found. %d path was skipped for the malware scan due to scan settings %d paths were skipped for the malware scan due to scan settings %d per minute %d plugin %d plugins %d second %d seconds %d theme %d themes %d unused recovery code remains. You may generate a new set by clicking below. %d unused recovery codes remain. You may generate a new set by clicking below. %s - using constant %s - using template %s AM %s Enabled %s License Active %s License Expired %s License Expiring %s PM %s ago %s contains a suspected malware URL. %s is not valid hostname © %1$d to %2$d Wordfence — Visit <a href="https://www.wordfence.com/">Wordfence.com</a> for help, security updates and more. 'How does Wordfence get IPs' is misconfigured (+ %d more) (.htaccess not present) (.htaccess not readable) (.user.ini not present) (.user.ini not readable) (Unknown) (WORDFENCE_LS_DISABLE_NTP) (default) (definitely a human) (empty) (failures exceeded limit) (not present) (not set) (probably a bot) (probably a human) (recommended based on our tests) (recommended) (settings) (unknown) (you) * User counts currently only reflect the main site on multisite installations. +%d more , and %d more. .htaccess Updated .htaccess change .htaccess other auto prepend .user.ini other auto prepend /bypassurl/ /page-name/ /set-country-bypass/ 0 (Disabled) 0 for default. Must be %d or greater and 10-20 or higher is recommended for most servers 0 means unlimited alerts will be sent. 0 or empty means the default of %s will be used 0 or empty means unlimited issues will be sent 0660 - using default 1 Country 1 more similar file was found. 1. Scan Code or Enter Key 2. Enter Code from Authenticator App 24 Hours 2FA 2FA Activated on User 2FA Active 2FA Deactivated on User 2FA Grace Period 2FA Grace Period Changed 2FA Inactive 2FA Mode: Legacy 2FA Mode: Normal 2FA Notifications 2FA Relative URL (optional) 2FA Role 2FA Role Requirements Changed 2FA Roles 2FA Status 2FA is not required for the %s role 2FA management shortcode 2FA will soon be required on %s 30 Days 404 Not Found 7 Days <a href="%1$s" target="_blank" rel="noopener noreferrer">%1$s</a> is publicly accessible and may expose source code or sensitive information about your site. Files such as this one are commonly checked for by scanners and should be made inaccessible. Alternately, some can be removed if you are certain your site does not need them. Sites using the nginx web server may need manual configuration changes to protect such files. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn more<span class="screen-reader-text"> (opens in new tab)</span></a> <a href="%1$s" target="_blank" rel="noopener noreferrer">%1$s<span class="screen-reader-text"> (opens in new tab)</span></a> is publicly accessible and may expose source code or sensitive information about your site. Files such as this one are commonly checked for by scanners and should be removed or made inaccessible. <a href="%s" target="_blank" rel="noopener noreferrer" class="wf-help-link">Learn more<span class="wf-hidden-xs"> about Whois Lookup</span><span class="screen-reader-text"> (opens in new tab)</span></a> <a href="%s" target="_blank" rel="noopener noreferrer" class="wf-help-link">Learn more<span class="wf-hidden-xs"> about importing and exporting options</span><span class="screen-reader-text"> (opens in new tab)</span></a> <a href="%s" target="_blank" rel="noopener noreferrer" class="wf-help-link">Learn more<span class="wf-hidden-xs"> about the Audit Log</span><span class="screen-reader-text"> (opens in new tab)</span></a> <a href="%s" target="_blank" rel="noopener noreferrer">Get more information.<span class="screen-reader-text"> (opens in new tab)</span></a> <a href="%s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a> <a href="%s" target="_blank">Click here<span class="screen-reader-text"> (opens in new tab)</span></a> to stop receiving security alerts. <a href="%s">Click here</a> to rebuild the configuration file. <html><body><p>You do not currently have two-factor authentication active on your account, which will be required beginning %1$s.</p><p><a href="%2$s">Configure 2FA</a></p></body></html> <span class="wf-hidden-xs">Block </span>Type <strong>AUTHENTICATION FAILURE</strong>: A temporary failure was encountered while trying to log in. Please try again. <strong>CAPTCHA EXPIRED</strong>: The CAPTCHA verification for this login attempt has expired. Please try again. <strong>CHECK YOUR PHONE</strong>: A code has been sent to your phone and will arrive within 30 seconds. Enter it below to sign in. <strong>CHECK YOUR PHONE</strong>: A code has been sent to your phone and will arrive within 30 seconds. Please sign in again and add a space and the code to the end of your password (e.g., <code>wfABCD</code>). <strong>CHECK YOUR PHONE</strong>: A code has been sent to your phone and will arrive within 30 seconds. Please sign in again and add a space, the letters <code>wf</code>, and the code to the end of your password (e.g., <code>wf123456</code>). <strong>CODE EXPIRED. CHECK YOUR PHONE:</strong> The code you entered has expired. Codes are only valid for 30 minutes for security reasons. We have sent you a new code. Please sign in using your username, password, and the new code we sent you. <strong>CODE INVALID</strong>: The 2FA code provided is either expired or invalid. Please try again. <strong>CODE REQUIRED</strong>: Please check your authenticator app for the current code. Enter it below to sign in. <strong>CODE REQUIRED</strong>: Please check your authenticator app for the current code. Please sign in again and add a space, the letters <code>wf</code>, and the code to the end of your password (e.g., <code>wf123456</code>). <strong>CODE REQUIRED</strong>: Please enter your 2FA code immediately after your password in the same field. <strong>CODE REQUIRED</strong>: Please provide your 2FA code when prompted. <strong>Cellphone Sign-in Required</strong>: Cellphone Sign-in is required for all administrator accounts. Please contact the site administrator to enable it for your account. <strong>ERROR</strong>: A username and password must be provided. <a href="%s" title="Password Lost and Found">Lost your password</a>? <strong>ERROR</strong>: An error occurred while sending the message. Please try again. <strong>ERROR</strong>: An error was encountered while trying to authenticate. Please try again. <strong>ERROR</strong>: An error was encountered while trying to send the message. Please try again. <strong>ERROR</strong>: Incorrect username or password. <strong>ERROR</strong>: Login failed with status code 403. Please contact the site administrator. <strong>ERROR</strong>: Login failed with status code 503. Please contact the site administrator. <strong>ERROR</strong>: The password provided is too weak. Please choose a stronger password and try again. A strong password will follow these guidelines: <ul class="wf-password-requirements"> <li>At least 12 characters</li> <li>Uppercase and lowercase letters</li> <li>At least one symbol</li> <li>At least one number</li> <li>Avoid common words or sequences of letters/numbers</li> </ul> <strong>ERROR</strong>: The username or password you entered is incorrect. <a href="%2$s" title="Password Lost and Found">Lost your password</a>? <strong>ERROR</strong>: The username or password you entered is incorrect. <a href="%s" title="Password Lost and Found">Lost your password</a>? <strong>ERROR</strong>: Unable to send message. Please refresh the page and try again. <strong>ERROR</strong>: Unable to send message. You have exceeded the maximum number of messages that may be sent at this time. Please try again later. <strong>ERROR</strong>: You can't register using that username <strong>INSECURE PASSWORD:</strong> Your login attempt has been blocked because the password you are using exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. Please <a href="%1$s">reset your password</a> to reactivate your account. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn More<span style="font-size:0;"> (opens in new tab)</span></a> <strong>INVALID CODE</strong>: Please sign in again and add a space, the letters <code>wf</code>, and the code from your authenticator app to the end of your password (e.g., <code>wf123456</code>). <strong>INVALID CODE</strong>: Please sign in again and add a space, the letters <code>wf</code>, and the code sent to your phone to the end of your password (e.g., <code>wf123456</code>). <strong>INVALID CODE</strong>: You need to enter the code generated by your authenticator app. The code should be a six digit number (e.g., 123456). <strong>INVALID CODE</strong>: You need to enter the code generated sent to your phone. The code should be a six digit number (e.g., 123456). <strong>INVALID CODE</strong>: You need to enter your password and the code we sent to your phone. The code should start with 'wf' and should be four characters (e.g., wfAB12). <strong>LOGIN BLOCKED</strong>: 2FA is required to be active on your account. Please contact the site administrator. <strong>MESSAGE SENT</strong>: Your message was sent to the site owner. <strong>NOTICE: </strong>This site is using Wordfence's legacy 2FA feature, which was replaced with an improved version in 2019. The legacy 2FA feature will be discontinued around July 1, 2026. <strong>REGISTRATION ATTEMPT BLOCKED</strong>: The security token for the login attempt was invalid or expired. Please reload the page and try again. <strong>REGISTRATION ATTEMPT BLOCKED</strong>: This site requires a security token created when the page loads for all registration attempts. Please ensure JavaScript is enabled and try again. <strong>REGISTRATION BLOCKED</strong>: The registration request was blocked because it was flagged as spam. Please try again or <a href="#" class="wfls-registration-captcha-contact" data-token="%s">contact the site owner</a> for help. <strong>REGISTRATION BLOCKED</strong>: The registration request was blocked because it was flagged as spam. Please try again or contact the site owner for help. <strong>This update includes security-related fixes.</strong> <strong>VERIFICATION FAILED</strong>: Two-factor authentication verification failed. Please try again. <strong>VERIFICATION REQUIRED</strong>: Additional verification is required for login. If there is a valid account for the provided login credentials, please check the email address associated with it for a verification link to continue logging in. <strong>WARNING: </strong> Your site is using a PHP version (%1$s) that is no longer supported by Wordfence and needs to be updated. We recommend using the newest version of PHP available but will currently support PHP versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. <strong>WARNING: </strong> Your site is using a PHP version (%1$s) that will no longer be supported by Wordfence in an upcoming release and needs to be updated. We recommend using the newest version of PHP available but will currently support PHP versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. <strong>WARNING: </strong> Your site is using a WordPress version (%1$s) that is no longer supported by Wordfence and needs to be updated. We recommend using the newest version of WordPress but will currently support WordPress versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. <strong>WARNING: </strong> Your site is using a WordPress version (%1$s) that will no longer be supported by Wordfence in an upcoming release and needs to be updated. We recommend using the newest version of WordPress but will currently support WordPress versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. <strong>WARNING: </strong>The password you are using exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. Please <a href="%1$s">change your password</a>. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a> <strong>WARNING: </strong>Your login has been allowed because you have previously logged in from the same IP, but you will be blocked if your IP changes. The password you are using exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. Please <a href="%1$s">change your password</a>. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a> A 'True' result means WordPress thinks the mail was sent without errors. A 'False' result means that WordPress encountered an error sending your mail. Note that it's possible to get a 'True' response with an error elsewhere in your mail system that may cause emails to not be delivered. A Wordfence scan examines all files, posts, pages, and comments on your WordPress website looking for malware, known malicious URLs, and known patterns of infections. It also does several other reputation and server checks. A Wordfence scan looks for malware, malicious URLs, and patterns of infections by examining all of the files, posts, and comments on your WordPress website. It also checks your server and monitors your site's online reputation. A block reason must be provided. A free license key could not be fetched from Wordfence: %s A new version of WordPress (v%s) is available. A new version of the plugin "%s" is available. A new version of the theme "%s" is available. A non-admin user with username "%s" signed in to your WordPress site from a new device. A non-admin user with username "%s" signed in to your WordPress site. A reCAPTCHA score equal to or higher than this value will be considered human. Anything lower will be treated as a bot and require additional verification for login and registration. A reminder to activate two-factor authentication failed sending to %d user. A reminder to activate two-factor authentication failed sending to %d users. A reminder to activate two-factor authentication was sent to %d user. A reminder to activate two-factor authentication was sent to %d users. A request was received to stop the previous scan. A scan is already running. Use the stop scan button if you would like to terminate the current scan. A scan stage has failed to start. This is often because the site either cannot make outbound requests or is blocked from connecting to itself. A server error occurred while saving the configuration: %s A termination request has been sent to stop any running scans. A test request to this website was detected on a different value for this setting. IP blocking and live traffic information may not be accurate. <a href="%s" target="_blank" rel="noopener noreferrer">Get More Information<span class="screen-reader-text"> (opens in new tab)</span></a> A user with 'subscriber' access has a password that is very easy to guess. Please either change it or ask the user to change their password. A user with IP address %1$s has been locked out from signing in or using the password recovery form for the following reason: %2$s. A user with the a role of '%s' has a password that is easy to guess. Please change this password yourself or ask the user to change it. A user with username "%1$s" tried to sign in to your WordPress site. Access was denied because the password being used exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. Please change or reset the password (%2$s) to reactivate this account. Learn More: %3$s A user with username "%s" deactivated Wordfence on your WordPress site. A user with username "%s" deactivated the Wordfence Web Application Firewall on your WordPress site. A user with username "%s" who has administrator access signed in to your WordPress site from a new device. A user with username "%s" who has administrator access signed in to your WordPress site. A user with username "%s" who has administrator access tried to sign in to your WordPress site. Access was denied because all administrator accounts are required to have Cellphone Sign-in enabled but this account does not. A valid server configuration was not provided. A visitor blocked from registration sent the following message. ---------------------------------------- IP: %1$s Username: %2$s Email: %3$s reCAPTCHA Score: %4$f ---------------------------------------- %5$s A wildcard cannot be used to exclude all files from the scan. ADMIN EMAIL: %s AM Ability to connect to the Wordfence servers and your own site. Ability to read/write various files. Ability to save Wordfence settings to the database. Aborting scan because WordPress updated from version %1$s to %2$s. The scan will be reattempted later. About Wordfence Access from your area has been temporarily limited for security reasons Access to Premium Support Access token not found. Accessed a banned URL Acknowledge User Activate Activate 2FA Activate Grace Period Activate Premium Activated - connected by %1$s on %2$s Active Active Plugins Option Changed Active WAF storage engine Activity Detail Activity Log Sent Activity Report Add Add Allowlisted URL/Param Add Filter Add Param to Firewall Allowlist Add action to allowlist Add code to .htaccess Adding issue %s Adding issue: %1$s Adding issue: %s Additional Detail Additional Options Additional scan signatures Additional scan signatures (one per line) Admin Email Option Changed Admin Login Admin Login Blocked Admin Page View Denied Admin Panel Administrative memory limit Advanced Block Advanced Country Blocking Options Advanced Firewall Options Advanced Scan Options Advanced blocking in effect. Advanced caching plugin Afghanistan Agreement to New Terms and Privacy Policies Ajax request received to start scan. Aland Islands Albania Alert generated at %s Alert me when a non-admin user signs in Alert me when someone with administrator access signs in Alert me when there's a large increase in attacks detected on my site Alert me with scan results of this severity level or greater Alert me with scan results of this severity level or greater: Alert when an IP address is blocked Alert when someone is blocked from logging in for using a password found in a breach Alert when someone is locked out from login Alert when the "lost password" form is used for a valid user Algeria All All Countries All Documentation All Events All Firewall Options All Hits All Options All PHP requests will be processed by the firewall prior to running. All Tables Exist All associated Wordfence Central connection data has been cleared. All associated Wordfence Central connection data has been removed from the local database. All capabilities of admin user %s were successfully revoked. All of your blocking rules are in one central location. Choose the Block Type, then enter the details for the rule. Once it has been added, you'll see it saved as a rule for your site. All of your scan options, including scheduling, are now located here. All users with the selected role already have two-factor authentication activated or have been locked out. Allow a grace period for this user prior to requiring Wordfence 2FA Allow remembering device for 30 days Allowed 404s Updated Allowlist Entry Exists Allowlisted 404 URLs Allowlisted IP addresses that bypass 2FA and reCAPTCHA Allowlisted IP addresses that bypass all rules Allowlisted IPs Updated Allowlisted IPs must be placed on separate lines. You can specify ranges using the following formats: 127.0.0.1/24, 127.0.0.[1-100], or 127.0.0.1-127.0.1.100. Allowlisted IPs must be separated by commas or placed on separate lines. You can specify ranges using the following formats: 127.0.0.1/24, 127.0.0.[1-100], or 127.0.0.1-127.0.1.100. Allowlisted Services Updated Allowlisted URLs Allowlisted hosts Allowlisted services Allowlisted via Firewall Options page Allowlisted via Live Traffic Alternate WP cron Always Ignore Always Ignore Version American Samoa Amount of Live Traffic data to store (number of rows) Amount of time a user is locked out An admin user with a suspicious username %s was found. An admin user with a suspicious username %s was found. Administrator accounts with usernames similar to this are commonly seen created by hackers. It's possible a plugin could have created the account, but if you do not recognise the user, we suggest you remove it. An admin user with the username %s was created outside of WordPress. An admin user with the username %s was created outside of WordPress. It's possible a plugin could have created the account, but if you do not recognise the user, we suggest you remove it. An allowlist entry for this URL and parameter already exists. An empty license key was entered. An error occured when fetching the WAF configuration from the database. An error occurred An error occurred when adding the request to the allowlist. An error occurred when fetching the WAF configuration from the database. An error occurred while creating the block. An error occurred while installing your license key. An error occurred while retrieving your license information from the Wordfence servers. Please ensure that your server can reach www.wordfence.com on port 443. An error occurred while saving the configuration. An error occurred while saving the configuration: %s An error occurred while saving the license. An error occurred while saving the license: %s An error occurred while trying to hide the file. An error occurred: An error occurred: %s An error occurred: Invalid options format received. An error was detected with this site's configuration that is preventing a successful connection to Wordfence Central. Disconnecting from Central <a href="%s">on the Wordfence Dashboard</a> and reconnecting may resolve it. If the issue persists, please contact Wordfence support. An error was encountered while trying to activate two-factor authentication. Please try again. An error was encountered while trying to deactivate two-factor authentication. Please try again. An error was encountered while trying to disable NTP. Please try again. An error was encountered while trying to generate new recovery codes. Please try again. An error was encountered while trying to reset the NTP state. Please try again. An error was encountered while trying to send the message. Please try again. An error was encountered while trying to send the notification. Please try again. An error was encountered while validating the reCAPTCHA site key: %s An expected parameter was not provided. An invalid IP address was specified. An invalid IP source was provided. An invalid country was selected. An invalid file %s was specified for repair. An invalid file was requested for deletion. An invalid file was requested for hiding. An invalid file was specified for repair. An invalid operation was called. An invalid status was specified when trying to update that issue. An invalid type was specified to get file. An unexpected error occurred during the request. Please try again or reload the page. An unexpected error occurred while attempting to activate the grace period. An unexpected error occurred while attempting to configure Wordfence to delete its data on deactivation. An unexpected error occurred while attempting to dismiss the notice. Please try again. An unexpected error occurred while attempting to reset the grace period. An unexpected error occurred while attempting to revoke the grace period. An unknown action was provided. An unknown configuration section was provided. An unknown error occurred during the export. We received an undefined error from your web server. An unknown error occurred during the import. An unknown error occurred. An unknown issue type was found: An unknown location at IP An update is available for Updates are available for Analysed %1$d files containing %2$s of data so far Analysed %1$d files containing %2$s of data. Andorra Angola Anguilla Anonymous Comments Allowed Option Changed Antarctica Antigua and Barbuda Any previous value for <code>auto_prepend_file</code> will need to be re-enabled manually if still needed. Anyone claiming to be Google will not be rate-limited Apache + CGI/FastCGI Apache + mod_php Apache + suPHP App Password Accepted App Password Created App Password Deleted Application Passwords Application passwords have been disabled by Wordfence. Are you enjoying using Wordfence Security? Are you sure you want to allowlist this action? Are you sure you want to deactivate two-factor authentication? Are you sure you want to delete the selected Wordfence data? If you reactivate Wordfence later, deleted settings and history cannot be recovered. Are you sure you want to delete? Are you sure you want to disconnect your site from Wordfence Central? Are you sure you want to generate new recovery codes? Any remaining unused codes will be disabled. Are you sure you want to repair? Are you sure you want to reset this site's Wordfence License? This will disable Premium features and return the site to the free version of Wordfence. Your settings will still be retained when reinstalling a license. Are you sure you want to restore the default %s settings? This will undo any custom changes you have made to the options on this page. Are you sure you want to restore the default settings? This will undo any custom changes you have made to the options on this page. Are you sure you want to stop blocking the %d selected IPs, ranges, and countries? Are you sure you want to stop blocking the selected IP, range, or country? Argentina Armenia Aruba As a Wordfence Care customer you are entitled to hands-on priority support and have access to our incident response team. Our senior support engineers and incident response team respond to requests quickly within business hours (Monday to Friday, 6am to 5pm Pacific and 9am to 8pm Eastern time) and can sign-in to your site on request to assist with complex issues. As a Wordfence Premium customer you're entitled to paid support via our ticketing system. Our senior support engineers respond to Premium tickets during regular business hours (Monday to Friday, 6am to 5pm Pacific and 9am to 8pm Eastern time) and have a direct line to our QA and development teams. As a Wordfence Response customer you are entitled to hands-on priority support 24 hours a day 365 days a year. Our incident response team is available out of hours to handle urgent issues and security incidents. Our customer support team is available during business hours (Monday to Friday, 6am to 5pm Pacific and 9am to 8pm Eastern time) for product assistance. Both teams can sign-in to your site to assist, on request. As a free Wordfence user, you are currently using the Community version of the Threat Defence Feed. Premium users are protected by additional firewall rules and malware signatures as well as the Wordfence real-time IP blocklist. Upgrade to Premium today to improve your protection. As a free Wordfence user, you are currently using the Community version of the Threat Defence Feed. Premium users are protected by additional firewall rules and malware signatures. Upgrade to Premium today to improve your protection. Asking Wordfence to check URLs against malware list. At that time, 2FA codes will no longer be checked, however a valid login and password will still be required for site access. This applies to both SMS and Authenticator methods. Attachment Created Attachment Deleted Attachment Updated Attacks Blocked for %s Attempt to return to the admin login page (you may still be locked out) Attempting to resume scan stage (%d attempt(s) remaining)... Audit Log Audit Log Mode Changed Audit Log Options Audit Log logging mode Audit log mode: All events Audit log mode: Disabled Audit log mode: Malfunctioning Audit log mode: Not recording Audit log mode: Preview Audit log mode: Significant events only Australia Austria Auth Cookie Set Auth grant is invalid. Auth grant not found. Authentication Authentication Code Authenticator Author Author: %s Authorisation header format is invalid. Auto-renew is disabled Automatic Block Duration Updated Automatic Updates Completed Automatic WP Core updates Automatic database repair Automatic uninstallation cannot be completed, but you may still be able to <a href="%s" target="_blank" rel="noopener noreferrer">manually uninstall extended protection<span class="screen-reader-text"> (opens in new tab)</span></a>. Automatic updates disabled Automatic updates enabled Automatically enable on Automatically generated from previous country blocking settings Automatically updates Wordfence to the newest version within 24 hours of a new release. Azerbaijan Back Back to %s Back to Dashboard Back to Scan Background Request Blocked Backtrack limit is %d, reducing to 1000000 Bad URL Bad security token. It may have been more than 12 hours since you reloaded the page you came from. Try reloading the page you came from. If that doesn't work, please sign out and sign-in again. Bahamas Bahrain Bangladesh Banned URLs Updated Banned Usernames Updated Barbados Basic Firewall Options Basic Protection Basic Scan Type Options Basic WordPress Protection Basic config writing Before this file can be deleted, the configuration for the <code>auto_prepend_file</code> setting needs to be removed. Beginning file hashing Belarus Belgium Belize Below is a sample of these recent attacks: Benin Bermuda Bhutan Block Block All Block Author Scanning Toggled Block Bad POST Requests Toggled Block Count Block Deleted Block Duration Block IP Block IPs who send POST requests with blank User-Agent and Referer Block Pattern Block Reason Block Reason: Block Technical Data Block This Network Block Type Block Visitors Matching this Pattern Block access to the rest of the site Block countries even if they are logged in Block crawlers that are using too many resources or stealing content Block external URL requests Block the Selected Countries Block this IP Address Block traffic by country, IP, IP range, user agent, referrer, or hostname Blocked Blocked (Brute Force) Blocked By Firewall Blocked User Registration Contact Form Blocked WAF Blocked attack counts not available yet. Blocked because the IP is blocklisted Blocked by Wordfence Blocked by Wordfence Security Network Blocked by Wordfence plugin settings Blocked by login security setting Blocked by the Wordfence Application Firewall and plugin settings Blocked by the Wordfence Security Network Blocked by the Wordfence Web Application Firewall Blocked for %1$s in POST body: %2$s = %3$s Blocked for %1$s in cookie: %2$s = %3$s Blocked for %1$s in file: %2$s = %3$s Blocked for %1$s in query string: %2$s = %3$s Blocked for %s Blocking Blocking Builder Blocking IP %1$s. %2$s Blocking IP %s Blocking Options Blocking is disabled when the option "Enable Rate Limiting and Advanced Blocking" is off. Blocklist Blocklist Check Blocklist Status Blocks requests from known malicious IPs Blog Highlights Bolivia Bonaire, Saint Eustatius and Saba Bosnia and Herzegovina Bot Botswana Bouvet Island Brazil British Indian Ocean Territory Browser Time: Browser User Agent Browser user-agent to ignore Brunei Darussalam Brute Force Brute Force Protection Brute Force Protection Status Brute Force Protection Toggled Built-in caching Bulgaria Burkina Faso Burundi By default, Wordfence will scan your site daily. Start your first scan now to see if your site has any security issues that need to be addressed. From here you can run manual scans any time you like. Bypass Cookie Bypass Redirect Bypass the LiteSpeed "noabort" check Cached result for scan start test: %s Call to Wordfence API to resolve IPs failed: %s Calling Wordfence API v%s: Calling fork() from wordfenceHash with maxExecTime: %s Calling startScan(true) Cambodia Cameroon Canada Cancel Cancel Changes Cancel Scan Cape Verde Captcha Test Mode Toggled Care Care License Installed Category Cayman Islands Cellphone Sign-In Recovery Codes Cellphone Sign-in Enabled Cellphone Sign-in activated for user. Central African Republic Chad Change Filter Change the recording mode setting above to begin recording events to Wordfence Central. Change log Check Password Strength on Reset Toggled Check for a server outage. Check for publicly accessible configuration files, backup files and logs Check if this website IP is generating spam Check if this website is being "Spamvertised" Check if this website is being "Spamvertised" Check if this website is on a domain blocklist Check if your site is being Spamvertized is for paid members only Check password strength on profile update Check spam & spamvertising blocklists Check the strength of passwords Checking %1$d URLs from %2$d sources. Checking %d host keys against Wordfence scanning servers. Checking <code>display_errors</code><br><em> (<a href="http://php.net/manual/en/errorfunc.configuration.php#ini.display-errors" target="_blank" rel="noopener noreferrer">Should be disabled on production servers<span class="screen-reader-text"> (opens in new tab)</span></a>)</em> Checking OpenSSL version Checking Web Application Firewall status Checking basic config reading/writing Checking cronkey: %1$s (expecting %2$s) Checking for OpenSSL support Checking for cURL support Checking for future GeoIP support Checking for paths skipped due to scan settings Checking for the most secure way to get IPs Checking if MySQL user has <code>ALTER TABLE</code> privilege Checking if MySQL user has <code>CREATE TABLE</code> privilege Checking if MySQL user has <code>DELETE</code> privilege Checking if MySQL user has <code>DROP</code> privilege Checking if MySQL user has <code>INSERT</code> privilege Checking if MySQL user has <code>SELECT</code> privilege Checking if MySQL user has <code>TRUNCATE</code> privilege Checking if MySQL user has <code>UPDATE</code> privilege Checking if scan is already running Checking if web server can read from <code>~/plugins/wordfence</code> Checking if web server can read from <code>~/wp-content/wflogs</code> Checking if web server can write to <code>~/plugins/wordfence</code> Checking if web server can write to <code>~/wp-content/wflogs</code> Checking if your IP is generating spam is for paid members only Checking if your server discloses the path to the document root Checking if your site IP is generating spam Checking if your site is being Spamvertised Checking if your site is on a domain blocklist Checking if your site is on a domain blocklist is for paid members only Checking password strength of user '%1$s' with ID %2$d Checking saved cronkey against cronkey param Checking serialised config reading/writing Child Theme Option Changed Chile China Christmas Island Clear Clear All Connection Data Clear Filter Clear Local Connection Data Clear all Wordfence Central connection data Click here for our help article Click here for steps you can try. Click here to configure Click here to download a backup copy of this file now Click here to download a backup copy of your .htaccess file now Click here to learn more Click here to learn more: <a href="%s" target="_blank" rel="noopener noreferrer">Documentation<span class="screen-reader-text"> (opens in new tab)</span></a> Click here to manage your Wordfence licenses Click here to unblock all IP addresses. Click here to unlock all IP addresses and disable the Wordfence Firewall and Wordfence login security for all users Click here to unlock your ability to sign-in and to access to the site. Click here to update now Click here to upgrade to Wordfence Premium: Click here to use the recommended setting Click inside window to resume Click to fix .htaccess Click to view your system's configuration in a new window Close Cloudflare appears to be blocking your site from connecting to itself. Cocos (Keeling) Islands Collapse All Colombia Comment Moderation Default Option Changed Comoros Comparing core WordPress files against originals in repository Comparing open source themes against WordPress.org originals Comparing plugins against WordPress.org originals Completed checking password strength of user '%s' Complex Concatenate JavaScript files Configuration Issue Configured WAF storage engine (WFWAF_STORAGE_ENGINE) Configured but not valid Confirm 2FA Switch Confirm Disconnect Confirm Reset Confirm Restore Defaults Confirm Unsubscribe Congo Congo, The Democratic Republic of the Congratulations! Congratulations! Wordfence Care is now active on your website. Please note that some Care features are not enabled by default. Congratulations! Wordfence Free is now active on your website. Congratulations! Wordfence Premium is now active on your website. Please note that some Premium features are not enabled by default. Congratulations! Wordfence Response is now active on your website. Please note that some Response features are not enabled by default. Connect Site Connect This Site Connect Timestamp Connected Connected by %1$s on %2$s Connecting back to this site Connecting back to this site via IPv6 (Not required; this may not be an issue on some sites. <a href="%s" target="_blank" rel="noopener noreferrer" class="wfhelp"><span class="wfhelpextra">Click here to learn whether this is an issue</span></a>) Connecting to Wordfence servers (https) Connection Connection not finished Contacting Wordfence to initiate scan Content Content Safety Continue Cook Islands Core Core Update Completed Core Upgrade Core hashes data received from Wordfence servers was not valid. Corrected Time (NTP): Corrected Time (WF): Costa Rica Cote dIvoire Could not connect to database to start scan: %s Could not delete file %1$s. Error was: %2$s Could not delete file %1$s. The error was: %2$s Could not delete file because that issue does not appear to be a file related issue. Could not delete file because we could not find that issue. Could not delete files Could not fetch core hashes from Wordfence servers. Could not fetch malware signatures from Wordfence servers. Could not get username for user with ID %d when checking password strength. Could not remove the option %1$s. The error was: %2$s Could not remove the option because that issue does not appear to be a database related issue. Could not remove the option because we could not find that issue. Could not repair files Could not understand the response we received from the Wordfence servers when applying for a free license key. Could not verify Wordfence License: %s Count Count failures over what time period Countries Countries to Block Country Country Block Country Blocking Country Blocking Updated Country blocking Crawler 404 Rate Limit Settings Updated Crawler Rate Limit Settings Updated Crawlers Create a Blocking Rule Created Critical Critical Problems: Croatia Cron Jobs Cron Status Cron is disabled Cron is enabled Cron running frequency lock Cron test received and message printed Cuba Curacao Current Plugin Version Current Theme Version Current WAF configuration. Current WordPress Version Current blocks Current blocks for %s Currently in Learning Mode Custom Custom "usermeta" table Custom "users" table Custom Block Text Updated Custom Capabilities / Multiple Roles Custom PHP error message Custom PHP fatal error handler Custom Pattern Custom Scan Custom database class Custom database error message Custom installation script Custom maintenance message Custom scan options selected Custom site deleted message Custom site inactive message Custom site suspended message Custom text shown on block pages Custom upload folder location Cyprus Czech Republic Dashboard Dashboard Notification Options Dashboard notifications will also be displayed for Security Alerts, Promotions, Blog Highlights, and Product Updates. These notifications can be disabled by upgrading to a premium license. Data is invalid. Database Tables Database Version Database character set Database collation Database table names, sizes, timestamps, and other metadata. Database version and privileges. Date Date Range Deactivate Deactivate 2FA Deactivate Wordfence Deactivate and Delete Data Debug this Request Debugging Options Default Default Comment Status Option Changed Default User Role Option Changed Deferring scheduled scan by %s Defines the multisite database ID for the current site Defines the multisite domain for the current site Defines the multisite path for the current site Delay IP and Country blocking until after WordPress and plugins have loaded (only process firewall rules early) Delete Delete All Deletable Files Delete File Delete Files Delete Login Security tables and 2FA codes, but keep Wordfence tables and data Delete Login Security tables and data on deactivation Delete Option Delete User Delete Wordfence Data? Delete Wordfence tables and data on deactivation Delete Wordfence tables and data, but keep Login Security tables and 2FA codes Delete all Wordfence tables and data Deleted %1$d files but we encountered the following errors with other files: %2$s Deleted %d files successfully Deleted %d files successfully. No errors were encountered. Deleted some files with errors Deleting an infected wp-config.php file must be done outside of Wordfence. The wp-config.php file contains your database credentials, which you will need to restore normal site operations. Your site will NOT function once the wp-config.php file has been deleted. Denmark Description Description: %s Detail Details Detected IP(s) Detected IP: Detected loop in malware scan, aborting. Detection of security issues Diagnostic Wordfence settings/constants. Diagnostic connection information for Wordfence Central. Diagnostic report has been sent successfully. Diagnostics Directory Listing Disabled Directory Listing Enabled Directory listing has been disabled on your server. Directory listing is enabled Directory listing provides an attacker with the complete index of all the resources located inside of the directory. The specific risks and consequences vary depending on which files are listed and accessible, but it is recommended that you disable it unless it is needed. Disable Disable Author Scanning. Disable Code Execution for Uploads directory Disable WordPress application passwords Disable XML-RPC authentication Disable reading of php://input Disable the fatal error handler Disabled Disabled Disabled (premium feature) Disables automatic updates Disallow plugin/theme editing Disallow plugin/theme update and installation Disconnect Disconnect All Disconnect Site Disconnect This Site Disconnect Timestamp Disconnected Disconnected by %1$s on %2$s Disconnected from Wordfence Central Disconnected on %1$s Discounts for multi-year and multi-license purchases Disk Space Dismiss Display "All Options" menu item Display "Audit Log" menu item Display "Blocking" menu item Display "Live Traffic" menu item Display All Options menu item Display Audit Log menu item Display Audit Log menu option Display Blocking menu item Display Blocking menu option Display Live Traffic menu item Display Live Traffic menu option Djibouti Do not delete files on your system unless you're ABSOLUTELY sure you know what you're doing. If you delete the wrong file it could cause your WordPress website to stop functioning and you will probably have to restore from backups. If you're unsure, Cancel and work with your hosting provider to clean your system of infected files. Do not repair files on your system unless you're ABSOLUTELY sure you know what you're doing. If you repair the wrong file it could cause your WordPress website to stop functioning and you will probably have to restore from backups. If you're unsure, Cancel and work with your hosting provider to clean your system of infected files. Do not upgrade global tables Do this if you keep getting locked out or blocked and can't access your site. You can re-enable login security and the firewall once you sign-in to the site by visiting the Wordfence Firewall menu, clicking and then turning on the firewall and login security options. If you use country blocking, you will also need to choose which countries to block. Do this if you simply need to regain access because you were accidentally locked out. If you received an "Insecure Password" message before getting locked out, you may also need to reset your password. Do this if you still can't regain access using the link above. It causes everyone who is blocked or locked out to be able to access your site again. Do you want Wordfence to stay up-to-date automatically? Documentation Documentation about Wordfence may be found on our website by clicking the button below or by clicking the <i class="wf-fa wf-fa-question-circle-o" aria-hidden="true"></i> links on any of the plugin's pages. Dominica Dominican Republic Don't ask again Don't let WordPress reveal valid users in login errors Don't log signed-in users with publishing access Done URL check. Done examining URLs Done file contents scan Done host key check. Download Download %s Download Backup File Download File Download Recovery Codes Drop-In WordPress Plugins Duration Each feature contains a status that reminds you what's enabled, disabled or needs attention. The Notifications section will highlight actions you need to take. Each line of %d letters and numbers is a single recovery code, with optional spaces for readability. To use a recovery code, after entering your username and password, enter the code like "1234 5678 90AB CDEF" at the 2FA prompt. If your site has a custom login prompt and does not show a 2FA prompt, you can use the single-step method by entering your password and the code together in the Password field, like "mypassword1234 5678 90AB CDEF". Your recovery codes are: Each line of 16 letters and numbers is a single recovery code, with optional spaces for readability. When typing your password, enter "wf" followed by the entire code like "mypassword wf1234 5678 90AB CDEF". If your site shows a separate prompt for entering a code after entering only your username and password, enter only the code like "1234 5678 90AB CDEF". Your recovery codes are: Easily Monitor Your Wordfence Protection Ecuador Edit Edit Blocking Rule Edit Wordfence Options Edit trusted proxies Edit two-factor authentication for %s Editing User: %1$s <span class="wfls-text-plain">%2$s</span> Egypt Either you or someone at IP address <b>%1$s</b> requested an alert unsubscribe link for the website <a href="%2$s"><b>%3$s</b></a>. Either you or someone else at IP address <b>%1$s</b> requested instructions to regain access to the website <a href="%2$s"><b>%3$s</b></a>. El Salvador Email Email Alert Preferences Email Diagnostic Report Email Limit Reached Email Wordfence Activity Log Email activity log Email address Email log Email me if Wordfence is deactivated Email me if the Wordfence Web Application Firewall is turned off Email me when Wordfence is automatically updated Email verification invalid or expired. Please try again. Email verification succeeded. Please continue logging in. Email: %s Empty file path provided Enable Enable %d scan option. Enable %d scan options. Enable Automatic Scans Enable Block Admin Registration. Enable Brute Force Protection. Enable Firewall Enable Firewall. Enable Mask Login Errors. Enable Premium Reputation Checks. Enable Premium Rules. Enable Premium Scan Signatures. Enable Rate Limiting and Advanced Blocking Enable Rate Limiting and Advanced Blocking. Enable Real-Time IP Blocklist. Enable Real-Time Wordfence Security Network. Enable SSL Verification (Disable this if you are consistently unable to connect to the Wordfence servers.) Enable Wordfence translations Enable activity report widget on the WordPress dashboard Enable brute force protection Enable country blocking by upgrading to Premium. Enable debugging mode (increases database load) Enable email summary Enable firewall. Enable reCAPTCHA on the login and user registration pages Enable scan option to check if this website is being "Spamvertised". Enable scan option to check if your website IP is generating spam. Enable scan option to check if your website is on a domain blocklist. Enabled Enabled and Protecting Enabled until... Encountered bad date string for plugin "%1$s" in abandoned plugin check: %2$s Encountered file that is too large: %s - Skipping. Enforce Strong Passwords Toggled Enforce Strong Passwords. Enforce strong passwords Enter Premium Key Enter a duration (default is forever) Enter a full URL (e.g., http://example.com/blocked/) Enter a reason Enter a valid IP or domain Enter an IP address Enter the code from your authenticator app below to verify and activate two-factor authentication for this account. Enter the email address you would like to send the Wordfence activity log to. Note that the activity log may contain thousands of lines of data. This log is usually only sent to a member of the Wordfence support team. It also contains your PHP configuration from the phpinfo() function for diagnostic data. Enter your premium license key to enable real-time protection for your website. Entered fork() Entering start scan routine Entire Site Equatorial Guinea Eritrea Error Error Activating 2FA Error Deactivating 2FA Error Disabling NTP Error Enabling All Options Page Error Generating New Codes Error Installing License Error Resetting NTP Error Resetting reCAPTCHA Statistics Error Restoring Defaults Error Saving Block Error Saving Option Error Saving Options Error Sending Notification Error checking domain blocklists: %s Error during Export Error during Import Error finishing writing value for %1$s (MySQLi error: [%2$s] %3$s) Error reassembling value for %s Error removing option: %s Error writing value chunk for %1$s (MySQLi error: [%2$s] %3$s) Error writing value for %1$s (MySQLi error: [%2$s] %3$s) Error writing value header for %s Errors occurred while saving the configuration. Errors occurred while saving the configuration: %s Estonia Ethiopia Europe Events Every Other Day Everything Examining URLs found in posts we scanned for dangerous websites Examining URLs found in the options we scanned for dangerous websites Exceeded the maximum global requests per minute for crawlers or humans. Exceeded the maximum number of login failures which is: %1$s. The last username they tried to sign in with was: '%2$s' Exceeded the maximum number of page not found errors per minute for a crawler. Exceeded the maximum number of page not found errors per minute for humans. Exceeded the maximum number of page requests per minute for humans. Exceeded the maximum number of requests per minute for crawlers. Exceeded the maximum number of tries to recover their password which is set at: %1$s. The last username or email they entered before getting locked out was: '%2$s' Exclude files from scan that match these wildcard patterns Exclude files from scan that match these wildcard patterns (one per line) Executed before Multisite is loaded Existing User Existing WAF Installation Detected Expand All Expand All Results Expiration Explicitly set blog URL Explicitly set site URL Export Export All IPs Export Options Export Successful Export Wordfence Options Export this site's Wordfence options for import on another site Extended Protection Extended Protection Mode has not been disabled. This may be because <code>auto_prepend_file</code> is configured somewhere else or the value is still cached by PHP. Extended Protection Mode of the Wordfence Web Application Firewall uses the PHP ini setting called <code>auto_prepend_file</code> in order to ensure it runs before any potentially vulnerable code runs. This PHP setting currently refers to the Wordfence file at: Extended Protection Still Enabled External object cache Failed Failed Login Failed Login Failure Threshold Updated Failed Login: Invalid Username Failed Login: Valid Username Failed obtaining core vulnerability data, skipping check. Failed obtaining vulnerability data, skipping check. Failed to reset grace period Falkland Islands (Malvinas) Faroe Islands Fetching core, theme and plugin file signatures from Wordfence Fetching fresh core hashes Fetching fresh malware prefixes Fetching list of known core files from Wordfence Fetching list of known malware files from Wordfence Fetching stored cronkey for comparison. Fetching token for Wordfence Central authentication due to configuration issue. Fiji File File "%s" does not exist File "%s" is unreadable File "%s" is unwritable File Changes File Name File Size: File System Credentials Required File Type File access blocked. (WORDFENCE_DISABLE_FILE_VIEWER is true) File appears to be malicious or unsafe: %s File contains illegal characters. File contains suspected malware URL: File does not exist. File hidden successfully File last modified: File restored OK File type: Filename Filename: Filesystem Credentials Required Filesystem Permission Error Filter Filter By Filter Traffic Filter Value Filter by Type, Detail, or Reason Filter... Finalising malware scan results Find the documentation and help you need Finland Firewall Firewall Options Firewall Response Firewall Rules Firewall Rules Status Firewall Status Firewall Summary: Firewall issues may be caused by file permission changes or other technical problems. Firewall optimisation is not currently supported on NGINX Unit Fix .htaccess Fixing wp_mail from address: %s For admins only For all users with "publish posts" capability For entry-level hosting plans. Provides limited detection capability with very low resource utilisation. For help on setting up an app, visit our help article. For maximum security use PHP's built in REMOTE_ADDR. For most sites, we recommend allowing access from the United States, where Google and other benign crawlers are generally located. Many well-known crawlers also have locations in Europe, so be careful when blocking other countries, especially if you have not seen significant attacks from them. For roles that require 2FA, users will have this many days to set up 2FA. Failure to set up 2FA during this period will result in the user losing account access. This grace period will apply to new users from the time of account creation. For existing users, this grace period will apply relative to the time at which the requirement is implemented. This grace period will not automatically apply to admins and must be manually enabled for each admin user. For site owners who think they may have been hacked. More thorough but may produce false positives. Force SSL for administrative logins Force admins and publishers to use strong passwords (recommended) Force all members to use strong passwords Forgot Password Threshold Updated Forking during indexing: %s Forking during malware scan (%s) to ensure continuity. Forking during malware scan to ensure continuity. Found Found %d plugin Found %d plugins Found %d theme Found %d themes Found .suspected file: %s France Free Free License Installed Free Support French Guiana French Polynesia French Southern Territories Friday From Front-end Website Full Name Full Path Disclosure Full Path Disclosure (FPD) vulnerabilities enable the attacker to see the path to the webroot/file. e.g.: /home/user/htdocs/file/. Certain vulnerabilities, such as using the load_file() (within a SQL Injection) query to view the page source, require the attacker to have the full path to the file they wish to view. GDPR Information Gabon Gambia Gathering host keys. General General Blocking and Rate Limiting Toggled General Data Protection Regulation General Options General Wordfence Options General information about the Wordfence installation. Generate Generate New Codes Generate New Recovery Codes Generated by Wordfence at Generated by Wordfence at %s Generated in %.4f seconds GeoIP Version Georgia Germany Get Help Get Your Wordfence License Get a new license Get help with Cloudflare compatibility Getting plugin list from WordPress Getting theme list from WordPress Ghana Gibraltar Global Options Global Rate Limit Settings Updated Global Wordfence Options Go To Dashboard Go To Option Go to Go to Login Security Go to Support Forums Go: Google Bot Google Crawlers Got a true deserialized value back from 'wfsd_engine' with type: %s Got error response from Wordfence servers: %s Got it Got max_execution_time value from ini: %s Got value from wf config maxExecutionTime: %s Grace Period Grace Period Override Greater than 2 Gigs Greece Greenland Greetings! The default configuration for Wordfence Live Traffic has changed. The new default saves only logins and blocked requests, while this site is currently recording all traffic. Would you like to change to the new default? Grenada Group By Guadeloupe Guam Guatemala Guernsey Guinea Guinea-Bissau Guyana HIGH SENSITIVITY scanning is enabled, it may produce false positives HTML tags will be stripped prior to output and line breaks will be converted into the appropriate tags. HTTP %1$d received from Wordfence Central: %2$s HTTP Response Code Haiti Header Heard Island and McDonald Islands Help Here's where you'll see all the blocking rules you've created. You can also manage them as well as remove or modify them from this table. Hide File Hide WordPress version Hide log High High Sensitivity High Severity Problems: Hit enter to add Hit enter to add a username Holy See (Vatican City State) Home URL Option Changed Honduras Hong Kong Hostname Hostname for a proxy server How are these categorised? How do I get to 100%? How does Wordfence determine this? How does Wordfence get IPs How long is an IP address blocked when it breaks a rule How much memory should Wordfence request when scanning How should we treat Google's crawlers How to block a network How to get IPs Human Human 404 Rate Limit Settings Updated Human Rate Limit Settings Updated Human/Bot Humans Hungary IP IP / Action IP Address IP Address Range IP Address to Block IP Block IP Detection IP Range IP Source Changed IP Throttled IP reputation monitoring IP(s) used by this server IP: IPs IPs Bypassing 2FA Updated IPv6 DNS resolution failed Iceland Idle If a crawler's page views exceed If a crawler's pages not found (404s) exceed If a human's page views exceed If a human's pages not found (404s) exceed If anyone's requests exceed If autorenew is enabled for the current license, the license will renew at the next expiration date. If you would like to turn renewal off or assign the license to another site, log into wordfence.com to change it. If enabled, XML-RPC calls that require authentication will also require a valid 2FA code to be appended to the password. You must choose the "Skipped" option if you use the WordPress app, the Jetpack plugin, or other services that require XML-RPC. If enabled, all settings and 2FA records will be deleted on deactivation. If later reactivated, all users that previously had 2FA active will need to set it up again. If enabled, users with 2FA enabled may choose to be prompted for a code only once every 30 days per device. If the email address provided was on the alert email list, it has been sent an unsubscribe link. If this is a false positive, you can exclude this parameter from being filtered by the firewall If this is a single site with multiple domains or subdomains, you can dismiss this message. If this is your first attempt, please try again. If this option is disabled, Wordfence can look up countries for visitor IP addresses using a local database, but cannot look up regions or cities If user from a blocked country hits the relative URL ____ then redirect that user to ____ and set a cookie that will bypass all country blocking If user hits the relative URL If user who is allowed to access the site views the relative URL If user who is allowed to access the site views the relative URL ____ then set a cookie that will bypass country blocking in future in case that user hits the site from a blocked country If you are a WordPress user with administrative privileges on this site please enter your email in the box below and click "Send". You will then receive an email that helps you regain access. If you are using a web server not listed in the dropdown or if file permissions prevent the installer from completing successfully, you will need to perform the change manually. Click Continue below to create the required file and view manual installation instructions. If you cannot complete the setup process, <a href="%s" target="_blank" rel="noopener noreferrer">click here for help<span class="screen-reader-text"> (opens in new tab)</span></a> If you cannot complete the setup process, <a target="_blank" rel="noopener noreferrer" href="%s">click here for help<span class="screen-reader-text"> (opens in new tab)</span></a>. If you cannot complete the uninstall process, <a href="%s" target="_blank" rel="noopener noreferrer">click here for help<span class="screen-reader-text"> (opens in new tab)</span></a> If you delete the wrong file, it could cause your WordPress website to stop functioning, and you will probably have to restore from a backup. If you did not request these instructions then you can safely ignore them. If you did not request this, you can safely ignore it. If you don't have one, you can purchase one now. If you don't recognise this file, please <a href="https://wordpress.org/support/plugin/wordfence" target="_blank" rel="noopener noreferrer">contact us on the WordPress support forums<span class="screen-reader-text"> (opens in new tab)</span></a> before proceeding. If you have automatic updates enabled (see above), you'll get an email when an update occurs. If you have separate WordPress installations with Wordfence installed within a subdirectory of this site, it is recommended that you perform the Firewall installation procedure on those sites before this one. If you know your web server's configuration, please select it from the list below. If you need to continue using the legacy 2FA mode, you will need to downgrade to the 8.1.4 version of Wordfence temporarily. This feature will be discontinued around July 1, 2026, and legacy 2FA codes will no longer be required at that time, even when using an old plugin version. If you think you have been blocked in error, contact the owner of this site for assistance. If you use country blocking to block countries from accessing the entire site, it is important to review the allowed services setting to ensure that search engines and other desired services may continue to see the site regardless of a crawler's location. Additionally, ad services like Google Ads may penalize listings when a country is blocked from the entire site. If you use external services that may send POST requests without these headers, do not use this option, as they will be blocked. If you want to reenable Wordfence Live Traffic, you need to deactivate %1$s and then go to the Wordfence options page and reenable Live Traffic there. Wordfence does work with %1$s, however Live Traffic will be disabled and the Wordfence firewall will also count less hits per visitor because of the %1$s caching function. All other functions should work correctly. If you were attempting to log in to this site, <a href="%s"><strong>Verify and Log In</strong></a> If you would like to sign-in to <a href="%1$s">%1$s</a> please <a href="%2$s">click here</a> now. You can change the frequency of this email or turn it on and off by visiting your <a href="%3$s">Wordfence options page</a>. If you're looking for a more comprehensive solution, the <a href="https://wordpress.org/plugins/wordfence/" target="_blank" rel="noopener noreferrer">full Wordfence plugin</a> includes all of the features in this plugin as well as a full-featured WordPress firewall, a security scanner, live traffic, and more. The standard installation includes a robust set of free features that can be upgraded via a Premium license key. If you're moving to a new host or a new installation location, you may need to temporarily disable extended protection to avoid any file not found errors. Use this action to remove the configuration changes that enable extended protection mode or you can <a href="%s" target="_blank" rel="noopener noreferrer">remove them manually<span class="screen-reader-text"> (opens in new tab)</span></a>. Ignore Ignore All for User Ignore Only this Password Ignore Only this Title Ignore Option Ignore URL Ignore Until File Changes Ignore Until Version Changes Ignore Update Ignore Value Ignore this URL Ignored Ignored Alert IPs Updated Ignored IP addresses for Wordfence Web Application Firewall alerting Ignored IPs must be separated by commas or placed on separate lines. These addresses will be ignored from any alerts about increased attacks and can be used to ignore things like standalone website security scanners. Ignored Results Ignoring invalid base scan file: %s Ignoring invalid expected scan file: %s Ignoring invalid scan file child: %s Ignoring invalid scan path: %s Immediately block IPs that access these URLs Immediately block the IP of users who try to sign in as these usernames Immediately lock out invalid usernames Import Options Import Successful Import Wordfence Options Import Wordfence options from another site using a token Import/Export Options Importing and exporting of options has moved to the Tools page Importing and exporting of options is available on the Tools page In addition to the above list, the IPs (or CIDR ranges) in the selected preset will be ignored when determining the requesting IP via the X-Forwarded-For HTTP header. In order to use 2FA with the WooCommerce customer role, you must either enable the "WooCommerce integration" option or use the "wordfence_2fa_management" shortcode to provide customers with access to the 2FA management interface. The default interface is only available through WordPress admin pages which are not accessible to users in the customer role. In this mode, the Wordfence Web Application Firewall is actively blocking requests matching known attack patterns and is actively protecting your site from attackers. In this mode, the Wordfence Web Application Firewall is functionally turned off and does not run any of its rules or analyse the request in any way. In use Inactive Inactive<small class="wfls-sub-status">(Grace Period)</small> Include Including files that are outside the WordPress installation in the scan. Increased Attack Rate Index time: %s India Individual Allowlisting Indonesia Initiating quick scan Insecure Password Install Install License Install Wordfence Install Wordfence License Install an existing license Install your license to finish activating Wordfence. Installation Failed Installation Successful Internal error when connecting to Wordfence Central (see server error log) Interval the bin is automatically emptied at in days Introducing the New Wordfence 2FA Invalid IP address. Invalid IP range. Invalid block duration. Invalid block type. Invalid bulk operation selected Invalid email address given. Invalid email address provided Invalid file requested. (Relative paths not allowed) Invalid function specified. Please check the link we emailed you and make sure it was not cut-off by your email reader. Invalid grace period override Invalid hostname. Invalid key provided for authentication. Invalid log type to wfLog: %s Invalid number of scan resume attempts specified: %d Invalid option specified Invalid response from Wordfence API during check_possible_malware Invalid response from Wordfence Central. Invalid response from Wordfence Central. Parameter %s not found in response. Invalid response from Wordfence Central: %s Invalid response from Wordfence servers. Invalid response received from Wordfence Central when fetching nonce. Invalid response received from Wordfence Central when fetching token. Invalid response: Invalid response: %s Invalid user ID. Invalid user specified Iran, Islamic Republic of Iraq Ireland Isle of Man Israel Issue Found Issue Found: %s It failed sending to %d user. Failures typically occur because of a missing or invalid email address. It failed sending to %d users. Failures typically occur because of a missing or invalid email address. It has unpatched security issues and may have compatibility problems with the current version of WordPress. It is currently configured to use an older version of PHP and may become deactivated if PHP is updated. You may perform the configuration update automatically by <a href="%1$s">clicking here</a>. <a class="wfhelp" target="_blank" rel="noopener noreferrer" href="%2$s"><span class="screen-reader-text"> (opens in new tab)</span></a> It is not currently in extended protection mode but was configured to use an older version of PHP and may have become deactivated when PHP was updated. You may perform the configuration update automatically by <a href="%1$s">clicking here</a> or use the "Optimise the Wordfence Firewall" button on the Firewall Options page. <a class="wfhelp" target="_blank" rel="noopener noreferrer" href="%2$s"><span class="screen-reader-text"> (opens in new tab)</span></a> It looks like you've tried to connect this site to Wordfence Central, but the installation did not finish. It may have compatibility problems with the current version of WordPress or unknown security issues. It was last updated %1$s ago and tested up to WordPress %2$s. It was last updated %s ago. Italy Jamaica Japan JavaScript Errors Jersey Job Jordan Kazakhstan Keep all Wordfence tables and data Kenya Key Kiribati Kosovo Kuwait Kyrgyzstan LICENSE KEY: %s LOG: Language choice Lao Peoples Democratic Republic Last Attempt Last CAPTCHA Last Hit Last Login Last Updated Last Updated: %s Last Updated: %s ago Last scan failed Latvia Learn More Learn More About Wordfence Care Learn More About Wordfence Response Learn More: %s Learn about Wordfence Care and Wordfence Response Learn about Wordfence Response Learn more Learn more about Blocking Learn more about Global Options Learn more about Live Traffic Learn more about repairing modified files. Learn more about the Firewall Learn more<span class="wf-hidden-xs"> about Blocking</span> Learn more<span class="wf-hidden-xs"> about Scanning</span> Learn more<span class="wf-hidden-xs"> about Two-Factor Authentication</span> Learn more<span class="wf-hidden-xs"> about the Dashboard</span> Learn more<span class="wf-hidden-xs"> about the Firewall</span> Learn more<span class="wf-hidden-xs"> about the Scanner</span> Learn more<span class="wfls-hidden-xs"> about Login Security</span> Learn more<span class="wfls-hidden-xs"> about Two-Factor Authentication</span> Learning Mode Learning Mode Enabled Learning Mode Until Leave Review Lebanon Legacy Two-Factor Authentication Users Legacy support for SMS-based two-factor authentication has been phased out, as it is less secure than using a modern authenticator app. Lesotho Let Wordfence choose when to scan my site (recommended) Let Wordfence use the most secure method to get visitor IP addresses. Prevents spoofing and works with most sites. Liberia Libyan Arab Jamahiriya License Key License Key Changed License Status License already in use License is expired License renews in %d days License renews today License renews tomorrow Liechtenstein Limit the number of issues sent in the scan results email Limited Limited Scan List of WordPress cron jobs scheduled by WordPress, plugins, or themes. List of comma separated IP addresses to ignore List of comma separated usernames to ignore List of directories to exclude from recently modified file list LiteSpeed/lsapi Lithuania Live Traffic Live Traffic Options Live Traffic, Whois Lookup, Import/Export, and Diagnostics Live Updates Paused Live Updates Paused — Click inside window to resume Live traffic defaults to a summary view of all security-related traffic. Details are viewable by clicking anywhere within the summary record. To switch to the expanded view, click the Expand All Records switch. Loading... Location Lock out after how many forgot password attempts Lock out after how many login failures Locked Out Locked Out<small class="wfls-sub-status">(Grace Period Disabled)</small> Locked Out<small class="wfls-sub-status">(Grace Period Exceeded)</small> Locked out from logging in Lockout Lockout Invalid Users Toggled Log Files Log In Log Security Events to an Off-Site Audit Log on Wordfence Central Logged In Login Attempts Login Captcha Toggled Login Form Login Name Login Only Login Security Login Security Counting Period Updated Login Security Lockout Threshold Updated Login Security Options Login Security Settings Login Security options are available on the Login Security options page Login Security: Allow remembering device for 30 days Login Security: Allowlisted IP addresses that bypass 2FA and reCAPTCHA Login Security: Disable XML-RPC authentication Login Security: Enable 2FA for these roles Login Security: Enable reCAPTCHA on the login and user registration pages Login Security: Require 2FA for XML-RPC call authentication Login Verification Required Login and firewall activity will appear below. Login failed with status code 403. Please contact the site administrator. Login failed with status code 503. Please contact the site administrator. Logins Logins and Logouts Look up IP or Domain Look up visitor IP locations via Wordfence servers Looks like the Wordfence database tables have been deleted. You can fix this by de-activating and re-activating the Wordfence plugin from your Plugins menu. Low Low Severity Problems: Low resource utilisation, limited detection capability Luxembourg Macao Madagascar Mail Send Failed Mail Sent Make Permanent Malawi Malaysia Maldives Mali Malta Malware Scan Malware Signatures Malware Signatures Status Malware URLs Malware data received from Wordfence servers was not valid. Manage Manage 2FA Manage 2FA Settings Manage Blocking Rules Manage Brute Force Protection Manage Firewall Manage Firewall Rules Manage Options Manage Plugins Manage Scan Manage Scan Settings Manage Settings Manage Users Manage WAF Manage global and advanced firewall options Manage global blocking options. Manage global options for Wordfence such as alerts, premium status, and more Manage scan options including scheduling Management of legacy two-factor authentication using SMS-based codes is deprecated, and the old method of appending "wf" and a code will not be supported in the future. An improved interface and usage by non-administrators is available by activating the login security module. Users who have legacy 2FA enabled will still be required to enter a code while logging in currently, but legacy 2FA users can no longer be added or removed. Manual Block Created Manual Configuration Manual Installation Instructions Manual block by administrator Manual permanent block by admin Manually Refresh Rules Manually schedule scans Mark as Fixed Marking comment as spam for containing a malware URL. Comment has %s Marking comment as spam for containing a phishing URL. Comment has %s Marshall Islands Martinique Mask Login Errors Toggled Mauritania Mauritius Maximum days to keep Live Traffic data Maximum days to keep Live Traffic data (1-30 days) Maximum email alerts to send per hour Maximum execution time for each scan stage Maximum execution time for each scan stage Maximum number of attempts to resume each scan stage Mayotte Medium Medium Severity Problems: Memory size in megabytes Message to Support Methods of detecting a visitor's IP address. Mexico Micronesia, Federated States of Mode Modified Modified plugin file: %s Modified theme file: %s Modifying the .htaccess file did not resolve the issue, so the original .htaccess file was restored. You can fix this manually by setting <code>display_errors</code> to <code>Off</code> in your php.ini if your site is on a VPS or dedicated server that you control. Moldova, Republic of Monaco Monday Mongolia Monitor Web Application Firewall status Monitor background requests from an administrator's web browser for false positives Monitor background requests from an administrator's web browser for false positives (Admin Panel) Monitor background requests from an administrator's web browser for false positives (Front-end Website) Monitor disk space Montenegro Month Montserrat More Details and Instructions More Information More than %d users exist for the selected role. This notification is not designed to handle large groups of users. In such instances, using a different solution for notifying users of upcoming 2FA requirements is recommended. Morocco Mozambique Multisite Multisite Blog Activated Multisite Blog Archived Multisite Blog Created Multisite Blog Deactivated Multisite Blog Deleted Multisite Blog Domain Multisite Blog ID Multisite Blog Made Private Multisite Blog Made Public Multisite Blog Marked as Spam Multisite Blog Moved to Bin Multisite Blog Path Multisite Blog Removed from Bin Multisite Blog Signup Submitted Multisite Blog Unarchived Multisite Blog Unmarked as Spam Multisite Blog Updated Multisite Network Plugins Changed Multisite User Activated Multisite User Created Multisite User Deleted Multisite enabled Multisite enabled, Older subdomain installation constant Multisite enabled, WordPress will load the /wp-content/sunrise.php file Multisite enabled, subdomain installation constant Multisite/network ability enabled Must-Use WordPress Plugins Myanmar N/A NGINX NGINX Unit NOTE NOTE: This checkbox enables ALL blocking/throttling functions including IP, country and advanced blocking, and the "Rate Limiting Rules" below. NOTE: You are using the free version of Wordfence and are missing out on features like real-time firewall rule and malware signature updates, country blocking, and detecting if your site IP is sending spam. <a href="https://www.wordfence.com/zz6/">Click here to upgrade to Wordfence Premium now</a>. NOTE: You are using the free version of Wordfence. Upgrade today: NOTE: You are using the free version of Wordfence. Upgrade today: - Receive real-time Firewall and Scan engine rule updates for protection as threats emerge - Real-time IP Blocklist blocks the most malicious IPs from accessing your site - Country blocking - IP reputation monitoring - Schedule scans to run more frequently and at optimal times - Access to Premium Support - Discounts for multi-year and multi-license purchases Click here to upgrade to Wordfence Premium: https://www.wordfence.com/zz1/wordfence-signup/ NTP NTP Status NTP Time Offset NTP is a protocol that allows for remote time synchronisation. Wordfence Login Security uses this protocol to ensure that it has the most accurate time which is necessary for TOTP-based two-factor authentication. NTP is currently <strong>enabled</strong>. NTP is currently disabled as %d subsequent attempts have failed. NTP updates are currently failing. NTP was manually disabled. NTP will be automatically disabled after %d more attempts. NTP will be automatically disabled after 1 more attempt. Name Namibia Nauru Need help from the WordPress security experts? Need help with a security issue? Nepal Netherlands Network Activated Never Never Block Crawlers Toggled New Caledonia New Issues (%d total) New Login Page Captcha Feature New Plugin Version New Recovery Codes New Theme Version New WordPress Version New Zealand Next Next Update Check Next Update Check: %s Next scan in %1$s (%2$s) Next scan is starting now Nicaragua Nice work! The firewall is now optimised. Niger Nigeria Niue No No Data Available During Learning Mode No Events Detected No IPs blocked yet. No Ignored Issues No MU-Plugins No New Issues No Thanks No Themes No activity to report yet. Please complete your first scan. No allowlisted URLs currently set. No block parameters provided. No block parameters were provided. No blocked attacks yet. No blocks are currently active. No blocks have been recorded. No blocks match the current filter. No blocks were provided. No configuration changes were provided to save. No configuration section was provided. No countries selected. No data currently. No failed logins have been recorded. No failed logins yet. No files readable No files remaining for malware scan. No files writable No issues have been ignored. No license was provided to install. No log files found. No longer an administrator for this site? <a href="%s" target="_blank">Click here</a> to stop receiving security alerts. No longer an administrator for this site? Click here to stop receiving security alerts: %s No new issues have been found. No notifications received No requests blocked yet. No requests to report yet. No rules currently set. No rules were updated. Please verify you have permissions to write to the /wp-content/wflogs directory. No rules were updated. Please verify your website can reach the Wordfence servers. No rules were updated. Your website has reached the maximum number of rule update requests. Please try again later. No scan is scheduled No successful logins have been recorded. No thanks. No updates are available at this time. No users currently exist with the selected role. No users currently have legacy cellphone sign-in enabled. No users found in the %1$s state for the %2$s role No: %s Nonce format is invalid. Nonce is invalid. None Norfolk Island Normal Normal request North Korea North Macedonia, Republic of Northern Mariana Islands Norway Not Active Not Allowed Not a core, theme, or plugin file from WordPress.org Not connected Not recording Not recording (Central disconnected) Note Note: Status will update when changes are saved Note: This does not include Login Security settings and tables. An option to delete those must be selected separately on the Login Security settings page. Note: This feature requires a free site key and secret for the <a href="https://www.google.com/recaptcha/about/" target="_blank" rel="noopener noreferrer">Google reCAPTCHA v3 Service</a>. To set up new reCAPTCHA keys, log into your Google account and go to the <a href="https://www.google.com/recaptcha/admin" target="_blank" rel="noopener noreferrer">reCAPTCHA admin page</a>. Nothing done Nothing selected to block. Notice Dismissed Notification Results Notification Sent Notifications Notify Number of Database Tables Number of scan results to return. OK Odd Days & Weekends Off Offset of scan results to return. Old WordPress core file not removed during update: %s Oman On Once Daily Once a day Once a month Once a week Once you have downloaded the files, click Continue to complete the setup. Once you have downloaded the files, click Continue to complete uninstallation. Once you have entered credentials, click Continue to complete the removal. Once you have entered credentials, click Continue to complete the setup. Only alert me when that administrator signs in from a new device Only alert me when that user signs in from a new device Optimise Wordfence Firewall Optimise the Wordfence Firewall Optimise the Wordfence Firewall. Optimising the Wordfence Web Application Firewall may not be possible in the current environment. Some firewall rules cannot offer full protection on your hosting platform, but many will still work. You can attempt to configure the firewall if you believe the platform has been misidentified. Option Option Name Option contains a suspected malware URL: %s Optional Options Other Tests Our recommendation for all websites. Provides the best detection capability in the industry. Our senior support engineers <strong>respond to Premium tickets within a few hours</strong> on average and have a direct line to our QA and development teams. Outdated plugin scan adjusted invalid return value in plugins_api filter for %s Overdue Overridden permissions for a new file Overridden permissions for a new folder Overridden: %s Override Overwrite image edits when restoring the original PHP Update Needed for Country Blocking PHP error logs generated by your site, if enabled by your host. PHP version >= PHP %s<br><em> (<a href="https://wordpress.org/about/requirements/" target="_blank" rel="noopener noreferrer">WordPress requirements</a>)</em> <a href="%s" target="_blank" rel="noopener noreferrer" class="wfhelp"><span class="screen-reader-text"> (opens in new tab)</span></a> PHP version too old PHP version, important PHP extensions. PLUGIN VERSION: %s PM POST Body POST received with blank user-agent and referer Page Page %d is out of range Page Created Page Deleted Page Moved to Bin Page Removed from Bin Page Updated Page Visited Page contains %d malware URL: Page contains %d malware URLs: Page not found Pages Not Found Paid Members Only Pakistan Palau Palestinian Territory Panama Papua New Guinea Paraguay Param Param Name Param Type Parent Theme Option Changed Part of the Firewall configuration procedure for NGINX depends on creating a <code>%1$s</code> file in the root of your WordPress installation. This file can contain sensitive information and public access to it should be restricted. We have <a href="%2$s" target="_blank" rel="noreferrer noopener">instructions on our documentation site<span class="screen-reader-text"> (opens in new tab)</span></a> on what directives to put in your nginx.conf to fix this. Participate in the Real-Time Wordfence Security Network Participate in the Wordfence Security Network Toggled Passing public key to Wordfence Central. Password Reset Password Strength Password recovery attempted Passwords containing a space followed by "wf" without quotes are not allowed. Pause live updates when window loses focus Payment Method Expired Payment Method Expiring Payment Method Invalid Payment Method Missing Performance Options Permanent Permission Denied Peru Philippines Phone (%s) Pick Pick from List Pitcairn Please <a href="%s">click here</a> to configure the Firewall to run correctly on this site. Please Complete Wordfence Installation Please choose a different password. The password you are using exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. <a href="%s">Learn More</a> Please confirm the switch to the new 2FA mode. This change will be permanent. Please confirm the unsubscribe request for %s. Please consider leaving us a 5-star review on wordpress.org. Your review helps other members of the WordPress community find plugins that fit their needs. Please contact the site administrators if they are not already aware of this change. Please download a backup of the following files before we make the necessary changes: Please enter a valid IP address or domain name for your whois lookup. Please enter a valid IP address to block. Please enter a valid email address Please enter a valid email address. Please enter an email address to unsubscribe from alerts. If this email address exists on the alert email list, it will receive a confirmation link to unsubscribe. Please enter the license to install. Please include your support ticket number or forum username. Please make a backup of this file before proceeding. If you need to restore this backup file, you can copy it to the following path from your site's root: Please make sure you separate your IP addresses with commas or newlines. The following allowlisted IP addresses are invalid: Please read this article in our FAQ to make an important change that will ensure your site stability during an update. Please specify a reason Please specify a valid IP address range in the form of "1.2.3.4 - 1.2.3.5" without quotes. Make sure the dash between the IP addresses in a normal dash (a minus sign on your keyboard) and not another character that looks like a dash. Please specify either an IP address range, Hostname or a web browser pattern to match. Please try again. If the problem persists, please <a href="https://www.wordfence.com/help/api-key" target="_blank" rel="noopener noreferrer">contact Wordfence Support<span class="screen-reader-text">(opens in new tab)</span></a> Please use the login security module. Please verify a login attempt for your account on: %s Please wait 3 minutes and try again Plugin Abandoned Plugin Activated Plugin Alerting Disabled Plugin Deactivated Plugin Deleted Plugin File Plugin Installed Plugin Name Plugin Name: Plugin Removed Plugin URL Plugin Update Completed Plugin Upgrade Plugin Version: Plugin Vulnerable Plugin contains an unpatched security vulnerability. Plugin has unpatched security issues. Plugin/Themes/Updates Plugins Poland Port for a proxy server Portugal Post Post Created Post Deleted Post Moved to Bin Post Removed from Bin Post Updated Post editing automatic saving interval Post revisions saved by WordPress Post title contains suspicious code Posted on Posts, Comments, & Files Premium Premium Feature Premium License Conflict Premium License Deactivated Premium License Installed Premium Protection Disabled Premium Protection Enabled Premium Support Prevent Use of Application Passwords Toggled Prevent Use of Breached Passwords Toggled Prevent Using "admin" Username Toggled Prevent discovery of usernames through "/?author=N" scans, the oEmbed API, the WordPress REST API, and WordPress XML Sitemaps Prevent discovery of usernames through '/?author=N' scans, the oEmbed API, the WordPress REST API, and WordPress XML Sitemaps Prevent the use of passwords leaked in data breaches Prevent users registering "admin" username if it doesn't exist Prevent users registering 'admin' username if it doesn't exist Preview Previous Previous scan terminated with an error. See below. Previous scan was stopped successfully. Process Owner Processing pending issues Product Updates Promotions Protect More Sites Protection Level Protection from known and emerging threats Public Files Publicly Accessible Config/Backup/Log Publicly accessible config, backup, or log file found: %s Publicly accessible quarantined file found: %s Puerto Rico Put Geographic Protection In Place With Country Blocking Qatar Quarantined File Query String Quick Quick Scan Quick Scan Complete. Scanned in %s. Ranges mixing IPv4 and IPv6 addresses are not supported. Rate Limiting Rate limiting based on type of request (human vs crawler) may be less accurate because this prevents loading the extra JavaScript used for that identification. Re-enable %d firewall rule. Re-enable %d firewall rules. Real-Time IP Blocklist Real-time IP Blocklist blocks the most malicious IPs from accessing your site Reason Receive real-time Firewall and Scan engine rule updates for protection as threats emerge Recent Recent Activity Recent Event Summary Recently Blocked Attacks Recently Modified Files Recently removed wflogs files Recommended Recommended Settings Change Reconnect This Site Recording (all events) Recording (significant events only) Recovery Codes Recovery Key Generated Redirect to the URL below Redirected Redirected by Country Blocking bypass URL Redirecting back to Wordfence Central. Referer Referrer Regex compilation failed for signature %d Register with Wordfence to secure your site with the latest threat intelligence. Registered Users Regular traffic and security-related traffic will appear below. Reload Remember for 30 days Remind Me Later Reminder: If you lose access to your authenticator device, you can use recovery codes to log in. If you have not saved a copy of your recovery codes, we recommend downloading them now. Remove Extended Protection Remove Invalid License Renew License Repair Repair All Repairable Files Repair the Wordfence Firewall configuration. Repaired %1$d files but we encountered the following errors with other files: %2$s Repaired %d files successfully Repaired %d files successfully. No errors were encountered. Repaired some files with errors Repository URL Reputation Check Status Reputation Checks Reputation check Request Response Request Time: Request received via unlock email link to unblock all IPs via disabling firewall rules. Request received via unlock email link to unblock all IPs. Request was generated at: %s Requesting max memory Requests Required Required parameters not sent. Requires downloading from the server directly Requiring 2FA for customers is not recommended as some customers may experience difficulties setting up or using two-factor authentication. Instead, using the "Optional" mode for users with the customer role is recommended which will allow customers to enable 2FA, but will not require them to do so. Rescheduled missing daily cron Rescheduled missing hourly cron Reset Reset Grace Period Reset License Reset Score Statistics Reset site to a free license Response Response License Installed Rest of site Restore Restore Defaults Results Results Found Resume Installation Resuming malware scan at rule %s. Retrieving access token using authorisation grant. Return to scan results Return to the <a href="%s">Wordfence Admin Page</a> Return to the site home page Return value of is_multisite() Reunion Review Review Payment Method Revoke Capabilities Revoke Grace Period Role Role Added to User Role Capabilities Changed Role Removed from User Romania Rule Added Rule Update Failed Rule updates delayed by 30 days Rules Rules Updated Rules updated in real-time Run Time Run Whois Run a Scan Run reCAPTCHA in test mode Russian Federation Rwanda SHOW ALL RULES SITE: %s SSL is not supported by your web server and is required to use this function. Please ask your hosting provider or site admin to install cURL with openSSL to use this feature. SUM_KILLED:A request was received to stop the previous scan from Wordfence Central. Saint Bartelemey Saint Helena Saint Kitts and Nevis Saint Lucia Saint Martin Saint Pierre and Miquelon Saint Vincent and the Grenadines Samoa San Marino Sao Tome and Principe Saturday Saudi Arabia Save Save Changes Scan Scan Complete. Scan Complete. Scanned %1$d files, %2$d plugins, %3$d themes, %4$d posts, %5$d comments and %6$d URLs in %7$s. Scan Engine Error: %s Scan Failed Scan Issues Scan Options Scan Options & Settings Scan Options Updated Scan Options and Scheduling Scan Schedule Updated Scan Scheduling Scan Stage Failed Scan Status Scan Stopping Scan Time Limit Exceeded Scan Type Scan WordPress core, plugin, and theme options for known dangerous URLs and suspicious content Scan can't continue - stored data not found after a fork. Scan can't continue - stored data not found after a fork. Got type: %s Scan comments for known dangerous URLs and suspicious content Scan complete. Congratulations, no new problems found. Scan complete. You have %d new issue to fix. Scan complete. You have %d new issues to fix. Scan completed on %s Scan core files against repository versions for changes Scan engine received request. Scan file contents for backdoors, trojans and suspicious code Scan file contents for malicious URLs Scan files outside your WordPress installation Scan for misconfigured How does Wordfence get IPs Scan for out of date, abandoned, and vulnerable plugins, themes, and WordPress versions Scan for publicly accessible configuration, backup, or log files Scan for publicly accessible quarantined files Scan for signatures of known malicious files Scan for suspicious admin users created outside of WordPress Scan images, binary, and other files as if they were executable Scan interrupted. No problems found prior to stopping. Scan interrupted. Scanned %1$d files, %2$d plugins, %3$d themes, %4$d posts, %5$d comments and %6$d URLs in %7$s. Scan interrupted. You have %d new issue to fix. See below. Scan interrupted. You have %d new issues to fix. See below. Scan plugin files against repository versions for changes Scan posts for known dangerous URLs and suspicious content Scan process ended after forking. Scan result group or all results. Scan stop request received from Wordfence Central. Scan stop request received. Scan terminated with error: %s Scan the code below with your authenticator app to add this account. Some authenticator apps also allow you to type in the text version instead. Scan theme files against repository versions for changes Scan was stopped on administrator request. Scan wp-admin and wp-includes for files not bundled with WordPress Scanned comment with %s Scanned contents of %1$d additional files at %2$.2f per second Scanner Scanner Options Scanning additional paths is optional and is not always necessary. Scanning comment with %s Scanning comments for URLs on a domain blocklist Scanning comments with %d left to scan. Scanning contents: %1$s (Size: %2$s Mem: %3$s) Scanning contents: %1$s (Size: %2$s) Scanning file contents for URLs on a domain blocklist Scanning file contents for infections and vulnerabilities Scanning for admin users not created through WordPress Scanning for known malware files Scanning for old themes, plugins and core files Scanning for publicly accessible quarantined files Scanning for suspicious site options Scanning for unknown files in wp-admin and wp-includes Scanning for weak passwords Scanning posts for URLs on a domain blocklist Scanning posts with %d left to scan. Scanning to check available disk space Scanning: %1$s (Mem:%2$s) Scanning: %s Scans are not functional because SSL is unavailable. Schedule Wordfence Scans Schedule scans to run more frequently and at optimal times Scheduled Wordfence scan starting at %s Scheduled time for day %1$s hour %2$s is: %3$s Search All Options Seconds since last hit Security Alerts Security Event Security token has expired. Click <a href="%s">here</a> to return to the scan page. See below. See recent traffic See the details of these scan results on your site at: %s Seek error occurred in file: %s - Skipping. Select Countries to Block from List Select row %d Select/deselect all Selected automatically when General Options have been customised for this website. Send Send Anyway Send Report Send Report by Email Send Test Activity Report Send Test Email Send Unlock Email Send a test activity report email: Send a test email from this WordPress server to an email address: Send an email to users with the selected role to notify them of the grace period for enabling 2FA. Select the desired role and optionally specify the URL to be sent in the email to setup 2FA. If left blank, the URL defaults to the standard WordPress login and Wordfence’s Two-Factor Authentication plugin page. For example, if using WooCommerce, input the relative URL of the account page. Senegal Separate multiple URLs with commas or place them on separate lines. Asterisks are wildcards, but use with care. If you see an attacker repeatedly probing your site for a known vulnerability you can use this to immediately block them. All URLs must start with a "/" without quotes and must be relative. e.g. /badURLone/, /bannedPage.html, /dont-access/this/URL/, /starts/with-* Separate multiple addresses with commas Serbia Serialised config writing Server State Server Time Server Time: Server Update Server time accuracy and applied offsets. Set up the way you want the firewall to protect your site including the web application firewall, brute force protection, rate limiting, and blocking. Set up the way you want the scan to monitor your site security including custom scan configurations and scheduling. Set: %s Setting Setting Name Setting higher will reduce browser traffic but slow scan starts, live traffic & status updates. Setting the grace period to 0 will prevent users in roles where 2FA is required, including newly created users, from logging in if they have not already enabled two-factor authentication. Setting up error handling environment Setting up scanRunning and starting scan Settings Severity: %s Seychelles Shortcuts Should be: Show Advanced Filters Show Automatic Show User Counts Show Wordfence 2FA menu on WooCommerce Account page Show Wordfence Automatic Blocks Show last login column on WP Users page Show log Show more Show the standard Wordfence blocked message Sierra Leone Sign up for Wordfence Care and we'll take care of it. Our security experts will clean your site, resolve the infection, and perform a security audit. Get hands-on support with any security issue including help installing, configuring and optimising Wordfence. Sign up for Wordfence Care today and get expert help with any security issue. Wordfence Care is for business owners who put a premium on their time. With Wordfence Care, we take care of it, so that you can focus on your customers. Check out Wordfence Response for mission-critical WordPress websites. Signature is invalid. Signatures updated in real-time Significant Significant Events Since you have High Sensitivity scanning enabled, there is a very high likelihood that your results will include false positives. If you think you have indeed been hacked, our team of security experts can help. Since you have the beta threat defence feed enabled, there is a high likelihood that your results could include false positives. If you think you have indeed been hacked, our team of security experts can help. Singapore Sint Maarten Site Data Exported Site Except Login Site ID Site ID is invalid. Site Settings Site URL Option Changed Site is not connected to Wordfence Central. Skip Skipped Skipped Paths Skipping core scan Skipping file larger than max size: %s Skipping inaccessible directory: %s Skipping malware scan Skipping password scan for non-admin user %s with bcrypt password Skipping plugin scan Skipping scan of file contents for URLs on a domain blocklist Skipping scan of file contents for infections and vulnerabilities Skipping theme scan Skipping unknown core file scan Skipping unneeded hash: %s Slovakia Slovenia Solomon Islands Somalia Someone tried to recover the password for user with email address: %s Sorry but your browser sent an invalid security token when trying to use this form. Sorry, but no data for that IP or domain was found. Sorry, you are not allowed to list users. Source Source IP: %s South Africa South Georgia and the South Sandwich Islands South Korea Space Remaining Spain Spam Spam Check Specific config options to return. Specific config options to set. Specify a valid IP range Specify a valid hostname Specify an IP range, Hostname or Browser pattern Sri Lanka Standard Standard Scan Standard detection capability Standard detection capability, chance of false positives Start New Scan Start Your First Scan Start all scans remotely (Try this if your scans aren't starting and your site is publicly accessible) Start time Starting cron via proxy at URL %s Starting cron with normal Ajax at URL %s Starting password strength check on %d user. Starting password strength check on %d users. Starting scan of file contents Status Status Updates Paused<br /><small>Click inside window to resume</small> Status of installed plugins. Status of installed themes. Stop Ignoring Stop Scan Stops Complex Attacks Stops Password Guessing Attacks Submit Feedback Success deleting file Success removing option Success restoring file Success updating option Successful Successfully deleted admin Successfully removed data Successfully revoked admin Sudan Sunday Super Admin Granted to User Super Admin Revoked from User Super Administrator Support Support for free customers is available via our forums page on WordPress.org. The majority of requests <strong>receive an answer within a few days.</strong> Suriname Svalbard and Jan Mayen Swaziland Sweden Switch to New 2FA Switzerland Syrian Arab Republic System configuration, memory test, send test email from this server. TOTP Time Source Tables missing (prefix %1$s, %2$s): %3$s Taiwan Tajikistan Tanzania, United Republic of Terms of Use and Privacy Policy Test Email Sent Test email failed to send Test email sent successfully Test result of scan start URL fetch: %s Test your WordPress host's available memory Testing accessibility of: %s Testing initial communication with Wordfence Central. Testing public key authentication with Wordfence Central. Testing that Wordfence Central is able to communicate with this site. Thailand Thank you for providing your feedback on Wordfence Security Thanks for sending your diagnostic page over email The 'How does Wordfence get IPs' option was successfully updated to the recommended value. The <code>auto_prepend_file</code> setting has been successfully removed from <code>.htaccess</code> and <code>.user.ini</code>. Once this change takes effect, Extended Protection Mode will be disabled. The Audit Log has failed to successfully send events for two days. Please verify the connection with Wordfence Central, connectivity to the Wordfence servers, and that the database has no damaged tables. The Full Path disclosure issue has been fixed The GDPR is a set of rules that provides more control over EU personal data. Defiant has updated its terms of service, privacy policies, and software, as well as made available standard contractual clauses to meet GDPR compliance. The GeoIP database that is required for country blocking has been updated to a new format. This new format requires sites to run PHP 5.4 or newer, and this site is on PHP %s. To ensure country blocking continues functioning, please update PHP. The IP address %s is allowlisted and can't be blocked. You can remove this IP from the allowlist on the Wordfence options page. The IP address %s is in a range of IP addresses that Wordfence does not block. The IP range may be internal or belong to a service safe to allow access for. The IP address you're trying to block belongs to Google. Your options are currently set to not block these crawlers. Change this in Wordfence options if you want to manually block Google. The IP you provided must be in dotted quad notation or use ranges with square brackets. e.g. 10.11.12.13 or 10.11.12.[1-50] The IP/range %s is invalid. The Plugin "%1$s" appears to be abandoned (updated %2$s). The Plugin "%1$s" appears to be abandoned (updated %2$s, tested to WP %3$s). The Plugin "%1$s" needs an upgrade (%2$s -> %3$s). The Plugin "%s" has a security vulnerability. The Plugin "%s" has been removed from WordPress.org but is still installed on your site. The Theme "%1$s" needs an upgrade (%2$s -> %3$s). The URL %s is on the blocklist. The URL is: %s The URL/parameters in this table will not be tested by the firewall. They are typically added while the firewall is in Learning Mode or by an admin who identifies a particular action/request is a false positive. The WAF storage engine is currently set to MySQLi, but Wordfence is unable to use the database. The WAF will fall back to using local file system storage instead. The Web Application Firewall is currently in Learning Mode. The Wordfence 2FA Code can be found within the authenticator app you used when first activating two-factor authentication. You may also use one of your recovery codes. The Wordfence Assistant plugin is currently installed. It should only be retained during use and should be removed once it's no longer needed. The Wordfence Assistant plugin is currently installed. It should only be retained during use and should be removed once it's no longer needed. <a href="%s" target="_blank">Click here to learn more.</a> The Wordfence Audit Log is a premium feature that records a history of events on your site to assist in monitoring for unauthorised actions or signs of compromise. Events can include everything from user creation and editing to plugin/theme installation and updates. All data captured for relevant events is saved remotely to Wordfence Central to prevent any tampering that may interfere with post-incident analysis and response. The Wordfence Audit Log is designed to monitor all changes and actions in security-sensitive areas of the site. Actions such as user creation, plugin installation and activation, changes to settings, and similar are all logged with relevant contextual information for later review or forensic analysis. Additionally, the log is securely saved outside of the site on Wordfence Central (sample below) to avoid tampering or deletion by malicious actors. The Wordfence Audit Log records a history of events on your site to assist in monitoring for unauthorised actions or signs of compromise, ranging from user creation and editing to plugin/theme installation and updates. You can choose to log all events or significant events only, which includes all authentication, site configuration, and site functionality events. Events are securely saved to Wordfence Central to prevent any tampering with the data that may interfere with post-incident analysis and response. The Wordfence Dashboard provides valuable insights into the current state of your site's security. You'll find useful data summarised here as well as important status updates and notifications. The Wordfence Live Traffic feature has been disabled because you have %s active which is not compatible with Wordfence Live Traffic. The Wordfence Premium License in use on this site has been removed from your account. The Wordfence Web Application Firewall cannot run. The Wordfence Web Application Firewall has blocked %1$d attacks over the last %2$s. The Wordfence Web Application Firewall is a PHP-based, application-level firewall that filters out malicious requests to your site. It is designed to run at the beginning of WordPress' initialisation to filter any attacks before plugins or themes can run any potentially vulnerable code. The Wordfence Web Application Firewall is in read-only mode. The Wordfence Web Application Firewall needs a configuration update. The Wordfence activation server returned an unexpected response. Please try again. The Wordfence administrative URL for this site is: %s The Wordfence firewall is still optimised. You should remove the firewall's extended protection before deleting to avoid PHP errors if some firewall files cannot be removed, or if PHP's "auto_prepend_file" setting is cached. The Wordfence firewall protects your sites from attackers The Wordfence license could not be installed. The Wordfence license provided has been installed. The Wordfence license you're using does not match this site's address. Premium features are disabled. The Wordfence scanning servers are currently unavailable. This may be for maintenance or a temporary outage. If this still occurs in an hour, please contact support. [%s] The Wordfence server's response did not contain the expected elements. The admin user %s was successfully deleted. The audit log is currently recording all monitored events to Wordfence Central, including content changes, user actions and changes, site modifications, and Wordfence configuration updates. The audit log is currently recording all significant events to Wordfence Central, which includes user actions and updates, site modifications, and Wordfence configuration changes. The changes have not yet taken effect. If you are using LiteSpeed or IIS as your web server or CGI/FastCGI interface, you may need to wait a few minutes for the changes to take effect since the configuration files are sometimes cached. You also may need to select a different server configuration in order to complete this step, but wait for a few minutes before trying. You can try refreshing this page. The code provided does not match the expected value. Please verify that the time on your authenticator device is correct and that this server's time is correct. The configuration files are corrupt or inaccessible by the web server, which is preventing the WAF from functioning. Please verify the web server has permission to access the configuration files. You may also try to rebuild the configuration file by <a href="%1$s">clicking here</a>. It will automatically resume normal operation when it is fixed. <a class="wfhelp" target="_blank" rel="noopener noreferrer" href="%2$s"><span class="screen-reader-text"> (opens in new tab)</span></a> The constant WORDFENCE_LS_DISABLE_NTP is defined which disables NTP entirely. Remove this constant or set it to a falsy value to enable NTP. The core files scan has not run because this version is not currently indexed by Wordfence. New WordPress versions may take up to a day to be indexed. The core files scan will not be run because this version of WordPress is not currently indexed by Wordfence. This may be due to using a prerelease version or because the servers are still indexing a new release. If you are using an official WordPress release, this issue will automatically dismiss once the version is indexed and another scan is run. The current scan looks like it has failed. Its last status update was more than %s ago. You may continue to wait in case it resumes or stop and restart the scan. Some sites may need adjustments to run scans reliably. The current site URL does not match the Wordfence Central connection information. Local connection information has been removed, but %s is still registered in Wordfence Central. The disk has %s MB available The duration of the block is %s. The duration of the lockout is %s. The email address provided has been unsubscribed from future alert emails. The error returned was: The file %s was successfully deleted. The file %s was successfully restored. The file <code>%s</code> was deleted successfully. The file <code>%s</code> was restored successfully. The file was successfully hidden from public view. The following IPs you selected to ignore in live traffic reports are not valid: The following IPs/ranges you selected to trust as proxies are not valid: The following emails are invalid: The following users you selected to ignore in live traffic reports are not valid on this system: The given user already has two-factor authentication active. The given user does not exist. The grace period day limit must be between %1$d and %2$d. The grace period end time must be in the future. The issue type is: %s The key used to start a scan expired. The value is: %1$s and split is: %2$s and time is: %3$d The last rules update for the Wordfence Web Application Firewall was unsuccessful. The last successful update check was %s, so this site may be missing new rules added since then. The license key entered is not in a valid format. It must contain only numbers and the letters A-F. The license provided is already in use on another site. The license you were using has been removed from your account. Please reach out to <a href="mailto:billing@wordfence.com">billing@wordfence.com</a> or create a Premium support case at <a href="https://support.wordfence.com/support/tickets" target="_blank">https://support.wordfence.com/support/tickets<span class="screen-reader-text"> (opens in new tab)</span></a> for more information. Our staff is happy to help. The license you were using has been removed from your account. Please reach out to billing@wordfence.com or create a Premium support case at https://support.wordfence.com/support/tickets for more information. Our staff is happy to help. The link you used to access this page has expired, has already been used, or is otherwise invalid. The malicious URL matched The matched text in this file is: %s The most recently-detected events on this site are listed below. When the audit log is enabled and your site is connected to Wordfence Central, full details of each event can be found on Central. This includes information such as record IDs, version numbers, and which modifications were made. Log entries in preview mode are only stored locally. The multisite blog with ID %d is listed on a domain blocklist. The multisite blog with ID %d is listed on the Wordfence domain blocklist. The option "Scan files outside your WordPress installation" is off by default, which means %1$d path and its file(s) will not be scanned for malware or unauthorised changes. To continue skipping this path, you may ignore this issue. Or to start scanning it, enable the option and subsequent scans will include it. Some paths may not be necessary to scan, so this is optional. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a><br><br>The path skipped is %3$s The option "Scan files outside your WordPress installation" is off by default, which means %1$d paths and their file(s) will not be scanned for malware or unauthorised changes. To continue skipping these paths, you may ignore this issue. Or to start scanning them, enable the option and subsequent scans will include them. Some paths may not be necessary to scan, so this is optional. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a><br><br>The paths skipped are %3$s The option %s was successfully removed. The plugin will load as a regular plugin after WordPress has been loaded, and while it can block many malicious requests, some vulnerable plugins or WordPress itself may run vulnerable code before all plugins are loaded. The previous scan has failed. Some sites may need adjustments to run scans reliably. The previous scan has terminated because the time limit of %s was reached. This limit can be customised on the options page. The previous scan has terminated because we detected an update occurring during the scan. The rate limit for alert emails of %d alert(s) per hour from Wordfence has been reached. No alerts will be sent for the remainer of the hour. The reason is: "%s". The request has been allowlisted. Please try it again. The request was flagged as suspicious, and we need verification that you attempted to log in to allow it to proceed. This verification link <b>will be valid for 15 minutes</b> from the time it was sent. If you did not attempt this login, please change your password immediately. The required file has been created. You'll need to insert the following code into your <code>php.ini</code> to finish installation: The results of your scan may indicate that you could benefit from Wordfence Site Cleaning The scan has failed because we received an unexpected response from the Wordfence servers. This may be a temporary error, though some sites may need adjustments to run scans reliably. The scan has failed because we were unable to contact the Wordfence servers. Some sites may need adjustments to run scans reliably. The scan time limit of %1$s has been exceeded and the scan will be terminated. This limit can be customised on the options page. <a href="%2$s" target="_blank" rel="noopener noreferrer">Get More Information<span class="screen-reader-text"> (opens in new tab)</span></a> The scan was terminated early because it reached the time limit for scans. If you would like to allow your scans to run longer, you can customise the limit on the options page: <a href="%1$s">%2$s</a> or read more about scan options to improve scan speed here: <a href="%3$s">%4$s</a> The selected trusted proxy preset is not valid: The signature on the request to start a scan is invalid. Please try again. The site admin can change this option. The specified URL is invalid. The two panels below show a before and after view of a file on your system that has been modified. The left panel shows the original file before modification. The right panel shows your version of the file that has been modified. Use this view to determine if a file has been modified by an attacker or if this is a change that you or another trusted person made. If you are happy with the modifications you see here, then you should choose to ignore this file the next time Wordfence scans your system. The update check performed during the scan encountered an error: %s The update was successful! The user does not exist. The user specified does not have two-factor authentication active. The view %s does not exist or is not readable. The view could not be loaded. The whois service gives you a way to look up who owns an IP address or domain name that is visiting your website or is engaging in malicious activity on your website. Theme Customised Theme Deleted Theme File Theme Installed Theme Name Theme Name: Theme Sidebar Updated Theme Switched Theme URL Theme Update Completed Theme Upgrade Theme Version: Theme stylesheet folder override Theme template folder override Themes Themes & Plugins There are no differences between the original file and the file in the repository. There is already a scan running. There was an error connecting to the Wordfence scanning servers: %s There was an error deleting the file. There was an error restoring the file. There was an error starting the scan: %s. There was an error while downgrading to a free license. There was an error while sending the email. There was an error writing to your .htaccess file. There was an unknown error connecting to the Wordfence scanning servers. There was an unknown error starting the scan. These IPs (or CIDR ranges) will be ignored when determining the requesting IP via the X-Forwarded-For HTTP header. Enter one IP or CIDR range per line. These URL patterns will be excluded from the throttling rules used to limit crawlers. These instructions <b>will be valid for 30 minutes</b> from the time they were sent. These options are also available throughout the plugin pages, in the relevant sections. This page is provided for easier setup for experienced Wordfence users. These options let you choose which site events to record in the audit log. When enabled and your site is connected to Wordfence Central, these events are automatically sent to Central to prevent any tampering by an attacker. When <strong>Audit Log logging mode</strong> is set to "Significant Events", all events except content changes will be recorded. "All Events" will include content-related events and may be used to monitor for unauthorised post or page changes. "Preview" and "Disabled" modes do not send any events to Central. These options let you choose which traffic to log and to ignore certain types of visitors, based on their level of access, usernames, IP address, or browser type. If you run a high-traffic website where it is not feasible to see your visitors in real-time, simply change the <strong>Traffic logging mode</strong> to "Security Only." This %1$s contains a URL that is currently listed on Wordfence's domain blocklist. The URL is: %2$s This IP address is in a range of addresses that Wordfence does not block. The IP range may be internal or belong to a service that is always allowed. Allowlisting of external services can be disabled. <a href="%s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a> This PHP setting is currently in use, and is including this file: This WordPress core file has been modified and differs from the original file distributed with this version of WordPress. This additional info may help you diagnose the issue. The response headers we received were: This could be caused by a database problem. You may need to repair your "wfconfig" database table or fix your database user's privileges if they have changed recently, or you may need to reinstall Wordfence. Please <a href="%s" target="_blank" rel="noopener noreferrer">contact Wordfence support<span class="screen-reader-text"> (opens in new tab)</span></a> if you need help. This diagnostic is unavailable as cURL appears to be supported, but was not used by WordPress for this request This diagnostic requires cURL This email was sent from your website "%1$s" by the Wordfence plugin at %2$s This email was sent from your website "%s" by the Wordfence plugin. This email was sent from your website <a href="%1$s">%1$s</a> and is a summary of security related activity that Wordfence monitors for the period %2$s to %3$s. This feature blocks all traffic from IPs with a high volume of recent malicious activity using Wordfence's real-time blocklist. This file appears to be installed or modified by a hacker to perform malicious activity. If you know about this file you can choose to ignore it to exclude it from future scans. This file belongs to plugin "%1$s" version "%2$s" and has been modified from the file that is distributed by WordPress.org for this version. Please use the link to see how the file has changed. If you have modified this file yourself, you can safely ignore this warning. If you see a lot of changed files in a plugin that have been made by the author, then try uninstalling and reinstalling the plugin to force an upgrade. Doing this is a workaround for plugin authors who don't manage their code correctly. <a href="%3$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a> This file belongs to theme "%1$s" version "%2$s" and has been modified from the original distribution. It is common for site owners to modify their theme files, so if you have modified this file yourself you can safely ignore this warning. <a href="%3$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a> This file contains a URL that is currently listed on Wordfence's domain blocklist. The URL is: This file is a PHP executable file and contains the word "eval" (without quotes) and the word "%s" (without quotes). The eval() function along with an encoding function like the one mentioned are commonly used by hackers to hide their code. If you know about this file you can choose to ignore it to exclude it from future scans. This file was detected because you have enabled HIGH SENSITIVITY scanning. This option is more aggressive than the usual scans, and may cause false positives. This file is in a WordPress core location but is from an older version of WordPress and not used with your current version. Hosting or permissions issues can cause these files to get left behind when WordPress is updated and they should be removed if possible. This file is in a WordPress core location but is not distributed with this version of WordPress. This scan often includes files left over from a previous WordPress version, but it may also find files added by another plugin, files added by your host, or malicious files added by an attacker. This file is in a WordPress core location but is not distributed with this version of WordPress. This scan often includes files left over from a previous WordPress version, but it may also find files added by another plugin, files added by your host, or malicious files added by an attacker. <a href="%s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a> This file is suspected malware: %s This file may contain malicious executable code: This file was detected because you have enabled "Scan images, binary, and other files as if they were executable", which treats non-PHP files as if they were PHP code. This option is more aggressive than the usual scans, and may cause false positives. This file was detected because you have enabled HIGH SENSITIVITY scanning. This option is more aggressive than the usual scans, and may cause false positives. This file's signature matches a known malware file. The title of the malware is '%s'. Immediately inspect this file using the 'View' option below and consider deleting it from your server. This is a test email from %1$s. The IP address that requested this was: %2$s This is the severity of the vulnerability itself, which can differ from the scan result severity. Some lower-severity vulnerabilities may still be important to address depending on your site's configuration and user base, so they are still important for you to review. This is where future security alerts for your website will be sent. This can also be changed in Global Options. This is where you can monitor the work Wordfence is doing to protect your site and also where you can manage the options to optimise the firewall's configuration. This is your Dashboard This is your main configuration file and cannot be deleted. It must be cleaned manually. This key may already be used on several sites. To avoid scan scheduling issues and other problems, you should get a new key or remove it from the other sites. This likely indicates that the server either does not support IPv6 or does not have an IPv6 address assigned or associated with the domain. Original error message: %s This likely means that your hosting provider is blocking requests to noc1.wordfence.com or has set up a proxy that is not behaving itself. This link has expired. Refresh the scan results page and try again. This list may include WordPress core/plugin/theme updates, error logs, cache files, and other normal changes. This may cause duplicated scan issues if both sites are currently active and reporting and is generally caused by duplicating the database from one site to another (e.g., from a production site to staging). We recommend disconnecting this site only, which will leave the matching site still connected. This option contains a URL that is currently listed on Wordfence's domain blocklist. It may indicate your site is infected with malware. The URL is: %s This option enables all "Brute Force Protection" options, including strong password enforcement and invalid login throttling. You can modify individual options below. This option requires cURL. (This may have no effect on some old PHP or cURL versions.) This page only shows users and roles on the main site of this network This page shows information that can be used for troubleshooting conflicts, configuration issues, or compatibility with other plugins, themes, or a host's environment. Failing tests are not always a sign of something that you need to fix, but can help the Wordfence team when troubleshooting a problem. This plugin will be discontinued on or around July 1, 2026, because its features are already included in the main Wordfence plugin. This post contains code that is suspicious. Please check the title of the post and confirm that the code in the title is not malicious. This site appears to be behind Cloudflare, so using the Cloudflare "CF-Connecting-IP" HTTP header will resolve to the correct IPs. This site appears to be behind a front-end proxy, so using the X-Forwarded-For HTTP header will resolve to the correct IPs. This site appears to be behind a front-end proxy, so using the X-Real-IP HTTP header will resolve to the correct IPs. This site is currently using PHP's built in REMOTE_ADDR. This site is currently using the Cloudflare "CF-Connecting-IP" HTTP header, which should only be used when the site is behind Cloudflare. This site is currently using the X-Forwarded-For HTTP header, which should only be used when the site is behind a front-end proxy that outputs this header. This site is currently using the X-Real-IP HTTP header, which should only be used when the site is behind a front-end proxy that outputs this header. This user's email is the network admin email. It will need to be changed before deleting this user. This was a premium license key, but it is no longer valid, so premium features are disabled. You can either remove the invalid key and continue using Wordfence's free features, or enter a new premium key to upgrade. If you have questions, contact <a href="mailto:billing@wordfence.com">billing@wordfence.com</a>. This will be shown only once. Keep these codes somewhere safe. Throttled Throttling IP %1$s. %2$s Thursday Ticket Number/Forum Username Time Time Limit Time limit that a scan can run in seconds Time: Timor-Leste Title To To change your alert options for Wordfence, visit: %s To clone one site's configuration to another, use the import/export tools below. To connect your site your site to Wordfence Central, use the link below: To continue receiving updates and security improvements, please install and activate the main Wordfence plugin — also available for free. To continue using 2FA, you will need to switch this site to the newer method on the <a href="%s">Legacy Two-Factor Authentication page</a>, and then users will need to set up 2FA with an authenticator app. To continue using Defiant products and services including the Wordfence plugin, all customers must review and agree to the updated terms and privacy policies. These changes reflect our commitment to follow data protection best practices and regulations. The Wordfence interface will remain disabled until these terms are agreed to. To ensure uninterrupted Premium Wordfence protection on your site, please renew your license by visiting https://www.wordfence.com/ Sign in, go to your dashboard, select the license about to expire and click the button to renew that license. To make your site as secure as possible, take a moment to optimise the Wordfence Web Application Firewall: To make your site as secure as possible, the Wordfence Web Application Firewall is designed to run via a PHP setting called <code>auto_prepend_file</code>, which ensures it runs before any potentially vulnerable code runs. To preserve the integrity of your website we are not running Wordfence auto-update. You are running the LiteSpeed web server which has been known to cause a problem with Wordfence auto-update. Please go to your website now and make a minor change to your .htaccess to fix this. You can find out how to make this change at: %s Alternatively you can disable auto-update on your website to stop receiving this message and upgrade Wordfence manually. To protect your site from this vulnerability, the safest option is to deactivate and completely remove "%1$s" until a patched version is available. <a href="%2$s" target="_blank" rel="noopener noreferrer">Get more information.<span class="screen-reader-text"> (opens in new tab)</span></a> To see current Wordfence alerts, visit: %s To update your license settings please visit https://www.wordfence.com/zz9/dashboard Today Toggle row %d Togo Tokelau Token is invalid. Tonga Too many installation requests have been made from your IP address. Please try again later. Tool Options Tools Top %d Countries Blocked Top %d Failed Logins Top %d IPs Blocked Top 10 Countries Blocked Top 10 Failed Logins Top 10 IPs Blocked Top Countries by Number of Attacks - Last 7 Days Top IPs Blocked Top Topics and Questions Total Total Attacks Total Attacks Blocked: Total IPs Blocked Total Users Total disk space: %1$s -- Free disk space: %2$s Total of %d users left to process in password strength check. Total of %d users left to process in password strength check. Traffic logging mode Traffic logging mode (Live Traffic) Traffic logging mode: All traffic Traffic logging mode: Security-related traffic only Treat Google like any other Crawler Trinidad and Tobago Trusted Proxies Trusted Proxies Updated Trusted Proxy Preset Trusted Proxy Preset Changed Try Again Tuesday Tunisia Turkey Turkmenistan Turks and Caicos Islands Turn On Tuvalu Twice Daily Two Factor Status Two-Factor Authentication Two-Factor Authentication Recovery Codes - %1$s (%2$s) Two-Factor Authentication, or 2FA, significantly improves login security for your account. Wordfence 2FA works with a number of TOTP-based apps like Google Authenticator, FreeOTP, and Authy. For a full list of tested TOTP-based apps, <a href="%s" target="_blank" rel="noopener noreferrer">click here</a>. Two-Factor Authentication, or 2FA, significantly improves login security for your website. Wordfence 2FA works with a number of TOTP-based apps like Google Authenticator, FreeOTP, and Authy. For a full list of tested TOTP-based apps, <a href="%s" target="_blank" rel="noopener noreferrer">click here</a>. Two-factor authentication is not currently enabled for this account type. To enable it, visit the Wordfence 2FA Settings page. Two-factor authentication is required for this account, but has not been configured. Two-factor authentication is required for your account, but has not been configured. Two-factor authentication must be activated for this account prior to %s. Two-factor authentication must be activated for your account prior to %s to avoid losing access. Two-factor authentication now has its own IP allowlist. If necessary, you can allow specific IP addresses or ranges to skip 2FA when logging in. Two-factor authentication will be required for user <strong>%1$s</strong> beginning <strong>%2$s</strong>. Two-factor authentication will be required for your account beginning <strong>%s</strong> Type Type: %s U.S. Blocked UA/Hostname/Referrer/IP Range not allowed UA/Referrer/IP Range not allowed URL URL redirected to if the visitor tries to access a nonexistent blog URL to redirect blocked countries to URL to redirect blocked users to URL to the "wp-content" folder URLs Checked UTC Uganda Ukraine Unable to Activate Grace Period Unable to Install Unable to Reset Grace Period Unable to Revoke Grace Period Unable to Uninstall Unable to access available disk space information Unable to accurately detect IPs Unable to authenticate with Wordfence Central. Unable to automatically hide file Unable to communicate with Wordfence Central Unable to determine version for plugin %s Unable to dismiss notice Unable to output phpinfo content because it is disabled Unable to read file contents Unable to remove code execution protections applied to the .htaccess file in the uploads directory. Please check your permissions on that file. Unable to save the .htaccess file needed to disable script execution in the uploads directory. Please check your permissions on that directory. Unable to validate the reCAPTCHA site key. Please check the key and try again. Unavailable Unblock Unblock All Unblock IP Unblock range Unblocking Uninstall Wordfence Firewall Uninstallation from this site was successful! The Wordfence Firewall is still active because it is installed in another WordPress installation. Uninstallation was successful! United Arab Emirates United Kingdom United States United States Minor Outlying Islands Unknown Unknown (mixed plugin version) Unknown AJAX action. Unknown Administrator Unknown Core File Unknown Events Unknown Type Unknown WordPress core version: %s Unknown dashboard data set. Unknown file in WordPress core: %s Unknown file size. Unknown firewall mode. Unlimited Unlock email requested Unspecified Unsubscribe Requested Unsubscribe Successful Unsubscribe from Security Alerts Unsubscription Confirmation Sent Update Block Update Blocked Countries Update Blocked IPs Update Check Encountered Error Update Check Encountered Error on '%s' Update Check Error Update Login Security Options Update Now Update Payment Method Update Wordfence automatically when a new version is released? Update includes security-related fixes. Update interval in seconds Updates Needed Updates Needed (Plugin, Theme, or Core) Updating the .htaccess did not fix the issue. You may need to add <code>Options -Indexes</code> to your httpd.conf if using Apache, or find documentation on how to disable directory listing for your web server. Upgrade Upgrade Now to Access Premium Support Upgrade To Premium Upgrade to Care Upgrade to Premium Upgrade to Response Upgrade to a 24/7 1-hour response time with Wordfence Response Upgrade to hands-on support with Wordfence Care Uruguay Use New 2FA Use PHP's built in REMOTE_ADDR and don't use anything else. Very secure if this is compatible with your site. Use Recommended Value Use low resource scanning (reduces server load by lengthening the scan duration) Use one of these %1$d codes to log in if you lose access to your authenticator device. Codes are %2$d characters long plus optional spaces. Each one may be used only once. Use one of these %s codes to log in if you are unable to access your phone. Codes are 16 characters long, plus optional spaces. Each one may be used only once. Use one of these %s codes to log in if you lose access to your authenticator device. Codes are 16 characters long, plus optional spaces. Each one may be used only once. Use only IPv4 to start scans Use preferred start time Use single-column layout for WooCommerce/shortcode 2FA management interface Use the Cloudflare "CF-Connecting-IP" HTTP header to get a visitor IP. Only use if you're using Cloudflare. Use the X-Forwarded-For HTTP header. Only use if you have a front-end proxy or spoofing may result. Use the X-Real-IP HTTP header. Only use if you have a front-end proxy or spoofing may result. Use the most secure method to get visitor IP addresses. Prevents spoofing and works with most sites. Used Used an invalid username '%s' to try to sign in User User "%1$s" with "%2$s" access has an easy password. User "%s" with 'subscriber' access has a very easy password. User & Option Audit User Added to Multisite Blog User Agent User Capabilities Meta Value Changed User Created User Deleted User Email User ID User IP: %s User Invited to Multisite Blog User Level Meta Value Changed User Logged In User Logged Out User Marked as Spam User Registration Permission Option Changed User Removed from Multisite Blog User Signed Up on Multisite Blog User Summary User Unmarked as Spam User Updated User counts are currently disabled as the most recent attempt to count users failed to complete successfully. User counts are hidden by default on sites with large numbers of users in order to improve performance. User defined scan pattern User hostname: %s User location: User locked out from signing in User login User login blocked for insecure password User/Permissions Username Users Checked Users without 2FA active (%s) Using MySQLi directly. Using cached core hashes Using cached malware prefixes Using low resource scanning Uzbekistan Validation error: 'fields' parameter is empty or not an array. Value Vanuatu Venezuela Verified Google crawlers will not be rate-limited Verifying start request signature. Version %s Very strict. May cause false positives. Vietnam View View Additional Detail View Audit Log View Customisation View Differences View Documentation View File View Option View Recent Traffic View Updates View every issue: View full log View log View users Virgin Islands, British Virgin Islands, U.S. Visit Wordfence Central Vulnerability Information Vulnerability Scan Vulnerability Severity Vulnerability Status WAF .htaccess contents WAF .user.ini contents WAF Currently in Learning Mode WAF File Permissions WAF Loaded Successfully WAF Status WAF auto prepend active WAF log path WAF subdirectory installation WARNING WHOIS LOOKUP WORDFENCE_WAF_PREPEND_DIRECTORY path constant WORDPRESS VERSION: %s WP cron status Waiting for Changes Waiting for it to take effect. This may take up to %s. Wallis and Futuna Warning We are about to change your <em>.htaccess</em> file. Please make a backup of this file before proceeding. We are excited to announce the release of a completely rebuilt two-factor authentication (2FA) feature within Wordfence. 2FA is an important layer of security that protects you from password guessing and credential stuffing attacks. Previously a Premium-only feature, it is now available for sites running the free version of Wordfence. You are now able to enable 2FA for any role, we’ve added a number of important security features, and we’ve significantly improved the admin interface. We can't modify your .htaccess file for you because: %s We cannot read $_SERVER[%s] We could not delete any of the files you selected. We encountered the following errors: %s We could not fetch a core WordPress file from the Wordfence API. We could not find that issue in our database. We could not find that issue in the database. We could not find that user in the database. We could not find your .htaccess file to modify it. We could not get the contents of the original file to do a comparison. We could not get the original file to do a repair. We could not open the requested file for reading. The error was: %s We could not repair any of the files you selected. We encountered the following errors: %s We could not retrieve the original file of %s to do a repair. We could not write to %1$s. (%2$d bytes written) You may not have permission to modify files on your WordPress server. We could not write to %1$s. The error was: %2$s We could not write to that file. You may not have permission to modify files on your WordPress server. We didn't delete anything and no errors were found. We didn't repair anything and no errors were found. We encountered a problem We encountered an error trying load more data. We failed to send a termination request. We found your .htaccess file but could not open it for writing: %s We have updated our policies. To continue using Wordfence, you will need to read and agree to the <a href="%1$s" target="_blank" rel="noopener noreferrer">Wordfence License Terms and Conditions<span class="screen-reader-text"> (opens in new tab)</span></a>, the <a href="%2$s" rel="noopener noreferrer" target="_blank">Services Subscription Agreement<span class="screen-reader-text"> (opens in new tab)</span></a>, and <a href="%3$s" target="_blank" rel="noopener noreferrer">Terms of Service<span class="screen-reader-text"> (opens in new tab)</span></a>, and read and acknowledge the <a href="%4$s" target="_blank" rel="noopener noreferrer">Wordfence Privacy Policy<span class="screen-reader-text"> (opens in new tab)</span></a>. We have updated our policies. To continue using Wordfence, you will need to read and agree to the Wordfence License Terms and Conditions, the Services Subscription Agreement, and Terms of Service, and read and acknowledge the Wordfence Privacy Policy by clicking Review. We received a data structure that is not the expected array when contacting the Wordfence scanning servers and calling the '%s' function. We received a request to email "%s" instructions to unlock their access. If that is the email address of a site administrator or someone on the Wordfence alert list, they have been emailed instructions on how to regain access to this system. The instructions we sent will expire 30 minutes from now. We received an empty data response from the Wordfence scanning servers when calling the '%s' function. We received an error while trying to activate the license with the Wordfence servers: We successfully exported your site options. To import your site options on another site, copy and paste the token below into the import text box on the destination site. Keep this token secret – it is like a password. If anyone else discovers the token it will allow them to import your options excluding your license. We successfully imported the site options. We were unable to create the <code>wordfence-waf.php</code> file in the root of the WordPress installation. It's possible WordPress cannot write to the <code>wordfence-waf.php</code> file because of file permissions. Please verify the permissions are correct and retry the installation. We were unable to generate the user list for your password check. We were unable to make changes to the %1$s file. It's possible WordPress cannot write to the %1$s file because of file permissions. Please verify the permissions are correct and retry the installation. We were unable to make changes to the .htaccess file. It's possible WordPress cannot write to the .htaccess file because of file permissions, which may have been set by another security plugin, or you may have set them manually. Please verify the permissions allow the web server to write to the file, and retry the installation. We were unable to remove the <code>wordfence-waf.php</code> file in the root of the WordPress installation. It's possible WordPress cannot remove the <code>wordfence-waf.php</code> file because of file permissions. Please verify the permissions are correct and retry the removal. We were unable to write to %s which the WAF uses for storage. Please update permissions on the parent directory so the web server can write to it. We've preselected your server configuration based on our tests, but if you know your web server's configuration, please select it now. We've preselected your server configuration based on our tests, but if you know your web server's configuration, please select it now. You can also choose "Manual Configuration" for alternate installation details. Web Application Firewall Web Application Firewall (WAF) Web Application Firewall Allowlisted URLs Web Application Firewall Protection Level Web Application Firewall Rules Web Application Firewall Status Web Application Firewall is disabled Web server exposes the document root Wednesday Week Weekdays Weekends Western Sahara What can we do to improve Wordfence Security? What to Block What to do when we block someone What to do when we block someone visiting from a blocked country When enabled, a Wordfence 2FA tab will be added to the WooCommerce account menu which will provide access for users to manage 2FA settings outside of the WordPress admin area. Testing the WooCommerce account interface after enabling this feature is recommended to ensure theme compatibility. When enabled, reCAPTCHA and 2FA prompt support will be added to WooCommerce login and registration forms in addition to the default WordPress forms. Testing WooCommerce forms after enabling this feature is recommended to ensure plugin compatibility. When enabled, the "wordfence_2fa_management" shortcode may be used to provide access for users to manage 2FA settings on custom pages. When enabled, the 2FA management interface embedded through the WooCommerce integration or via a shortcode will use a vertical stacked layout as opposed to horizontal columns. Adjust this setting as appropriate to match your theme. This may be overridden using the "stacked" attribute for individual shortcodes. When enabled, the last login timestamp will be displayed for each user on the WP Users page. When used in conjunction with reCAPTCHA, the most recent score will also be displayed for each user. When you first install the Wordfence Web Application Firewall, it will be in learning mode. This allows Wordfence to learn about your site so that we can understand how to protect it and how to allow normal visitors through the firewall. We recommend you let Wordfence learn for a week before you enable the firewall. Where to email alerts While in test mode, reCAPTCHA will score login and registration requests but not actually block them. The scores will be recorded and can be used to select a human/bot threshold value. Whois Lookup Windows (IIS) WooCommerce & Custom Integrations WooCommerce 2FA Integration Toggled WooCommerce appears to be installed, but the Wordfence Login Security WooCommerce integration is not currently enabled. Without this feature, WooCommerce forms will not support all functionality provided by Wordfence Login Security, including CAPTCHA for the login page and user registration. WooCommerce integration WordPress "drop-in" plugins that are active. WordPress "mu-plugins" that are always active, including those provided by hosts. WordPress (v%s) WordPress Configuration File WordPress Core File WordPress Plugins WordPress Settings WordPress Time Zone WordPress admin cookie path WordPress base path WordPress cookie domain WordPress cookie path WordPress core file modified: %s WordPress debug mode WordPress error display override WordPress error logging override WordPress memory limit WordPress plugins cookie path WordPress query debug mode WordPress script debug mode WordPress site cookie path WordPress version %s is now available for your site's current branch. Please upgrade immediately to get the latest fixes and compatibility updates from WordPress. WordPress version %s is now available for your site's current branch. Please upgrade immediately to get the latest security updates from WordPress. WordPress version %s is now available. Please upgrade immediately to get the latest fixes and compatibility updates from WordPress. WordPress version %s is now available. Please upgrade immediately to get the latest security updates from WordPress. WordPress version and internal settings/constants. WordPress version too old Wordfence Wordfence - Securing your WordPress Website Wordfence 2FA Wordfence 2FA Active Wordfence 2FA Code Wordfence 2FA is active. Wordfence 2FA is inactive. Wordfence 2FA: Required change for legacy 2FA on %s Wordfence Activity Log Wordfence Alert Wordfence Assistant Wordfence Assistant Present Wordfence Assistant is currently installed and is not needed unless instructed by Wordfence support Wordfence Care Wordfence Central Wordfence Central Installation Process Wordfence Central Status Wordfence Central allows you to manage Wordfence on multiple sites from one location. It makes security monitoring and configuring Wordfence easier. Wordfence Central is not connected, which is required for recording of audit log events. Wordfence Central secret key has not been created yet. Wordfence Central site ID has not been created yet. Wordfence Dashboard Wordfence Deactivated Wordfence Firewall & Care License Enabled Wordfence Firewall & Premium Enabled Wordfence Firewall & Response License Enabled Wordfence Firewall Activated Wordfence Firewall Deactivated Wordfence Firewall blocked a background request to WordPress for the URL %s. If this occurred as a result of an intentional action, you may consider allowlisting the request to allow it in the future. Wordfence Free Wordfence Full Activity Log Wordfence Global Options Wordfence License Wordfence License Installation Failed Wordfence License Installation Successful Wordfence Live Activity: Wordfence Live Traffic shows you what is happening on your site in real-time, including user logins, hack attempts, and requests that were blocked by the Wordfence Firewall. You can choose to log security-related traffic only or all traffic. Traffic is logged directly on the server, which means it includes visits that don't execute JavaScript. Google and other JavaScript-based analytics packages typically only show visits from browsers that are operated by a human, while Live Traffic can show visits from crawlers like Google and Bing. Wordfence Login Security Wordfence Login Security Installed Wordfence Network Wordfence Network Time Wordfence Network Time Offset Wordfence Premium Wordfence Protection Activated Wordfence Response Wordfence Scan & Care License Enabled Wordfence Scan & Premium Enabled Wordfence Scan & Response License Enabled Wordfence Scan Deactivated Wordfence Scan Enabled Wordfence Security Wordfence Security - Anti-virus, Firewall and Malware Scan Wordfence Settings Wordfence System Info Wordfence Table Check Wordfence Test Email Wordfence Upgrade not run. Please modify your .htaccess Wordfence Upgraded to version %s Wordfence Version Wordfence WAF Allow Entry Created Wordfence WAF Allow Entry Deleted Wordfence WAF Allow Entry Toggled Wordfence WAF Blocklist Toggled Wordfence WAF Deactivated Wordfence WAF Mode Changed Wordfence WAF Protection Level Changed Wordfence WAF Rule Status Changed Wordfence activity for %1$s on %2$s Wordfence activity from <br><strong>%1$s</strong> to <strong>%2$s</strong> Wordfence activity in the past %s Wordfence automatically allowlists <a href="%s" target="_blank" rel="noopener noreferrer">private networks<span class="screen-reader-text"> (opens in new tab)</span></a> because these are not routable on the public Internet. Wordfence cannot detect if the installed plugins and themes are up to date. This might be caused by a PHP compatibility issue in one or more plugins/themes. Wordfence cannot detect if this plugin/theme is up to date. This might be caused by a PHP compatibility issue in the plugin. Wordfence could not find a saved cron key to start the scan so assuming it started and exiting. Wordfence could not find your .htaccess file. Wordfence could not get the attack signature patterns from the scanning server. Wordfence could not read the content of your WordPress directory. This usually indicates your permissions are so strict that your web server can't read your WordPress directory. Wordfence could not start a scan because the cron key does not match the saved key. Saved: %1$s Sent: %2$s Current unexploded: %3$s Wordfence country blocking is currently set to block the United States. We recommend allowing access from the United States for Google and other benign crawlers, unless you choose to only block the login page. Wordfence country blocking is designed to stop an attack, prevent content theft, or end malicious activity that originates from a geographic region in less than 1/300,000th of a second. Blocking countries who are regularly creating failed logins, a large number of page not found errors, and are clearly engaged in malicious activity is an effective way to protect your site during an attack. Wordfence encountered an internal error executing that request. Wordfence error: No encryption key found! Wordfence file scanner detected a possible infinite loop. Exiting on file: %s Wordfence found the following new issues on "%1$s" (%2$d existing issue was also found again). Wordfence found the following new issues on "%1$s" (%2$d existing issues were also found again). Wordfence found the following new issues on "%1$s". Wordfence generated an error on activation. The output we received during activation was: Wordfence has blocked IP address %s. Wordfence installation is incomplete Wordfence is a security plugin installed on over 5 million WordPress sites. The owner of this site is using Wordfence to manage access to their site. Wordfence is already installed on this site. If you need to replace the current license, you may do so by visiting the "All Options" page of the Wordfence menu. Wordfence is blocking these attacks, and we're sending this notice to make you aware that there is a higher volume of the attacks than usual. Additionally, the Wordfence Real-Time IP Blocklist can block known attackers' IP addresses automatically for Premium users, including any probing requests that may not be malicious on their own. All Wordfence users can also opt to block the attacking IPs manually if desired. As always, be sure to watch your scan results and keep your plugins, themes and WordPress core version updated. Wordfence is configured to send no more than %d alert(s) each hour. That limit has been reached and no further emails will be sent this hour. Wordfence is working... Wordfence lets you take control of protecting your site with powerful blocking features. Block traffic based on IP, IP range, hostname, browser, or referrer. Country blocking is available for Premium customers. Wordfence protects your site from password-guessing attacks by locking out attackers and helping you avoid weak passwords. Wordfence received malformed attack signature patterns from the scanning server. Wordfence scan failed because of license site URL conflict Wordfence scan script accessed directly, or WF did not receive a cronkey. Wordfence scan starting at %s from Wordfence Central Wordfence two-factor authentication is currently active on the account <strong>%s</strong>. You may deactivate it by clicking the button below. Wordfence two-factor authentication is currently active on your account. You may deactivate it by clicking the button below. Wordfence used %1$s of memory for scan. Server peak memory usage was: %2$s Wordfence was unable to validate a test request to your website. This can happen if your website is behind a proxy that does not use one of the standard ways to convey the IP of the request or it is unreachable publicly. IP blocking and live traffic information may not be accurate. <a href="%s" target="_blank" rel="noopener noreferrer">Get More Information<span class="screen-reader-text"> (opens in new tab)</span></a> Wordfence will make one attempt to resume each failed scan stage. This scan may recover if this attempt is successful. Wordfence will make up to %d attempts to resume each failed scan stage. This scan may recover if one of these attempts is successful. Wordfence's Web Application Firewall has been unexpectedly disabled. If you see a notice at the top of the Wordfence admin pages that says "The Wordfence Web Application Firewall cannot run," click the link in that message to rebuild the configuration. If this does not work, you may need to fix file permissions. <a href="%s" target="_blank" rel="noopener noreferrer">More Details<span class="screen-reader-text"> (opens in new tab)</span></a> Wordfence's license key is missing. Wordfence's terms of service and Privacy Policy have changed Wordfence: All recent hits for IP address %s Wordfence: File Viewer Wordfence: Viewing File Differences Would you like WordPress security and vulnerability alerts sent to you via email? XML-RPC Interface Toggled XML-RPC Requires 2FA Toggled XML-RPC authentication is disabled. Jetpack is currently active and requires XML-RPC authentication to work correctly. <a href="%s">Manage Settings</a> Yemen Yes Yes Please Yes, enable auto-update. You are about to deactivate Wordfence. Would you like to delete its data or keep it in place? You are currently running the WAF from another WordPress installation. These rules can be disabled or enabled once you configure the firewall to run correctly on this site. You are currently running the WAF from another WordPress installation. This option can be changed once you configure the firewall to run correctly on this site. You are currently running the Wordfence Web Application Firewall from another WordPress installation. You are currently running the Wordfence Web Application Firewall from another WordPress installation. Please <a href="%s">click here</a> to configure the Firewall to run correctly on this site. You are currently running the Wordfence Web Application Firewall from another WordPress installation. Please configure the firewall to run correctly on this site. You are running PHP version %1$s that is not supported by Wordfence %2$s. Wordfence features will not be available until PHP has been upgraded. We recommend using PHP version 8.1, but Wordfence will run on PHP version %3$s at a minimum. You are running WordPress version %1$s that is not supported by Wordfence %2$s. Wordfence features will not be available until WordPress has been upgraded. We recommend using the current version of WordPress, but Wordfence will run on WordPress version %3$s at a minimum. You are running WordPress version %1$s, which is not supported by the Wordfence Audit Log. In order to use it, please upgrade to at least WordPress version %2$s. You are running the LiteSpeed web server and Wordfence can't determine whether "noabort" is set. Please verify that the environmental variable "noabort" is set for the local site, or the server's global External Application Abort is set to "No Abort". You are temporarily locked out You are using Nginx as your web server. You'll need to disable autoindexing in your nginx.conf. See the <a target='_blank' rel='noopener noreferrer' href='https://nginx.org/en/docs/http/ngx_http_autoindex_module.html'>Nginx docs for more info</a> on how to do this. You are using an Nginx web server and using a FastCGI processor like PHP5-FPM. You will need to manually delete or hide those files. You are using an Nginx web server and using a FastCGI processor like PHP5-FPM. You will need to manually modify your php.ini to disable <em>display_error</em> You can <a class="wf-onboarding-link" href="%s" target="_blank">get a new free license<span class="screen-reader-text">(opens in new tab)</span></a> for this site directly, or click the "Get a free license" button at the top of the Licenses page when logged in to wordfence.com if you need more than one. You can also read the documentation to learn about Wordfence's blocking tools, or visit wordfence.com to learn more about Wordfence. You can find more details on alternative setup steps, including installation on SiteGround or for multiple sites sharing a single php.ini, <a href="%s" target="_blank" rel="noopener noreferrer">in our documentation<span class="screen-reader-text"> (opens in new tab)</span></a>. You can log in to <a href="%s" target="_blank" rel="noopener noreferrer">wordfence.com<span class="screen-reader-text"> (opens in new tab)</span></a> to accept the updated terms and Privacy Policy for all of your license keys at once. You can proceed with the installation and we will include this from within our <code>wordfence-waf.php</code> file which should maintain compatibility with your site, or you can opt to override the existing PHP setting. You can't block your own IP address. You do not currently have two-factor authentication active on your account, which will be required beginning %1$s. <a href="%2$s">Configure 2FA</a> You do not have permission to activate 2FA. You do not have permission to activate the given user. You do not have permission to change options. You do not have permission to deactivate 2FA. You do not have permission to deactivate the given user. You do not have permission to disable NTP. You do not have permission to dismiss this notice. You do not have permission to generate new recovery codes for the given user. You do not have permission to generate new recovery codes. You do not have permission to manage 2FA settings for your account. You do not have permission to perform this action. You do not have permission to reset reCAPTCHA statistics. You do not have permission to reset the 2FA grace period. You do not have permission to reset the NTP failure count. You do not have permission to revoke the 2FA grace period. You do not have permission to send notifications. You don't have permission to repair %s. You need to either fix the file manually using FTP or change the file permissions and ownership so that your web server has write access to repair the file. You don't have permission to repair .htaccess. You need to either fix the file manually using FTP or change the file permissions and ownership so that your web server has write access to repair the file. You forgot to include a reason you're blocking this IP range. We ask you to include this for your own record keeping. You have %d new Wordfence notification. You have %d new Wordfence notifications. You have %s disk space remaining You have been temporarily locked out of this system. This means that you will not be able to log in for a while. You have just installed the Wordfence Login Security plugin. It contains a subset of the functionality found in the full Wordfence plugin: Two-factor Authentication, XML-RPC Protection and Login Page CAPTCHA. You have successfully installed Wordfence %s You have successfully installed a free license. You have unsaved changes to your options. If you leave this page, those changes will be lost. You have used this form too much. Please wait 3 minutes and try again. You may close this alert and try again later, or click the button below to register for a new free Wordfence license. You may wait for the next automatic attempt at %1$s or try to <a href="%2$s">Manually Update</a> by clicking the "Manually Refresh Rules" button below the Rules list. You may wait for the next automatic attempt at %s or log into the parent site to manually update by clicking the "Manually Refresh Rules" button below the Rules list. You may wait for the next automatic attempt or log into the parent site to manually update by clicking the "Manually Refresh Rules" button below the Rules list. You may wait for the next automatic attempt or try to <a href="%s">Manually Update</a> by clicking the "Manually Refresh Rules" button below the Rules list. You must install a license to continue using Wordfence. You must select either "Yes" or "No" You need to upgrade "%s" to the newest version to ensure you have any security fixes the developer has released. You only have %s of your disk space remaining. Please free up disk space or your website may stop serving requests. You will be reminded again in 12 hours. You will not be able to preview events and events will not record to Wordfence Central. You'll find this icon throughout the plugin. Clicking it will show you the options and features for each section of Wordfence. From the dashboard, you can find the Global Options for Wordfence such as alerts, automatic updates, and managing your site's Premium License. You've optimised configurations for this feature! If you want to learn more about how this score is determined, click the link below. Your 'How does Wordfence get IPs' setting is misconfigured. Your .htaccess has been updated successfully. Please verify your site is functioning normally. Your IP with this setting Your Premium Wordfence License expires in 1 day. Your Premium Wordfence License expires in 2 days. Your Premium Wordfence License expires in less than 2 weeks. Your Premium Wordfence License expires in less than a week. Your Premium Wordfence License is set to auto-renew in 10 days. Your WordPress version is out of date Your Wordfence License Your Wordfence Premium License has Expired! Your Wordfence activity log was sent to %s Your Wordfence installation has been upgraded to version %s Your access to this service has been limited. (HTTP response code 503) Your access to this service has been temporarily limited. Please try again in a few minutes. (HTTP response code 503) Your access to this site has been limited Your access to this site has been limited by the site owner Your access to this site has been temporarily limited by the site owner Your browser sent an invalid security token to Wordfence. Please try reloading this page or signing out and in again. Your browser sent an invalid security token. Please try reloading this page. Your computer's time: Your computer's time: Your options have been saved, but you left your license key blank, so we tried to get you a free license key from the Wordfence servers. There was a problem fetching the free key: Your options have been saved. However we noticed you changed your license key, and we tried to verify it with the Wordfence servers but received an error: Your options have been saved. However we tried to verify your license key with the Wordfence servers and received an error: Your request was received Your rules have been updated successfully. Your rules have been updated successfully. You are currently using the free version of Wordfence. Upgrade to Wordfence premium to have your rules updated automatically as new threats emerge. <a href="https://www.wordfence.com/wafUpdateRules1/wordfence-signup/">Click here to purchase a premium license</a>. <em>Note: Your rules will still update every 30 days as a free user.</em> Your site is currently linked to Wordfence Central under a different site URL. Your site is currently using the "Wordfence Login Security” plugin. Your site is listed on a domain blocklist. Your site is listed on the Wordfence domain blocklist. Your site is still using this plugin, but it is not currently available on wordpress.org. Plugins can be removed from wordpress.org for various reasons. This can include benign issues like a plugin author discontinuing development or moving the plugin distribution to their own site, but some might also be due to security issues. In any case, future updates may or may not be available, so it is worth investigating the cause and deciding whether to temporarily or permanently replace or remove the plugin. Your site is using a PHP version (%1$s) that is no longer supported by Wordfence and needs to be updated. We recommend using the newest version of PHP available but will currently support PHP versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. Your site is using a PHP version (%1$s) that will no longer be supported by Wordfence in an upcoming release and needs to be updated. We recommend using the newest version of PHP available but will currently support PHP versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. Your site is using a WordPress version (%1$s) that is no longer supported by Wordfence and needs to be updated. We recommend using the newest version of WordPress but will currently support WordPress versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. Your site is using a WordPress version (%1$s) that will no longer be supported by Wordfence in an upcoming release and needs to be updated. We recommend using the newest version of WordPress but will currently support WordPress versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. Your test email was sent to the requested email address. The result we received from the WordPress wp_mail() function was: Zambia Zimbabwe [invalid] [none] `runInstall` called with previous version = %s a Wordfence Central user a moment allowlisted and and %d additional attacks and %d more and attempted a <span class="wf-error-text">failed login</span> as %s. and attempted a <span class="wf-error-text">failed login</span> using an invalid username <strong>%s</strong>. and changed their password. and logged in successfully as "<strong>%s</strong>". and logged out successfully. and requested a password reset. and set a cookie that will bypass all country blocking. and tried to access a <span class="wf-error-text">non-existent page</span> and visited and was and was redirected when visiting arrived from at block it blocked access via country blocking blocked access via country blocking and redirected to URL (%s) blocked by firewall blocked by firewall for %s blocked by real-time IP blocklist blocked by the Wordfence Security Network blocked for %s cURL Features Code cURL Host cURL SSL Version cURL Support Protocols cURL libz Version contains day days days e.g., *.amazonaws.com or *.linode.com e.g., *badRobot*, *MSIE*, or *browserSuffix e.g., *badwebsite.example.com* e.g., /my-account/ e.g., 192.168.200.200 - 192.168.200.220 or 192.168.200.0/24 each Wordfence installation should have a unique key false getHits got invalid hitType: %s getMaxExecutionTime() returning config value: %s getMaxExecutionTime() returning default of: 15 getMaxExecutionTime() returning half ini value: %d host setting hour hours hours https://www.wordfence.com/ ini value of %1$d is higher than value for WORDFENCE_SCAN_MAX_INI_EXECUTION_TIME (%2$d), reducing just now left less than 1 second less than a minute locked out from logging in lowercase match minute minutes minutes month months months opens in new tab or reCAPTCHA reCAPTCHA Score History reCAPTCHA Threshold Changed reCAPTCHA human/bot threshold score reCAPTCHA test mode is enabled. While enabled, login and registration requests will be checked for their score but will not be blocked if the score is below the minimum score. <a href="%s">Manage Settings</a> reCAPTCHA v3 Secret reCAPTCHA v3 Site Key reCAPTCHA v3 does not make users solve puzzles or click a checkbox like previous versions. The only visible part is the reCAPTCHA logo. If a visitor's browser fails the CAPTCHA, Wordfence will send an email to the user's address with a link they can click to verify that they are a user of your site. You can read further details <a href="%s" target="_blank" rel="noopener noreferrer">in our documentation</a>. redirected to bypass URL regular case second seconds seconds then then redirect that user to then set a cookie that will bypass country blocking in the future in case that user hits the site from a blocked country. throttle it to manually update it. true visit the options page wfConfig::set() got an array as second param with key: %1$s and value: %2$s wordfence-waf.php path wp_mail from address is incomplete, attempting to fix wp_remote_post() test back to this server failed! Response was: wp_remote_post() test to noc1.wordfence.com failed! Response was: year years