�� �
U / �� �� ' �� ) �� ' � * 3�
^� l� �� % �� $ �� �� &
� J 4� a � + �� 1
� ?� & W� ~� �� & �� 7 �� � � j 1� �� I �� F �� w >� ! �� } ��
V� d�
y� �� N �� N �� 5� I� ]� $ x� * �� �� �� �� �� � � 4� P� H o� � �� � @� - �� �� ��
� � #� -� <� F� N L� �� �� �� �� �� �� �� X � & e� / �� . �� �� � �
� � � )� -� 1� 5� 9� N� X� w� �� $ �� �� ��
�� �� �� � �
.� 9� Y�
a� o�
v� � �� �
� �� ) �� > �� | � �� �� , *� . W� , �� u �� 4 )� 0 ^� 2 �� / � % � v � � �� � � � � � � d � t 6� � �� m �� K �� � J� � �� � �� V ) 7 � � � � J V � � 1 > � � � � � � � H � � � � ( G � p !
�
t � � � � � i
� T s � = i e � f
� t � � � � K � � J � � � � � � E � % . * . Y - � E � � � E � F � 1 @ d r : � > ! � Q! � Q" � �" � b# M �# G 8% d �% X �% � >& . ' � L' = ( U( e( > h( $ �( 3 �( f ) g) G w) �) �) �) * * * % .* T* [* u* �* �* �* �* �*
�* �*
+ "+ 8+ H+ [+ l+ ~+ �+ ) �+ �+ �+ �+ , - , C, _, ! n, �, �, �, �, �, - + - $ 3-
X- f- n- ' �- 8 �- E �- < +. = h. # �. T �. + / < K/ �/
�/ �/ �/ �/ �/ D �/ 0 00 z <0 ; �0 � �0 �1 � �2 E s3 � �3 $ �4 �4 �4 ( �4 . #5 � R5 � �5 �7 �7 �7 % �7 8 08
B8 P8 f8 5 u8 # �8 6 �8
9 D : � V: = ; ! P; G r; �; ; �; + < 1 4< 4 f< + �< . �< 0 �< '= ;= 3 Q= ^ �= ` �= W E> Q �> D �> ' 4? $ \? " �? �? , �? + �? ) @ ) H@ r@ A �@ * �@ A . A OA iA 6 �A 2 �A , �A B %B ,B
5B @B j TB 5 �B �B
C C 6 *C / aC > �C �C E �C b 7D �D � �D � oE �E � G � �G � H � I � �I X �J J 5K �K �K �K �K � �L 4 �M �M G �M 0N :N BN YN oN
�N �N
�N ' �N �N �N �N � O �O ? �O W �O
JP UP ZP 3 gP �P * �P �P � �P �Q �Q
�Q �Q �Q �Q �Q R +R v @R �R �R �R �R �R �R � �R �S �S �S �S �S B �S
T
T (T =T
PT * [T D �T �T I �T F 1U F xU > �U 7 �U 6V >V & RV yV ( �V % �V �V % �V $ W ! 4W A VW ) �W 1 �W * �W ' X % GX - mX �X �X �X �X �X �X �X Y Y ( &Y OY _Y ! gY �Y �Y �Y
�Y �Y �Y
�Y �Y Z Z *Z AZ _Z pZ yZ �Z � �Z
V[ d[ $ t[ / �[ �[ 6 �[ \ 3\ <\ E\ L\ S\ b\ = n\ : �\
�\ �\ �\
] +] % E] � k] J^ c^
h^ v^ H �^ + �^ - �^ 7 #_ . [_ A �_ ) �_ ) �_ ` % @` 9 f` �` ( �` % �` ' a 0a Ma ! ga / �a + �a = �a > #b 8 bb 6 �b 8 �b 8 c : Dc 8 c # �c E �c E "d D hd D �d ? �d ? 2e + re + �e . �e G �e 6 Af , xf * �f �f �f �f �f �f g + g ! Bg dg 5 |g ? �g ' �g s h G �h �h + �h ) i Ei ci 9 zi �i �i �i �i �i �i �i > �i < >j 1 {j 1 �j �j �j k 4 k Pk ik |k �k �k % �k [ �k � 1l �l �l �l �l & m ' 3m % [m �m �m �m �m �m �m ? �m �m n
*n 5n / Bn G rn + �n / �n T o ; ko �o 3 �o 3 �o : &p ( ap K �p ' �p 5 �p ^ 4q A �q �q n �q & [r �r $ �r 4 �r �r
�r �r s s #s :s Bs Ks ^s fs ps |s & �s �s �s �s �s �s t 7 .t ft �t �t �t �t �t �t �t u -u Hu cu �u �u �u �u �u v v ,v 6v � Uv w #w 3w Dw [w < nw �w �w
�w �w �w �w x 6 $x 1 [x / �x o �x -y 4y Oy [y 5 hy
�y �y 0 �y Q �y ;z : Yz �z �z �{ �{ �{ �{ �{ �{ �{ (
| 3| - P| ~| �| �| 3 �| �| } !~ )~ , B~ ' o~ �~ �~ �~ �~ �~ - &
T _ o � 4 �
� � � � &� G� e� �� �� �� ݀ � L � 4� _ Q� � �� � {� 7 �
H� � V� %� .� A� 6 Q� 0 �� �� �� Έ � �� � � $� 9� Q� � k� � *� � ʊ � �� ( !� J� R� W� j� % � C �� � � � � s� �� � #� ;� X� r� $ �� @ �� 0 � 8 � 9 Q� �� 4 �� ʑ ё � � (� 8� I� ! c� �� �� * �� + � � , 1� j ^� * ɓ � 8 � N� n� 0 �� / �� � � 9 � D M� B �� E Օ � #� :� 2 R� �� �� �� ʖ % � 4
� ?� N� i� �� s �� 2 � 6 ;� O r� љ � �� � � � .� E� X� x� �� �� Ś ٚ � $ � .� B� B V� �� > �� 8 �� ! 1� / S� 2 �� �� �� ǜ Μ
ޜ ? � E )� G o� v �� N .� K }� C ɞ @
� � N� : � I -� # w�
�� # ��
͠ ؠ
� �� � &� ? 8� 0 x� : �� � � �� �� �� �� Σ գ � � �
:� > H� �� �� 0 ¤ 3 � ' '� O� T� Y� r� �� �� ��
�� ĥ � < � * ,� ! W� % y� & �� Ʀ ۦ 7 � ,� @�
Q� \� e� o� �� �� �� �� ! Χ � ( � 9� A� J� [� m� �� �� �� �� U ɨ � ?� - O� h }� 6 � 4 � c R� # �� A ڪ ) � . F� u� 6 �� ȫ ϫ � � )� 0� G�
T� b� s� �� �� �� �� �� ɬ ; ެ � +� 1� 8� M� " U� x� �� 5 �� خ � � � +� H�
b� p� x� �� " �� ! �� ί ԯ ޯ � �
� $� 1� 7� L�
P� [� C k� - �� ݰ ) � - � <� P� W� � a� G� O�
Y� d� i� s� |�
�� �� D �� g ݲ / E� u� �� �� �� ! �� ˳ � г Z� d� {� �� �� �� �� δ � �� �� � $� ?� " U� x� 7 �� 6 ˵ % � (� ?� N�
T� _� f� n� q�
}� �� �� �� �� �� Ͷ � 5 � , !� 2 N� �� �� �� �� , �� � * �� *� K F� � �� � �� k 1� ` �� _ �� � ^� � @
� � N� � �
ӽ * � J � 6 W� 0 �� f �� ] &� � �� R U� [ �� m � � r� � Q� � �� ^� e� m� �� ��
��
�� �� ��
� � � -� D 5� � z� 1 S� , �� G �� & �� !� 8 3� l� : �� > �� A �� � >� � �� z� �� �� H �� �� �� � � "� :� D� Z� l� t� �� �� �� 6 �� ! � #� 7� I� a� u� �� �� 4 �� w � ~� ( �� �� A �� ( � L B� + �� ( �� E �� E *� p� �� �� �� �� �� �� �� �� �� � k � / �� � �� j b� = �� � '� -� 5� ;� M� T� X�
_� j� p� u� ~� ��
�� �� �� �� �� �� �� ��
� � � )� >� S� d�
k� v� * �� ; �� A �� ; .� L j� @ �� ? �� > 8� C w� N ��
� � .� E� T� ' \� � �� � 7 � r L� �� �� �� �� �� � $� 6� P� h� }�
�� 9 �� �� �� G �� . :� + i� ? �� �� �� �� �� : � L� 9 `� � �� = ~�
�� �� �� 0 �� & �
2� =� X� `� j� t�
��
��
�� �� �� �� G �� 4 *� 8 _� . �� * �� I �� ; <� x� . �� �� �� �� � �� �� �� 6 ��
�� �� ��
�� � � � &� /� 4� :� G� a� v� ; ��
�� �� �� �� � "� 8� G� V� t� �� ��
�� + �� �� L �� ( F� h o� �� �� � ,� L� c�
{� D �� E �� �
%�
0� ;� & E� 3 l� % �� * �� + �� � %� ,� F� , _� �� �� �� 3 �� �� � � � '� @� X� a� v� }� �� ' �� ! �� S �� a +� g �� ��
� �
� $� B� S�
[� f� |� �� �� 8 �� G �� 2 5� ! h� �� �� �� �� � �� * I� A t� �� �� �� �� �� �� . �� � !� -� ?� E�
I� W� m� �� �� �� $ �� �� �� � � &� ?� Y� ) c� �� �� �� �� & �� � �
�
�� � � ; � " \� � " �� �� � �� # � :� / S� & �� �� �� $ � �� � $ !� F� X� # u� �� x �� Z &� �� �� �� � � g � R n� s �� 5� ( J�
s� & ~� 2 �� � � ��
� � � %� 4� @� Y� `� 4 l� / �� � � l� y� ��
�� ! �� � � � ! � 5 � I� N�
Q�
\� g� t� I �� N � H � M b� � �� @ � 7 � ) E e � � + � 1 � � \ � i % ' 6 ^ m 1 v & � ? � & # J ] ` / j � > � � � - 4 E N
T � _ 7 * ( b � � M � * 2 I a x � � � �
� 0 � � & � * �
. �
U �
E ) T # ~ � � $ F < k � � q C
v �
, � D V . P � W � # . R c o { �
� � � � 4 � % . � 6 � � � & ! , # N r | � � � � � � * E } U } � 4 Q > � > � 2
' @
h v �
� � � * � � % 9 - . g � 8 � � � � � # 8 )
b � p ' M @ � X � � � 6 T p �
� ) � & � � �
? [ � b
6 D K g , t R � � ; O o ~ �
� W � : I f | + � 0 � � � - 7 V
v � � � 2 �
� / � & ! : 2 \ � � 3 � � ! '! /! 0 6! g! |! �! �! �! �!
�! �! �! �!
�! " '" 0"
:" E" `" s" z" �" � �" S A# �# �# �# �# �# �# �# $
#$ .$ D$ M$ Z$ _$ ; l$ 8 �$ �$ �$ n �$ d% z% �% �% �% �% �% �% &
& & 5& ?& ^ K& 9 �& F �& = +' 6 i' Z �' �' 7 ( H( = f( % �( . �( 1 �( W +) @ �) . �) , �) < * ? ]* 6 �* q �* v F+ 9 �+ : �+ ! 2, ! T, 2 v, �, �, � �, 8 u- * �- B �- . > 4. s. B �. �. 0 �. ' / . 8/ $ g/ 5 �/ 9 �/ 6 �/ 30 / T0 2 �0 $ �0 6 �0 1 - /1 $ ]1 & �1 �1 �1 4 �1 2 : 2 ' Y2 ( �2 �2 �2 �2
�2 S �2
C3 N3 9 a3 # �3 �3 �3 R �3 84 =4 R4 l4 |4 " �4 A �4 �4 5 x 5 ' �6 �6 �6 �6 �6 �6
7 ) 7 � 87 s �7 C8 K8 c X8 % �8 ( �8 9 9
!9 ,9 89 N9 W9 c a9 �9 �9 $ �9
: � -: � ; �; �; �; �; + < ;< @<
H< V< & i< �< �< = �< A �< ;= O= o= �= �= �= �= E �= < �= S 7> 3 �> ) �> �>
�> �> , ? 8? D? T? Z?
_? j? " ? �? �? �? 0 �? %@ /@
8@ F@ 8 d@ �@ �@ f �@
)A ! 4A ( VA Z A �A �A G B HB eB �B
�B �B �B �B �B �B C C
8C CC ^C yC C �C �C � �C ?D HD _D iD pD wD �D �D D �D �D ( E & )E PE
WE D bE �E �E �E �E ' F + 3F _F 5 |F 9 �F E �F 2G 2 ;G 1 nG Z �G � �G H �H - I � =I � $J K � �K � 5L { �L mM 9 �M L �M 2 N 4 CN 1 xN �N �O �P Q � Q S �Q � >R � �R � �S U (T } ~T 2 �U ~ /V �V < �W D X R PX 5 �X 9 �X - Y 2 AY e tY � �Y F �Z + �Z � �Z � �\ r .] � �] � i_ ^ ` � _a Xb ub " �b J �b c % c 5 Bc & xc 2 �c 3 �c P d I Wd " �d a �d < &e ce 0 �e �e ] �e � 'f c �f 7 ?g � wg � i t j xk $ �k O �k P l > Xl J �l � �l ' �p � �p � �q T zr | �r Y Ls �s 6 �s �s � u Y �u � �u � �v � #w � �w �x J �y � z | | B 4| * w| . �| . �| } � }
�}
�} �} �}
�} �} ~ /~ N~ U~ R j~ �~ C �~ % " & H ) o + � 2 � H � - A� � o� U � T ]� � �� L R� � �� c .� ` �� I � y =� \ �� L � C a� � �� F� � Ɖ � u� b '� V �� � � _ l� � ̏ � �� �� # �� � �� " E� 1 h� � �� � �� � 5� L � � ?� � X �� � R� m ݛ � K� � � � �� � @� � � � �� � � { �� u � 8 �� � š � O� � � � �� c <� > �� ߤ � � � )�
.� ) 9� c� i� u� 5 {� P �� H � K K� � �� j �� � � ҩ � � * �� S ߬ 3� 7� =� O� T� \� n� t� �� �� �� �� ȭ � �� 0 � :� J� c�
i� w� �� �� / �� { ܮ � X� C� # X� ! |� 3 �� # Ұ ��
� � $� ,� 4� ;� H� a� z� �� �� �� �� ! �� 2 � � 0 6� ~ g� � � � �� N� S� Y� b� �� C �� $ ˵ � � 0� 5� B� F� M� U� 1 i� �� . �� ! � � � � �� N ,� ' {� �� �� ��
ø
θ
ܸ � � � � 2� ¹ � ��
� $ � 8� @� _� u� �� " �� �� Ժ " � � &� ' =� e� o� �� �� �� �� � � � -�
K� V� > l� ' �� Ӽ . � � 0� ' ?� � g� :� % B� h� {� �� m �� � � P 0� � �� � )� � � r� k �� c �� ] [� j �� d $� �� / �� [ �� � 4 � < T� ��
��
�� �� �� �� �� ��
� �
:� ( E� n� t� }�
�� �� �� �� ��
�� >
� I� O� W� 1 a� " ��
�� �� �� �� �� �� � � &� 2� F� S� / e� �� �� �� �� �� � � ;�
P� [� s� �� �� �� �� �� 6 �� � -� i 5� � �� 7 �� �� Z �� @ ;� - |� , �� � �� 3 l� * �� F �� 2 � C E� Z �� = �� v "� / �� f �� 3 0� 3 d� � �� $� . =� ( l� B �� � �� + b� f �� V �� D L� * �� T �� � A 0� � r� I <� �� � �� � 1� � �� �� �� ) �� ) �� � 9� $ Y� $ ~� �� �� �� �� �� �� @ �� � 5� �� �
� ��
�� � �� , �� Q �� O� _� |� �� �� �� �� �� �� � '� H� ]� ~� �� �� �� �� � t &� 2 �� �� �� + �� � 3� L� g� ~� & �� �� � �� 6 e� 3 �� �� �� ( �� #� @� � _� (� D� ]� % o� ) �� �� �� �� " � 1� C� Z� x� $ �� �� �� �� : � <� R� h� 7 }� �� �� �� # � J &� ! q� _ �� - �� O !� � q� S )� � }� � � ? �� ) �� M �� � B� 3 � Y 6� $ �� $ �� � � p� � �� [� z ]� P � : )� I d� 4 �� � � | s� J � � ;� � � < f� , �� � # � x � � "
& 1 Y J � � � Q � � � � � W C
b � m � � � � � � � $ �
� �
� Y + � 6 - L - z 8 � M � : /
9 j
1 �
� �
� � u g P � . p O � � , � - � ] � F J h � � � � � � H � � p � s � k � � ; n ^ � 0 $ 1 U < � ; � ? % @ f + } * � ; � F u W ) � ; � G 3 u { L � > T � k � | � 9 * S | ~ ; �! < 7" * t" 6 �" C �" ! # l <$ � �% t 2' � �( � 8* �+ �+ �+ �+ . , 0, 9, =, I, N, h, 7 t, �, # �, > �, - ,- ! G- ) i- �- �- �- �- �- �- �-
. % . + <. h. ; �. �. 0 �. . / 2 C/
v/ �/ : �/ 8 �/ 0 0
@0 K0 a T0 �0 �0 �0 �0 1 1 1 *1 -1 # E1 � i1 :2 N2 � d2 �3 4 %4 44 94 u T4 �4 �4 �4 �4 �4 K 5 _5 5 v5 @ �5 B �5
06 R ;6 ' �7 ) �7 ' �7 * 8
38 A8 ^8 % w8 $ �8 �8 & �8 J 9 a T9 + �9 1 �9 : & ,: S: e: & {: 7 �: �: �: 4 ; ;; I L; F �; ; �; ! < > ;<
z< �<
�< �< N �< N
= Y= m= �= $ �= * �= �= �= > > (> ?> X> t> H �> � �> � d? - �? @ "@
/@ =@ G@ Q@ `@ j@ N p@ �@ �@ �@ �@ A A A X 0A & �A / �A . �A B &B *B .B 2B 6B MB QB UB YB ]B rB |B �B �B $ �B �B �B
C C C 0C AC
RC ]C }C
�C �C
�C � �C � 1D �D ) �F > �F | 7G �G �G , NI . {I , �I u �I 4 MJ 0 �J 2 �J / �J % K v <L � �L � 7M � N � �N d �O t ZP � �P m �Q K "R � nR � S � �S V MT 7 �T � �T � nU V �U � UV > �V � ,W � �X � �Z � m[ � *\ � �\ � M] G �] p F^
�^ t �_ � 7` � �` � �a � yb s c = �d e �d f 2e � �e � Df � �g � pi � k J �l � �m � �o � jp � Jq .r . Or . ~r - �r E �r � !s E �s F t 1 et d �t : �t > 7u � vu � vv � w � �w M x G ]y d �y X
z � cz . B{ � q{ = <| z| �| > �| $ �| 3 �| f %} �} G �} �} �} ~ ,~ 5~ B~ % S~ y~ �~ �~ �~ �~ �~ �~ �~
/ G ] m � � � � ) � � � � .� - :� h� �� ! �� �� π � � � &� + ,� $ X�
}� �� �� ' �� 8 с E
� < P� = �� # ˂ T � + D� < p� ��
�� à Ճ � � D �� D� U� z a� ; ܄ � � � ߆ E �� � އ $ Έ �
� ( � . H� � w� � � ڋ � �� % � 8� U�
g� u� �� 5 �� # Ќ 6 �
+� D 6� � {� = 7� ! u� G �� ߏ ; � + -� 1 Y� 4 �� + �� . � 0 � L� `� 3 v� ^ �� ` � W j� Q D � ' Y� $ �� " �� ɓ , � + � ) C� ) m� �� A �� * �� %� . E� t� �� 6 �� 2 � , � B� J� Q�
Z� e� j y� 5 � � /� @� 6 O� / �� > �� �� E � b \� �� � � � �� $� � &� � �� � @� � ;� � � X � J Z� �� �� �� �� � נ 4 �� �� G
� U� _� g� ~� ��
�� ��
�� ' Ȣ � � !� � ;� �� ? ף W �
o� z� � 3 �� �� * ۤ � � � Х إ
� � � � � 4� P� v e� ܦ � �� �
� � � � �� �� ˧ ק � B � 2�
?� M� b�
u� * �� D �� � I � F V� F �� > � 7 #� [� c� & w� �� ( �� % Ӫ �� % � $ 4� ! Y� A {� ) �� 1 � * � ' D� % l� - �� �� Ϭ ج � � � � *� :� ( K� t� �� ! �� �� ŭ ɭ
ҭ � �
� � 1� C� O� f� �� �� �� �� � ��
{� �� $ �� / �� � 6 � @� X� a� j� q� x� �� = �� : Ѱ
� � � /� P� % j� � �� o� ��
�� �� H �� + � - � 7 H� . �� A �� ) � ) � E� % e� 9 �� Ŵ ( % � ' -� U� r� ! �� / �� + =
� > H� 8 �� 6 �� 8 �� 8 0� : i� 8 �� # ݷ E � E G� D �� D Ҹ ? � ? W� + �� + ù . � G � 6 f� , �� * ʺ �� �� � � � .� + ;� ! g� �� 5 �� ? ' � s ?� G �� �� + � ) @� j� �� 9 �� ٽ ߽ �� �� � � � > $� < c� 1 �� 1 Ҿ � � )� 4 @� u� �� �� �� ο % Կ [ �� � V� � � �� � & 1� ' X� % �� �� �� �� � � � ? � $� :�
O� Z� / g� G �� + �� / � T ;� ; �� �� 3 �� 3 � : K� ( �� K �� ' �� 5 #� ^ Y� A �� �� n � & �� �� $ �� 4 �� �
� � .� ?� H� _� g� p� �� �� �� �� & �� �� �� �� � � 9� 7 S� �� �� �� �� �� �� � � 4� R� m� �� �� �� �� �� � ;� B� Q� [� � z� 7� H� X� i� �� < �� �� ��
�� � � "� *� 6 I� 1 �� / �� o �� R� Y� t� �� 5 ��
�� �� 0 �� Q � `� : ~� �� �� �� �� �� �
� � "� ( /� X� - u� �� �� �� 3 �� � 5� F� N� , g� ' �� �� �� �� � #� -� - K�
y� �� �� �� 4 ��
�� � � .� K� l� �� �� �� �� � � L � Y� _ v� � �� � �� 7 5�
m� � {� J� S� f� 6 v� 0 �� �� �� �� � � 4� =� I� ^� v� � �� � O� � �� � �� ( F� o� w� |� �� % �� C �� � � � � �� $� 0� H� `� }� �� $ �� @ �� 0 � 8 =� 9 v� �� 4 �� �� ��
� .� M� ]� n� ! �� �� �� * �� + � 7� , V� j �� * �� � 8 :� s� �� 0 �� / �� � '� 9 8� D r� B �� E �� @� H� _� 2 w� �� �� �� �� % � 4 /� d� s� �� �� s �� 2 -� 6 `� O �� �� �� � � 0� 8� >� S� j� }� �� �� �� �� �� � $ .� S� g� B {� �� > �� 8 � ! V� / x� 2 �� �� �� �� ��
� ? � E N� G �� v �� N S� K �� C �� @ 2� � s� : � I R� # ��
�� # ��
�� ��
� � 3� K� ? ]� 0 �� : � � � � � � � � �� � &� C�
_� > m� �� � 0 � 3 � ' L� t� y� ~� �� �� � �
� �
� < � * Q� ! |� % �� & � � � 7 � Q� e�
v� �� �� �� �� � � � ! � � ( 5� ^� f� o� �� �� �� �� � � U � D� d� - t� h �� 6 � 4 B� c w� # � A �� ) A� . k� �� 6 �� � � 4 N U l
y � � � � � � � � ; ? P V ] r " z � � 5 � � 5 P m
� � � � " � ! � � � +
; I V \ q
u � C � - � ) - 3 a u | � � l t
~ � � � �
� � D � g / j � � � � ! � � � � � � � � � � � $ - I d " z � 7 � 6 � % '
M
d
s
y
�
�
�
�
�
�
�
�
�
�
�
5 , F 2 s � � � � , � * $ O K k � � � �
k V ` � _ # � � @ 2 � s � .
� * J 1 6 | 0 � f � ] K � � R z [ � m ) � � � v � � � � � � �
�
� �
' 5 B R D Z � � 1 x , � G � & F 8 X � : � > � A ! � c �
� � � H � ! ! %! A! G! _! i! ! �! �! �! �! �! 6 �! ! &" H" \" n" �" �" �" �" 4 �" w +# �# ( �# �# A �# ( >$ L g$ + �$ ( �$ E % E O% �% �% �% �% �% �% �% & & & *& k :& / �& � �' j �) = �) 0* L* R* Z* `* r* y* }*
�* �* �* �* �* �*
�* �* �* �* �* + + +
%+ 0+ =+ N+ c+ x+ �+
�+ �+ * �+ ; �+ A , ; S, L �, @ �, ? - > ]- C �- N �-
/. =. S. j. y. ' �. � �. 1/ 7 9/ r q/ �/ �/ 0 0 0 60 I0 [0 u0 �0 �0
�0 9 �0 1
1 G 1 . _1 + �1 ? �1 �1
2 2 !2 : 62 q2 9 �2 � �2 = �3
�4 �4 �4 0 �4 & 05
W5 b5 }5 �5 �5 �5
�5
�5
�5 �5 �5 �5 G 6 4 O6 8 �6 . �6 * �6 I 7 ; a7 �7 . �7 �7 �7 8 � 8 �8 �8 6 �8
9 9 9
!9 ,9 ;9 B9 K9 T9 Y9 _9 l9 �9 �9 ; �9
�9 �9 : : 7: G: ]: l: {: �: �: �:
�: + �: �: L ; ( k; h �; �; < 3< Q< q< �<
�< D �< E �< 9=
J=
U= `= & j= 3 �= % �= * �= + > B> J> Q> k> , �> �> �> �> 3 �> ? -? >? C? L? e? }? �@ �@ �@ �@ ' �@ ! �@ S �@ a PA g �A B
-B 8B
>B IB gB xB
�B �B �B �B �B 8 �B G C 2 ZC ! �C �C �C �C �C � �C * nD A �E �E �G �G �G H H . H @H FH RH dH jH
nH |H �H �H �H �H $ �H I $I 0I 5I KI dI ~I ) �I �I �I �I �I & �I �I J
J
#J 1J ;J ; EJ " �J �J " �J �J �J K # ;K _K / xK & �K �K �K $ �K L 4L $ FL kL }L # �L �L x �L Z KM �M �M �M �M N g +N R �N s �N ZO ( oO
�O & �O 2 �O �O P P /P 4P CP JP YP eP ~P �P 4 �P / �P � �P �Q �Q �Q
�Q ! �Q �Q �Q R ! R 5 8R nR sR
vR
�R �R �R I �R N �R H >S M �S � �S @ �T 7 U NU jU �U �U �U + �U 1 �U V %V \ 1V � �V -W % 5W ' [W �W �W 1 �W & �W ? �W 4X & HX oX �X �X / �X �X > �X Y Y -Y 6Y <Y RY YY jY sY
yY � �Y 7 O[ ( �[ �[ �[ M �[ * ,\ W\ n\ �\ �\ �\ �\ �\ �\
�\ 0 �\ ] & (] � O] � )^ . �^ U �^ E 3_ ) y_ # �_ � �_ $ k` < �` � �` q ha v �a Qb � ib V Sc P �c W �c # Sd wd �d �d �d �d
�d �d �d �d 4 �d % -e Se � [e �f g g %g & *g ! Qg # sg �g �g �g �g �g �g h h 3h Oh jh } zh } �h 4 vi > �i > �i )j 2 2j ' ej
�j �j �j
�j �j �j * �j k % ,k 9 Rk . �k �k 8 �k l l l $l # *l 8 Nl
�l � �l 5m Lm M em �m X �m n n *n Cn [n yn �n �n
�n ) �n & �n o o %o /o ? @o �o � �o @p
[p ip pp �p , �p R �p q ; 8q tq �q �q �q
�q W �q : 3r nr �r �r + �r 0 �r s s - .s \s {s
�s �s �s �s 2 �s
t / t Kt ! _t 2 �t �t �t 3 �t u -u Lu Tu 0 [u �u �u �u �u �u �u
�u �u �u v
#v 1v Lv Uv
_v jv �v �v �v �v � �v S fw �w �w �w �w �w x !x Bx
Hx Sx ix rx x �x ; �x 8 �x y y n y �y �y �y �y �y �y �y z 'z
3z Az Zz dz ^ pz 9 �z F { = P{ 6 �{ Z �{ | 7 5| m| = �| % �| . �| 1 } W P} @ �} . �} , ~ < E~ ? �~ 6 �~ q �~ v k 9 � : � ! W� ! y� 2 �� � � � 8 �� * Ӂ B �� A� > Y� �� B �� � 0 � ' 5� . ]� $ �� 5 �� 9 � 6 !� X� / y� 2 �� $ ܄ 6 � 8� - T� $ �� & �� ΅ � 4 �� *� : C� ' ~� ( �� φ � ��
� S �
h� s� 9 �� # �� � �� R
� ]� b� w� �� �� " �� A ֈ � 5� x =� ' �� ފ � �� � �
%� ) 3� � ]� s � h� p� c }� % � ( � 0� 9�
F� Q� ]� s� |� c �� � �� $
� 2� � R� � %� �� � � � + 4� `� e�
m� {� & �� �� ː = � A � `� t� �� �� �� �� ё E ّ < � S \� 3 �� ) � �
� #� , 0� ]� i� y� �
�� �� " �� Ǔ � � 0 � J� T�
]� k� 8 �� є f �
N� ! Y� ( {� Z �� �� � G %� m� �� ��
�� �� ʖ � � � .� E�
]� h� �� �� �� �� �� � Ǘ d� m� �� �� �� �� �� �� D Ϙ � ( %� & N� u�
|� D �� ̙ � �� � ' 0� + X� �� 5 �� 9 ך E � W� 2 `� 1 �� Z ś � � H � - 4� � b� � I� =� � �� � Z� { � �� 9 �� L � 2 5� 4 h� 1 �� Ϣ � � ,� � ;� S � � c� � � � ȧ U M� } �� 2 !� ~ T� Ӫ < � D 0� R u� 5 Ȭ 9 �� - 8� 2 f� e �� � �� F �� + � � � � �� r S� � Ʊ � �� ^ %� � �� }� �� " �� J )� % A� 5 g� & �� 2 ķ 3 �� P +� I |� " Ƹ a � < K� �� 0 �� ع ] � � L� c � 7 d� � �� � ;� t (� �� $ �� O ܿ P ,� > }� J �� � � ' �� � �� � �� T �� | �� Y q� �� 6 �� � � .� Y �� � � � �� � H� � �� �� J �� � -� %� @� B Y� * �� . �� . �� %� � C�
��
�� � �
� $� 3� T� s� z� R �� �� C � % G� & m� ) �� + �� 2 �� H � - f� � �� U ,� T �� � �� L w� � �� c S� ` �� I � y b� \ �� L 9� C �� � �� k� � �� � �� b L� V �� � � _ �� � �� � �� �� # �� � �� " j� 1 �� � �� � �� � Z� L � � d� � X � � w� m � � p� � 3� � �� � e� � � � �� � <� { �� u ;� 8 �� � � � t� � � � �� c a� > � � � '� 0� N�
S� ) ^� �� �� �� 5 �� P � H '� K p� � �� j �� � � �� � � * � S X \ b t y � � � � � � � � 0 . _ o �
� � � � / � { � } h # } ! � 3 � # � / ? I Q Y ` m � � � � � � ! � 2 ; 0 [ ~ � � � � s x ~ � � C � $ �
6
U
Z
g
k
r
z
1 �
�
. �
! � 1 � � N Q ' � � � �
�
�
)
A
� W
�
* $ 8 ] e � � � " � � � " 8 K ' b � � � � � � & ? R
p { > � ' � � . B U ' d � � _ % g � � � m � ) ? P U � � � N � � � k � c ] � j � d I � / � [ � ? 4 D < y �
�
� � � � / ?
_ ( j � � �
� � � �
$ > / n t | 1 � " �
� � � �
. A K W k x / � � � � � , A `
u � � � � � � � 6 @ R i Z � � 7 �! �! Z " @ `" - �" , �" � �" 3 �# * �# F �# 2 7$ C j$ Z �$ = % v G% / �% f �% 3 U& 3 �& � �& I' . b' ( �' B �' � �' + �( f �) V * D q* * �+ T �+ 6- A U. � �. I a/ �0 � �1 � V2 � �2 �3 �3 ) �3 ) 4 ?4 ^4 $ ~4 $ �4 �4 �4 �4 �4 �4 �4 @ 5 � Z5 7 � /7 �7
�7 � 8 , �8 Q "9 t9 �9 �9 �9 �9 �9 �9
: : 6: L: m: �: �: �: �: �: ; 0; t K; 2 �; �;
< + < C< X< q< �< �< & �< �< � �< 6 �= 3 �= �= > ( > H> e> � �> M? i? �? % �? ) �? �? �? B " 3B VB hB B �B $ �B �B �B C : &C aC wC �C 7 �C �C �C
D # 'D J KD ! �D _ �D - E O FE � �E S NF � �F � &G ? �H ) �H M I � gI 3 'J Y [J $ �J $ �J � �J �K � �K �L z �M P �M : NN I �N 4 �N � O | �O J P � `P � �Q < �S , �S �S # T x 0T � �T AU GU
KU VU Y oU � �U � vV � W � �W � |X hY
�Y � �Z � [ � �[ � ;\ � ] $ �^ � �^ � ~_ + ` 6 :` - q` - �` 8 �` M a : Ta 9 �a 1 �a � �a � �b u �c P d Sd p td � �d , �e - �e ] f F of h �f � g � �g � mh � i p �i s j �j � �k ; �m ^ �m .n 0 In 1 zn < �n ; �n ? %o % eo �o + �o * �o ; �o F 5p u |p ) �p ; q G Xq u �q L r cr yr � �r � Es | �s ^t * xt | �t ; v < \v * �v 6 �v C �v ! ?w l ax � �y t W{ � �| � ]~ � � � � . &� U� ^� b� n� s� �� 7 �� р # ڀ > �� =� Q� ! l� ) �� �� ǁ ځ � �� � � 2� % ;� + a� �� ; �� � 0 � . 9� 2 h�
�� �� : �� 8 �� 0 4�
e� p� a y� ۄ � � � &� 5� B� O� R� # j� � �� _� s� � �� $� =� J� Y� ^� u y� � �� � � !� K 8� �� 5 �� @ щ B �
U� � J � � � � � � 5 f F � C � � v � k r � � � )
� \ � � � H � � � P � _ k Z � : � P � P
� : ; � � � c I
k � � � � o � w _ e � - t 3 � � � � � � i � # 9 o
i � � 4 � � � �
� , p F � � � � + R |
� � � � " O � l � � b o � | � � p � J I �
[ � Q � � n �
d
z
� � � � j � � g k > 0 � # � � � \ � { Q ! � e | � � �
� � � = c � � q � q � � g T � �
� � ? 7
� � � � * � � � � � � o �
� � � � g � � � � � @ � � M A � � � � ? � g � � � / � � � 3 h G � � \ � L � � � .
; P S ! % @ G
q
� % � / v N � B � � � � � _ � w � X p h g � � � & � �
F � < � � a " � X n 0 ? � � � � � � i � � � � � � , ( � � ? � � I * � � � � � Y � � u � - � L v l 3 � � � + � � � 7 t
b ( g
� < l J
� � ; � � � � � � � �
v � � � � � f q a � � � � y � � � � N � � � � � � � z + � � ` � �
x v H � � � � � y s � H � � I � i � u � (
h � � - F
� � �
3 G K h � � � � � � � W S S � 0 � D w V � M y
` ` � ] u
N ` & � m � � y � �
' � 2 � t � �
n t � � � " ] 5 �
� 7 ' � h :
� N � � � � V � � y � � * � & Y � � � � f
� a � :
� � � � � f Y U V � � 6
` � D
l , �
� � � " ~
� � � � � � X � � � 2 � � s j � s
� � \ � � T � � 7 � 2 � � I � l � � s � K � x � ? > � | � � � � H � � � z C R � � % 7 + 6 0 S � z � � � / � � C � � l � � � *
k � � � i >
� e � � � � M ' � 3 #
� 8 � ,
m
E u | � n p O
C
- T [ 4 Q � 5 Q
� A �
1
2 D � , - U # & # �
? �
: i � � " 2
� � � & u 2 J / � L >
f � " : 9 ~ Q � K ~ � � S �
% Y � � & A � � � ] � $ F � � A !
� � � � � � l o � , q & � L
M > "
� ) � �
�
L H
� � � � � $ e � � � e � � � � B � � � � � > � & ^ � g � V A � � � � � . �
K � � � � } S L % H p � � � . � o � ;
Y � M N ^ � � � R [ w ~ ^ � 6 Q T o 5 x ! Z � � a � � � ) C ' � � V � � � � � � �
} � < �
� � 4 5 � � � �
� � � � � N � � � { � { � i � y [ � V , � � > � � v � � � � b � � � N R
� E " � � � � . _ @ � � Y � * � 7 r o �
� � � � | u � ^ � � 3 � � � � � ^ �
� � � _ G ? � � U I > 5
� # � � $ 6 � � � A � 6
n
� � < I � ` � � e � + � n ( � B � B
j } � W � � � � � < m ) [ � � v * � Y � � � O 4 � � z 9
_ � � � � G I � � s ~ � � s � 9 � � = t � � � � e g 2 � C ! � � � � $ i ] � � �
Z < � 3 8 + � � L � 8
� = R � � � M X . i \ # V " �
+ � ` E m � � | � � � 4 x
. � +
A u � � � � � S
j � _ ) � 2 � � � � - y D � � b T � � <
� � � C D � X � � E g 5 ' � � � | U � 1 � e m : f ` V , p � / . � � � ? A ~ S Z � � � � � � J � j � � � � � � � M
� 8 h � / Y � � X & � � ] K ~ � > � D
�
� � � 4 � 1 � V � } � � � � � h �
5 9 � � � K � � 6 U � j � � o
� � � � � ? �
� 4 � 2 Q � � } y � 8 � ' � � b � � � � � � � u � � � l � � ! � K � 6 � # r / @ � � 1 � � � � � � � P C � � =
d W � � B
� � K
� � � � � � � � } �
" @ � � 8 } s ) � � � � � { � � < � � X � � � � � ; > � � � D �
\ 3
� � � � w � ] ) � � p � � � � k
� d x ? Y � n � � ; 0 � ( � c
� w y ( j � N R � � � P � � � � j ! � � � I � � � � J � �
� � � � � � � � � � G � � � � � � � � d �
� �
L M N O Q R S T � � � � D � ' � � k j � � � � � 1 s � x u � E
� � U @ � Q ! m � � � � j
� � � r � % � � W ] � �
Z � o � k
� � � F W � F � ]
� 1 � � � $
� ) � � � � � � � a � , � [ � r
� � T
W U � � � � � � � � � � 0 ( E = 6 � � ( : ; p A
� ~ w � T � O $ � � K � [
; _ B � � q v
�
� � � �
[ a i % F \ � x r 1 k z
T O � �
� � 1 � V � � L � x � � d � � � � � X 8
� � � : � b b
� � � G j � ^
] � � � � � } 0 Y
� % � < � � � R � v
. @ R Z ^ � � � � � � � \ � � ?
- � = l H � � � Z 1 V
� d � � � D � � m � ] � Z � � C � n � [ U
M � h � T � � �
F � � � � * � �
q 0 9 + � d � � 7 $ � 9 � ) � K M a � r � � z � � t %
� � _ � � � = }
h D f Q � E 9 � � ! & � l
� = � 3 ( g � x � � � � � '
� � + D b � d � Z � -
� � w
z c { � $ f � P � � � n W � � � � � W � � � � � { � � W u � z � 7 � � � � � � @ � c � � R � O � m � P * � G � . � � � c � ; � � P �
� ~ � O
� I � � � � � E C + W
� � } $ m
� d � 6 � " � � � � � � ' n \ � { � 9 J � � � e a
� � � � � � � r X
�
y � m � � h p
� � � J � � � o � � � w �
� � a , � 0 � � l � � � � � y � � � � � 2 > � q � � F t 7 0
] # @ � � � ! 9 v � < � 6 � � � F 7 � �
f ; � * � p � � J � t / 2 t � Y U { � � . � � � � &
� � � $ � � � � P � � L b
�
_ e
� � J � � 5 H � � k � �
X [ � � A � � � � � J \ � � � � 4 # �
� � t \
� � � r B � � � � @
% � � � � )
� $ � � � ^ E � H d � � B � r =
� c � � � � * k
3 : C � � � R 4 � 4 I % 7 � Z
� � B � g 0
� � � � < | � � � � � � � � � �
~ � | 3 � � M s ; � 8 L 6 � S � N
� ) { � � T � � � � � �
� 8 � � � � w � � O � � � p � � � � � : � � � � c q � � � � � � U O � r � 8
� � � � ( � � � � � � � - ^ � � � ( � � c � c h
� � � � E a �
� � � � � ^
� / E H � � A � S
� �
/ � � m /
_
x [ � 5 � � � � � O � b } � � � � G � � . P ` � � @ � � v � G 8 � 1 �
� � � � � � � � z �
� U K � ` � ~ � G � � � � b � H � � z � - � B `
� | X f x q # � = ^ � N q u , � c i
� � 4
� � { 9 � � � �
� Q ' � a � W = � � � � � Z � � � � B 5 e ' � � - �
* � d 1 � � � � w s s n f ! � t {
� "%s" is not a valid regular expression. "languages" folder is in default location "plugins" folder is in default location "wp-content" folder is in default location # Scan Issues ## Ignored Issues (%d total) ## New Issues (%d total) ${totalIPs} addresses in this network %1$s ago -- %2$s -- %3$s in Unixtime %1$s arrived from %2$s and %3$s %1$s at an unknown location at IP %2$s %1$s attempted a <span style="color: #F00;">failed login</span> as "%2$s". %1$s attempted a <span style="color: #F00;">failed login</span> using an invalid username "%2$s". %1$s contains a suspected malware URL: %2$s %1$s contains a suspected phishing site URL: %2$s %1$s left %2$s and %3$s %1$s logged in successfully as "%2$s". %1$s visited %2$s %1$s was %2$s at %3$s %1$s was redirected when visiting %2$s %1$s with author %2$s contains a suspected malware URL. %d Countries %d Job Overdue %d Jobs Overdue %d existing issue was found again and is not shown. %d existing issues were found again and are not shown. %d files indexed %d ignored issue was also detected. %d ignored issues were also detected. %d issue found in most recent scan %d issues found in most recent scan %d issue was omitted from this email due to length limits. %d issues were omitted from this email due to length limits. %d more similar files were found. %d path was skipped for the malware scan due to scan settings %d paths were skipped for the malware scan due to scan settings %d per minute %d plugin %d plugins %d seconds %d theme %d themes %d unused recovery code remains. You may generate a new set by clicking below. %d unused recovery codes remain. You may generate a new set by clicking below. %s - using constant %s - using template %s changed their password. %s contains a suspected malware URL. %s contains a suspected phishing site URL. %s hits %s in POST body: %s %s in cookie: %s %s in file: %s %s in query string: %s %s is not valid hostname %s logged out successfully. %s requested a password reset. %s tried to access a <span style="color: #F00;">non-existent page</span> © %1$d to %2$d Wordfence — Visit <a href="http://wordfence.com/">Wordfence.com</a> for help, security updates and more. © %d to %d Wordfence — Visit <a href="http://wordfence.com/">Wordfence.com</a> for help, security updates and more. 'How does Wordfence get IPs' is misconfigured (+ %d more) (Choose One) (Recommended) (Unknown) (default) (not required) (not set) (you) * User counts currently only reflect the main site on multisite installations. +1 (000) 000 0000 , and %d more. .htaccess Updated .htaccess change /bypassurl/ /page-name/ /set-country-bypass/ 0 for default. Must be %d or greater and 10-20 or higher is recommended for most servers 0 means unlimited alerts will be sent. 0 or empty means the default of %s will be used 0 or empty means unlimited issues will be sent 0.0 (definitely a bot) 0.1 0.2 0.3 0.4 0.5 (probably a human) 0.6 0.7 0.8 0.9 0660 - using default 1 Country 1 more similar file was found. 1. Scan Code or Enter Key 1.0 (definitely a human) 2. Enter Code from Authenticator App 24 Hours 2FA 2FA Active 2FA Inactive 2FA Migration Error: %s 2FA Mode: Legacy 2FA Mode: Normal 2FA Status 2FA will soon be required on %s 30 Days 404 Not Found 7 Days : Disabled <a class="wfls-btn wfls-btn-default wfls-btn-sm wfls-dismiss-link" href="#" onclick="GWFLS.dismiss_notice('%s'); return false;">Dismiss</a> <a href="#" onclick="WFAD.wafUpdateRules();return false;" role="button">Click here</a> to pull down the latest from the Wordfence servers. <a href="%1$s" target="_blank" rel="noopener noreferrer">%1$s</a> is publicly accessible and may expose source code or sensitive information about your site. Files such as this one are commonly checked for by scanners and should be made inaccessible. Alternately, some can be removed if you are certain your site does not need them. Sites using the nginx web server may need manual configuration changes to protect such files. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn more<span class="screen-reader-text"> ( <a href="%s"><b>Verify and Log In</b></a> <a href="%s">Click here</a> to rebuild the configuration file. <br><strong>This setting will be ignored because the PHP configuration option <code>output_buffering</code> is off.</strong> <em>Reputation check</em> <i class="wf-fa wf-fa-lightbulb-o wf-tip" aria-hidden="true"></i> When you first install the Wordfence Web Application Firewall, it will be in learning mode. This allows Wordfence to learn about your site so that we can understand how to protect it and how to allow normal visitors through the firewall. We recommend you let Wordfence learn for a week before you enable the firewall. <span class="wf-hidden-xs">Back to </span>%s <span class="wf-hidden-xs">Block </span>Reason <span class="wf-hidden-xs">Block </span>Type <span class="wf-hidden-xs">Block access to the rest of the site</span><span class="wf-visible-xs">Rest of site</span> <span class="wf-hidden-xs">Browser </span>User Agent <span class="wf-hidden-xs">Custom </span>Pattern <span class="wf-hidden-xs">Restore </span>Defaults <span class="wf-hidden-xs">What to </span>Block <span class="wf-red-dark">Warning:</span> You are running the LiteSpeed web server and Wordfence can't determine whether "noabort" is set. Please verify that the environmental variable "noabort" is set for the local site, or the server's global External Application Abort is set to "No Abort". <strong>AUTHENTICATION FAILURE</strong>: A temporary failure was encountered while trying to log in. Please try again. <strong>CHECK YOUR PHONE</strong>: A code has been sent to your phone and will arrive within 30 seconds. Enter it below to sign in. <strong>CHECK YOUR PHONE</strong>: A code has been sent to your phone and will arrive within 30 seconds. Please sign in again and add a space and the code to the end of your password (e.g., <code>wfABCD</code>). <strong>CHECK YOUR PHONE</strong>: A code has been sent to your phone and will arrive within 30 seconds. Please sign in again and add a space, the letters <code>wf</code>, and the code to the end of your password (e.g., <code>wf123456</code>). <strong>CODE EXPIRED. CHECK YOUR PHONE:</strong> The code you entered has expired. Codes are only valid for 30 minutes for security reasons. We have sent you a new code. Please sign in using your username, password, and the new code we sent you. <strong>CODE INVALID</strong>: The 2FA code provided is either expired or invalid. Please try again. <strong>CODE REQUIRED</strong>: Please check your authenticator app for the current code. Enter it below to sign in. <strong>CODE REQUIRED</strong>: Please check your authenticator app for the current code. Please sign in again and add a space, the letters <code>wf</code>, and the code to the end of your password (e.g., <code>wf123456</code>). <strong>CODE REQUIRED</strong>: Please enter your 2FA code immediately after your password in the same field. <strong>CODE REQUIRED</strong>: Please provide your 2FA code when prompted. <strong>Cellphone Sign-in Required</strong>: Cellphone Sign-in is required for all administrator accounts. Please contact the site administrator to enable it for your account. <strong>Congratulations!</strong> You've optimized configurations for this feature! If you want to learn more about how this score is determined, click the link below. <strong>ERROR</strong>: A username and password must be provided. <a href="%s" title="Password Lost and Found">Lost your password</a>? <strong>ERROR</strong>: An error occurred while sending the message. Please try again. <strong>ERROR</strong>: Incorrect username or password. <strong>ERROR</strong>: The username or password you entered is incorrect. <a href="%2$s" title="Password Lost and Found">Lost your password</a>? <strong>ERROR</strong>: The username or password you entered is incorrect. <a href="%s" title="Password Lost and Found">Lost your password</a>? <strong>ERROR</strong>: Unable to send message. Please refresh the page and try again. <strong>ERROR</strong>: Unable to send message. You have exceeded the maximum number of messages that may be sent at this time. Please try again later. <strong>ERROR</strong>: You can't register using that username <strong>Enable Separate Prompt for Two-Factor Code<a href="%s" target="_blank" rel="noopener noreferrer" class="wfhelp wf-inline-help"><span class="screen-reader-text"> (opens in new tab)</span></a></strong><br><em>Note:</em> This setting changes the behavior for obtaining the two-factor authentication code from using the password field to showing a separate prompt. If your theme overrides the default login page, you may not be able to use this option. <strong>INSECURE PASSWORD:</strong> Your login attempt has been blocked because the password you are using exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. Please <a href="%1$s">reset your password</a> to reactivate your account. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn More<span style="font-size:0;"> (opens in new tab)</span></a> <strong>INVALID CODE</strong>: Please sign in again and add a space, the letters <code>wf</code>, and the code from your authenticator app to the end of your password (e.g., <code>wf123456</code>). <strong>INVALID CODE</strong>: Please sign in again and add a space, the letters <code>wf</code>, and the code sent to your phone to the end of your password (e.g., <code>wf123456</code>). <strong>INVALID CODE</strong>: You need to enter the code generated by your authenticator app. The code should be a six digit number (e.g., 123456). <strong>INVALID CODE</strong>: You need to enter the code generated sent to your phone. The code should be a six digit number (e.g., 123456). <strong>INVALID CODE</strong>: You need to enter your password and the code we sent to your phone. The code should start with 'wf' and should be four characters (e.g., wfAB12). <strong>MESSAGE SENT</strong>: Your message was sent to the site owner. <strong>Note:</strong> Blocking is disabled when the option "Enable Rate Limiting and Advanced Blocking" is off. <strong>Note:</strong> The GeoIP database that is required for country blocking has been updated to a new format. This new format requires sites to run PHP 5.4 or newer, and this site is on PHP %s. To ensure country blocking continues functioning, please update PHP. <strong>Note:</strong> Two-Factor Authentication is disabled when the option "Enable Brute Force Protection" is off. <strong>REGISTRATION ATTEMPT BLOCKED</strong>: The security token for the login attempt was invalid or expired. Please reload the page and try again. <strong>REGISTRATION ATTEMPT BLOCKED</strong>: This site requires a security token created when the page loads for all registration attempts. Please ensure JavaScript is enabled and try again. <strong>REGISTRATION BLOCKED</strong>: The registration request was blocked because it was flagged as spam. Please try again or <a href="#" class="wfls-registration-captcha-contact" data-token="%s">contact the site owner</a> for help. <strong>REGISTRATION BLOCKED</strong>: The registration request was blocked because it was flagged as spam. Please try again or contact the site owner for help. <strong>Require Cellphone Sign-in for all Administrators<a href="%s" target="_blank" rel="noopener noreferrer" class="wfhelp wf-inline-help"><span class="screen-reader-text"> (opens in new tab)</span></a></strong><br><em>Note:</em> This setting requires at least one administrator to have Cellphone Sign-in enabled. On multisite, this option applies only to super admins. <strong>This update includes security-related fixes.</strong> <strong>VALIDATION FAILED</strong>: The 2FA code could not be validated. Please try logging in again. <strong>VERIFICATION FAILED</strong>: Two-factor authentication verification failed. Please try again. <strong>VERIFICATION REQUIRED</strong>: Additional verification is required for login. Please check the email address associated with the account for a verification link. <strong>WARNING: </strong> Your site is using a PHP version (%1$s) that is no longer supported by Wordfence and needs to be updated. We recommend using the newest version of PHP available but will currently support PHP versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. <strong>WARNING: </strong> Your site is using a PHP version (%1$s) that will no longer be supported by Wordfence in an upcoming release and needs to be updated. We recommend using the newest version of PHP available but will currently support PHP versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. <strong>WARNING: </strong> Your site is using a WordPress version (%1$s) that is no longer supported by Wordfence and needs to be updated. We recommend using the newest version of WordPress but will currently support WordPress versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. <strong>WARNING: </strong> Your site is using a WordPress version (%1$s) that will no longer be supported by Wordfence in an upcoming release and needs to be updated. We recommend using the newest version of WordPress but will currently support WordPress versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. <strong>WARNING: </strong>The password you are using exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. Please <a href="%1$s">change your password</a>. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> ( <strong>WARNING: </strong>Your login has been allowed because you have previously logged in from the same IP, but you will be blocked if your IP changes. The password you are using exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. Please <a href="%1$s">change your password</a>. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> ( <strong>WARNING:</strong> If you delete the wrong file, it could cause your WordPress website to stop functioning, and you will probably have to restore from a backup. A Wordfence scan examines all files, posts, pages, and comments on your WordPress website looking for malware, known malicious URLs, and known patterns of infections. It also does several other reputation and server checks. A Wordfence scan looks for malware, malicious URLs, and patterns of infections by examining all of the files, posts, and comments on your WordPress website. It also checks your server and monitors your site's online reputation. A block reason must be provided. A new version of WordPress (v%s) is available. A new version of the plugin "%s" is available. A new version of the theme "%s" is available. A non-admin user with username "%s" signed in to your WordPress site. A reCAPTCHA score equal to or higher than this value will be considered human. Anything lower will be treated as a bot and require additional verification for login and registration. A reminder to activate two-factor authentication was sent to %d user. A reminder to activate two-factor authentication was sent to %d users. A request was received to stop the previous scan. A scan is already running. Use the stop scan button if you would like to terminate the current scan. A server error occurred while saving the configuration: %s A termination request has been sent to stop any running scans. A test request to this website was detected on a different value for this setting. IP blocking and live traffic information may not be accurate. <a href="%s" target="_blank" rel="noopener noreferrer">Get More Information<span class="screen-reader-text"> ( A user with 'subscriber' access has a password that is very easy to guess. Please either change it or ask the user to change their password. A user with IP address %1$s has been locked out from signing in or using the password recovery form for the following reason: %2$s. A user with the a role of '%s' has a password that is easy to guess. Please change this password yourself or ask the user to change it. A user with username "%1$s" tried to sign in to your WordPress site. Access was denied because the password being used exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. Please change or reset the password (%2$s) to reactivate this account. Learn More: %3$s A user with username "%s" deactivated Wordfence on your WordPress site. A user with username "%s" deactivated the Wordfence Web Application Firewall on your WordPress site. A user with username "%s" who has administrator access signed in to your WordPress site. A user with username "%s" who has administrator access tried to sign in to your WordPress site. Access was denied because all administrator accounts are required to have Cellphone Sign-in enabled but this account does not. A valid server configuration was not provided. A visitor blocked from registration sent the following message.
----------------------------------------
IP: %s
Username: %s
Email: %s
reCAPTCHA Score: %f
----------------------------------------
%s A wildcard cannot be used to exclude all files from the scan. ADMIN EMAIL: %s AM Ability to connect to the Wordfence servers and your own site. Ability to read/write various files. Ability to save Wordfence settings to the database. Aborting scan because WordPress updated from version %1$s to %2$s. The scan will be reattempted later. About Wordfence Access from your area has been temporarily limited for security reasons Access to Premium Support Access token not found. Accessed a banned URL Activate Activate 2FA Activate Premium Activated - connected by %1$s on %2$s Active Active WAF storage engine Activity Detail Activity Log Sent Activity Report Add Add Additional Signatures Add Allowlisted URL/Param Add Filter Add Param to Firewall Allowlist Add action to allowlist Add code to .htaccess Adding issue %s Adding issue: %1$s Adding issue: %s Additional Detail Additional Options Additional scan signatures Additional scan signatures (one per line) Admin Contact Info Admin Login Admin Login Blocked Admin Panel Admin user with this email address not found. Administrative memory limit Advanced Block Advanced Country Blocking Options Advanced Firewall Options Advanced Scan Options Advanced blocking in effect. Advanced caching plugin Afghanistan Agree Agreement to New Terms and Privacy Policies Ajax request received to start scan. Aland Islands Albania Alert generated at %s Alert me when a non-admin user signs in Alert me when someone with administrator access signs in Alert me when there's a large increase in attacks detected on my site Alert me with scan results of this severity level or greater Alert me with scan results of this severity level or greater: Alert when an IP address is blocked Alert when someone is blocked from logging in for using a password found in a breach Alert when someone is locked out from login Alert when the "lost password" form is used for a valid user Algeria All Countries All Documentation All Firewall Options All Hits All Options All PHP requests will be processed by the firewall prior to running. All Tables Exist All Traffic All blocking rules you create will show here. You can manage them as well as remove or modify them from the same location. All capabilties of admin user %s were successfully revoked. All of the Firewall settings are now located here. This includes configuration options for the web application firewall, brute force protection, rate limiting, allowlisted URLs, and blocking. All of the blocking rules you create are now in one central location. Simply choose the block type and enter the details for the rule you want to create. Premium users have access to advanced country blocking options, found via the <strong>Options</strong> link. All of your blocking rules are in one central location. Choose the Block Type, then enter the details for the rule. Once it has been added, you'll see it saved as a rule for your site. All of your scan options, including scheduling, are now located here. All two-factor authentication settings and users' codes will revert to your older settings. If any users had set up two-factor authentication after the update, they will no longer have 2FA enabled until you switch to the new version again. Allow remembering device for 30 days Allowlist Entry Exists Allowlisted 404 URLs Allowlisted IP addresses that bypass 2FA Allowlisted IP addresses that bypass all rules Allowlisted IPs must be placed on separate lines. You can specify ranges using the following formats: 127.0.0.1/24, 127.0.0.[1-100], or 127.0.0.1-127.0.1.100. Allowlisted IPs must be separated by commas or placed on separate lines. You can specify ranges using the following formats: 127.0.0.1/24, 127.0.0.[1-100], or 127.0.0.1-127.0.1.100<br/>Wordfence automatically allowlists <a href="http://en.wikipedia.org/wiki/Private_network" target="_blank" rel="noopener noreferrer">private networks<span class="screen-reader-text"> (opens in new tab)</span></a> because these are not routable on the public Internet. Allowlisted URLs Allowlisted hosts Allowlisted services Allowlisted via Firewall Options page Allowlisted via Live Traffic Alternate WP cron Always Ignore Always Ignore Version American Samoa Amount of Live Traffic data to store (number of rows) Amount of time a user is locked out An admin user with a suspicious username %s was found. An admin user with a suspicious username %s was found. Administrators accounts with usernames similar to this are commonly seen created by hackers. It's possible a plugin could have created the account, but if you do not recognize the user, we suggest you remove it. An admin user with the username %s was created outside of WordPress. An admin user with the username %s was created outside of WordPress. It's possible a plugin could have created the account, but if you do not recognize the user, we suggest you remove it. An allowlist entry for this URL and parameter already exists. An empty license key was entered. An error occured when fetching the WAF configuration from the database. An error occurred An error occurred when adding the request to the allowlist. An error occurred while creating the block. An error occurred while saving the configuration. An error occurred while saving the configuration: %s An error occurred while saving the license. An error occurred while saving the license: %s An error occurred while trying to hide the file. An error occurred: An error occurred: %s An error occurred: Invalid options format received. An error was encountered while trying to activate two-factor authentication. Please try again. An error was encountered while trying to deactivate two-factor authentication. Please try again. An error was encountered while trying to generate new recovery codes. Please try again. An error was encountered while trying to send the notification. Please try again. An error was encountered while validating the reCAPTCHA site key: %s An expected parameter was not provided. An invalid IP address was specified. An invalid IP source was provided. An invalid country was selected. An invalid file %s was specified for repair. An invalid file was requested for deletion. An invalid file was requested for hiding. An invalid file was specified for repair. An invalid operation was called. An invalid status was specified when trying to update that issue. An invalid type was specified to get file. An unknown action was provided. An unknown configuration section was provided. An unknown location at IP An unknown location at IP %s An update is available for Updates are available for Analyzed %1$d files containing %2$s of data so far Analyzed %1$d files containing %2$s of data. Andorra Angola Anguilla Antarctica Antigua and Barbuda Any previous value for <code>auto_prepend_file</code> will need to be re-enabled manually if still needed. Anyone claiming to be Google will not be rate-limited Apache + CGI/FastCGI Apache + mod_php Apache + suPHP Application passwords have been disabled by Wordfence. Are you sure you want to allowlist this action? Are you sure you want to deactivate two-factor authentication? Are you sure you want to delete? Are you sure you want to disconnect your site from Wordfence Central? Are you sure you want to generate new recovery codes? Any remaining unused codes will be disabled. Are you sure you want to repair? Are you sure you want to restore the default Blocking settings? This will undo any custom changes you have made to the options on this page. Any existing blocks will be preserved. Are you sure you want to restore the default Diagnostics settings? This will undo any custom changes you have made to the options on this page. Are you sure you want to restore the default Firewall settings? This will undo any custom changes you have made to the options on this page. If you have manually disabled any rules or added any custom allowlisted URLs, those changes will not be overwritten. Are you sure you want to restore the default Live Traffic settings? This will undo any custom changes you have made to the options on this page. Are you sure you want to restore the default Scan settings? This will undo any custom changes you have made to the options on this page. Are you sure you want to restore the default Two-Factor Authentication settings? This will undo any custom changes you have made to the options on this page. If you have configured any users to use two-factor authentication, they will not be changed. Are you sure you want to restore the default global settings? This will undo any custom changes you have made to the options on this page. Your configured license key and alert emails will not be changed. Are you sure you want to restore the default settings? This will undo any custom changes you have made to the options on this page. If you have manually disabled any rules or added any custom allowlisted URLs, those changes will not be overwritten. Are you sure you want to stop blocking the ${count} selected IPs, ranges, and countries? Are you sure you want to stop blocking the selected IP, range, or country? Argentina Armenia Aruba As a free Wordfence user, you are currently using the Community version of the Threat Defense Feed. Premium users are protected by additional firewall rules and malware signatures as well as the Wordfence real-time IP blocklist. Upgrade to Premium today to improve your protection. As a free Wordfence user, you are currently using the Community version of the Threat Defense Feed. Premium users are protected by additional firewall rules and malware signatures. Upgrade to Premium today to improve your protection. Asking Wordfence to check URLs against malware list. Attacks Blocked for %s Attempt to return to the admin login page (you may still be locked out) Australia Austria Auth grant is invalid. Auth grant not found. Authentication Code Authenticator Author Author: %s Authorization header format is invalid. Auto-renew is disabled Automatic WP Core updates Automatic database repair Automatic migration of the 2FA-enabled accounts failed. Please verify that your server is reachable via the internet and try again. Automatically enable on Automatically generated from previous country blocking settings Automatically updates Wordfence to the newest version within 24 hours of a new release. Azerbaijan Back Back to Scan Back<span class="wf-hidden-xs"> to Dashboard</span> Background Request Blocked Backtrack limit is %d, reducing to 1000000 Bad URL Bad security token. It may have been more than 12 hours since you reloaded the page you came from. Try reloading the page you came from. If that doesn't work, please sign out and sign-in again. Bahamas Bahrain Bangladesh Barbados Basic Firewall Options Basic Protection Basic Scan Type Options Basic WordPress Protection: Basic config writing Before this file can be deleted, the configuration for the <code>auto_prepend_file</code> setting needs to be removed. Beginning file hashing Belarus Belgium Belize Benin Bermuda Beta scan signatures are currently enabled. These signatures have not been fully tested yet and may cause false positives or scan stability issues on some sites. Bhutan Block All Block Count Block Duration Block IP Block IPs who send POST requests with blank User-Agent and Referer Block Reason Block Reason: Block Technical Data Block This Network Block Type Block countries even if they are logged in Block crawlers that are using too many resources or stealing content Block external URL requests Block traffic by country, IP, IP range, user agent, referrer, or hostname Block<span class="wf-hidden-xs"> Visitors Matching this Pattern</span> Block<span class="wf-hidden-xs"> Visitors Matching this</span> Pattern Block<span class="wf-hidden-xs"> the Selected Countries</span> Block<span class="wf-hidden-xs"> this IP Address</span> Blocked Blocked By Firewall Blocked User Registration Contact Form Blocked WAF Blocked attack counts not available yet. Blocked because the IP is blocklisted Blocked by Wordfence Blocked by Wordfence Security Network Blocked by Wordfence plugin settings Blocked by login security setting Blocked by the Wordfence Application Firewall and plugin settings Blocked by the Wordfence Security Network Blocked by the Wordfence Web Application Firewall Blocked for %1$s in POST body: %2$s = %3$s Blocked for %1$s in cookie: %2$s = %3$s Blocked for %1$s in file: %2$s = %3$s Blocked for %1$s in query string: %2$s = %3$s Blocked for %s Blocking Blocking Builder Blocking IP %1$s. %2$s Blocking IP %s Blocking Options Blocklist Blocklist Check Blocklist Status Blocks requests from known malicious IPs Blog Highlights Bolivia Bonaire, Saint Eustatius and Saba Bosnia and Herzegovina Bot Botswana Bouvet Island Brazil British Indian Ocean Territory Browser Time: Browser user-agent to ignore Brunei Darussalam Brute Force Brute Force Protection Brute Force Protection Status Built-in caching Bulgaria Burkina Faso Burundi By default, Wordfence will scan your site daily. Start your first scan now to see if your site has any security issues that need to be addressed. From here you can run manual scans any time you like. Bypass Cookie Bypass Redirect Bypass the LiteSpeed "noabort" check Call to Wordfence API to resolve IPs failed: %s Calling Wordfence API v%s: Calling fork() from wordfenceHash with maxExecTime: %s Calling startScan(true) Cambodia Cameroon Canada Cancel Cancel Changes Cancel Scan Cancel<span class="wf-hidden-xs wf-hidden-sm"> Changes</span> Cancel<span class="wfls-visible-sm-inline"> Changes</span> Cape Verde Category Cayman Islands Cellphone Sign-In Recovery Codes Cellphone Sign-in Enabled Cellphone Sign-in activated for user. Cellphone Sign-in is only available to paid members. <a href="https://www.wordfence.com/gnl1twoFac3/wordfence-signup/" target="_blank" rel="noopener noreferrer">Click here to upgrade now.<span class="screen-reader-text"> ( Central African Republic Chad Change Filter Changelog Check for publicly accessible configuration files, backup files and logs Check if this website IP is generating spam Check if this website is being "Spamvertised" Check if this website is being "Spamvertised" Check if this website is on a domain blocklist Check if your site is being Spamvertized is for paid members only Check password strength on profile update Check spam & spamvertising blocklists Check the strength of passwords Checking %1$d URLs from %2$d sources. Checking %d host keys against Wordfence scanning servers. Checking OpenSSL version Checking Web Application Firewall status Checking basic config reading/writing Checking cronkey: %1$s (expecting %2$s) Checking for OpenSSL support Checking for cURL support Checking for future GeoIP support Checking for paths skipped due to scan settings Checking for the most secure way to get IPs Checking if MySQL user has <code>ALTER TABLE</code> privilege Checking if MySQL user has <code>CREATE TABLE</code> privilege Checking if MySQL user has <code>DELETE</code> privilege Checking if MySQL user has <code>DROP</code> privilege Checking if MySQL user has <code>INSERT</code> privilege Checking if MySQL user has <code>SELECT</code> privilege Checking if MySQL user has <code>TRUNCATE</code> privilege Checking if MySQL user has <code>UPDATE</code> privilege Checking if scan is already running Checking if web server can read from <code>~/plugins/wordfence</code> Checking if web server can read from <code>~/wp-content/wflogs</code> Checking if web server can write to <code>~/plugins/wordfence</code> Checking if web server can write to <code>~/wp-content/wflogs</code> Checking if your IP is generating spam is for paid members only Checking if your server discloses the path to the document root Checking if your site IP is generating spam Checking if your site is being Spamvertised Checking if your site is on a domain blocklist Checking if your site is on a domain blocklist is for paid members only Checking password strength of user '%1$s' with ID %2$d Checking saved cronkey against cronkey param Checking serialized config reading/writing Chile China Christmas Island Clear Clear Connection Data Clear Filter Clear all Wordfence Central connection data Click here for steps you can try. Click here to configure Click here to download a backup copy of this file now Click here to download a backup copy of your .htaccess file now Click here to unblock all IP addresses. Click here to unlock all IP addresses and disable the Wordfence Firewall and Wordfence login security for all users Click here to unlock your ability to sign-in and to access to the site. Click here to update now Click here to upgrade to Wordfence Premium: Click here to use the recommended setting Click inside window to resume Click to fix .htaccess Click to view your system's configuration in a new window Close Cocos (Keeling) Islands Code Collapse All Colombia Community Comoros Comparing core WordPress files against originals in repository Comparing open source themes against WordPress.org originals Comparing plugins against WordPress.org originals Completed checking password strength of user '%s' Complex Concatenate JavaScript files Configuration Complete Configured WAF storage engine (WFWAF_STORAGE_ENGINE) Configured but not valid Confirm Disconnect Confirm Restore Defaults Confirm Unsubscribe Congo Congo, The Democratic Republic of the Congratulations! Configuration is complete and Wordfence Premium is active on your website. Congratulations! Wordfence Premium is now active on your website. Please note that some Premium features are not enabled by default. Connect Site Connect This Site Connected by %1$s on %2$s Connecting back to this site Connecting to Wordfence servers (http) Connecting to Wordfence servers (https) Contacting Wordfence to initiate scan Content Safety Continue Cook Islands Cookie Core Core Upgrade Core hashes data received from Wordfence servers was not valid. Corrected Time (NTP): Corrected Time (WF): Costa Rica Cote dIvoire Could not connect to database to start scan: %s Could not contact Wordfence servers to generate a verification code: %s Could not delete file %1$s. Error was: %2$s Could not delete file %1$s. The error was: %2$s Could not delete file because that issue does not appear to be a file related issue. Could not delete file because we could not find that issue. Could not delete files Could not fetch core hashes from Wordfence servers. Could not fetch free license key from Wordfence: %s Could not fetch malware signatures from Wordfence servers. Could not generate verification code: %s Could not get username for user with ID %d when checking password strength. Could not read directory %s to do scan. Could not remove the option %1$s. The error was: %2$s Could not remove the option because that issue does not appear to be a database related issue. Could not remove the option because we could not find that issue. Could not repair files Could not understand the response we received from the Wordfence servers when applying for a free license key. Could not verify Wordfence License: %s Count Count failures over what time period Countries<span class="wf-hidden-xs"> to Block</span> Country Country Block Country Blocking Country blocking Crawlers Create a Blocking Rule Created Critical Critical Problems: Croatia Cron Jobs Cron Status Cron running frequency lock Cron test received and message printed Cuba Curacao Current Plugin Version Current Theme Version Current WAF configuration. Current WordPress Version Current blocks<span class="wf-hidden-xs"> for %s</span> Currently in Learning Mode Custom Custom "usermeta" table Custom "users" table Custom PHP error message Custom PHP fatal error handler Custom Scan Custom database class Custom database error message Custom installation script Custom maintenance message Custom scan options selected Custom site deleted message Custom site inactive message Custom site suspended message Custom text shown on block pages Custom upload folder location Cyprus Czech Republic Dashboard Dashboard Notification Options Dashboard notifications will also be displayed for Security Alerts, Promotions, Blog Highlights, and Product Updates. These notifications can be disabled by upgrading to a premium license. Data is invalid. Database Tables Database Version Database character set Database collation Database table names, sizes, timestamps, and other metadata. Database version and privileges. Date Deactivate Deactivate 2FA Debugging Options Default Deferring scheduled scan by %s Defines the multisite database ID for the current site Defines the multisite domain for the current site Defines the multisite path for the current site Delay IP and Country blocking until after WordPress and plugins have loaded (only process firewall rules early) Delete Delete All Deletable Files Delete File Delete Files Delete Login Security tables and data on deactivation Delete Option Delete User Delete Wordfence tables and data on deactivation Deleted %1$d files but we encountered the following errors with other files: %2$s Deleted %d files successfully Deleted %d files successfully. No errors were encountered. Deleted some files with errors Deleting an infected wp-config.php file must be done outside of Wordfence. The wp-config.php file contains your database credentials, which you will need to restore normal site operations. Your site will NOT function once the wp-config.php file has been deleted. Denmark Description Description: %s Detail Details Detected IP(s): Detected IP: Detected loop in malware scan, aborting. Detection of security issues Diagnostic report has been sent successfully. Diagnostics Directory Listing Disabled Directory Listing Enabled Directory listing has been disabled on your server. Directory listing is enabled Directory listing provides an attacker with the complete index of all the resources located inside of the directory. The specific risks and consequences vary depending on which files are listed and accessible, but it is recommended that you disable it unless it is needed. Disable Disable Author Scanning. Disable Code Execution for Uploads directory Disable WordPress application passwords Disable XML-RPC authentication Disable reading of php://input Disable the fatal error handler Disabled Disabled: Disallow plugin/theme editing Disallow plugin/theme update and installation Disconnect Disconnect Site Disconnect This Site Disconnected by %1$s on %2$s Discounts for multi-year and multi-license purchases Disk Space Dismiss Display "All Options" menu item Display "Blocking" menu item Display "Live Traffic" menu item Display All Options menu item Display Blocking menu item Display Blocking menu option Display Live Traffic menu item Display Live Traffic menu option Djibouti Do not delete files on your system unless you're ABSOLUTELY sure you know what you're doing. If you delete the wrong file it could cause your WordPress website to stop functioning and you will probably have to restore from backups. If you're unsure, Cancel and work with your hosting provider to clean your system of infected files. If you'd like to learn more, <a href="%s" target="_blank" rel="noopener noreferrer">click here for our help article<span class="screen-reader-text"> (opens in new tab)</span></a>. Do not repair files on your system unless you're ABSOLUTELY sure you know what you're doing. If you repair the wrong file it could cause your WordPress website to stop functioning and you will probably have to restore from backups. If you're unsure, Cancel and work with your hosting provider to clean your system of infected files. Do not upgrade global tables Do this if you keep getting locked out or blocked and can't access your site. You can re-enable login security and the firewall once you sign-in to the site by visiting the Wordfence Firewall menu, clicking and then turning on the firewall and login security options. If you use country blocking, you will also need to choose which countries to block. Do this if you simply need to regain access because you were accidentally locked out. If you received an "Insecure Password" message before getting locked out, you may also need to reset your password. Do this if you still can't regain access using the link above. It causes everyone who is blocked or locked out to be able to access your site again. Do you want Wordfence to stay up-to-date automatically? Documentation Documentation about Wordfence may be found on our website by clicking the button below or by clicking the <i class="wf-fa wf-fa-question-circle-o" aria-hidden="true"></i> links on any of the plugin's pages. Dominica Dominican Republic Don't ask again Don't let WordPress reveal valid users in login errors Don't log signed-in users with publishing access Done Done URL check. Done examining URLs Done file contents scan Done host key check. Download Download %s Download Backup File Download Recovery Codes Drop-In WordPress Plugins Each feature contains a status percentage reminding you at a high level of what's enabled, disabled, or needing your attention. The Notifications section highlights actions you need to take. Each feature contains a status that reminds you what's enabled, disabled or needs attention. The Notifications section will highlight actions you need to take. Each line of %d letters and numbers is a single recovery code, with optional spaces for readability. To use a recovery code, after entering your username and password, enter the code like "1234 5678 90AB CDEF" at the 2FA prompt. If your site has a custom login prompt and does not show a 2FA prompt, you can use the single-step method by entering your password and the code together in the Password field, like "mypassword1234 5678 90AB CDEF". Your recovery codes are: Each line of 16 letters and numbers is a single recovery code, with optional spaces for readability. When typing your password, enter "wf" followed by the entire code like "mypassword wf1234 5678 90AB CDEF". If your site shows a separate prompt for entering a code after entering only your username and password, enter only the code like "1234 5678 90AB CDEF". Your recovery codes are: Easily Monitor Your Wordfence Protection Ecuador Edit Edit Blocking Rule Edit trusted proxies Edit two-factor authentication for %s Editing User: %s <span class="wfls-text-plain">%s</span> Egypt Either you or someone at IP address <b>%1$s</b> requested an alert unsubscribe link for the website <a href="%2$s"><b>%3$s</b></a>. Either you or someone else at IP address <b>%1$s</b> requested instructions to regain access to the website <a href="%2$s"><b>%3$s</b></a>. El Salvador Email Alert Preferences Email Diagnostic Report Email Wordfence Activity Log Email address is invalid. Email address: Email me if Wordfence is deactivated Email me if the Wordfence Web Application Firewall is turned off Email me when Wordfence is automatically updated Email verification invalid or expired. Please try again. Email verification succeeded. Please continue logging in. Email: %s Email<span class="wf-hidden-xs"> activity</span> log Enable Enable Automatic Scans Enable Block Admin Registration. Enable Brute Force Protection. Enable Firewall Enable Firewall. Enable Mask Login Errors. Enable Premium Reputation Checks. Enable Premium Rules. Enable Premium Scan Signatures. Enable Rate Limiting and Advanced Blocking Enable Rate Limiting and Advanced Blocking. Enable Real-Time IP Blocklist. Enable Real-Time Wordfence Security Network. Enable SSL Verification (Disable this if you are consistently unable to connect to the Wordfence servers.) Enable Separate Prompt for Two Factor Code Enable Two-Factor Authentication Enable activity report widget on the WordPress dashboard Enable beta threat defense feed Enable brute force protection Enable country blocking by upgrading to Premium. Enable debugging mode (increases database load) Enable email summary Enable firewall. Enable reCAPTCHA on the login and user registration pages Enable scan option to check if this website is being "Spamvertised". Enable scan option to check if your website IP is generating spam. Enable scan option to check if your website is on a domain blocklist. Enabled Enabled and Protecting Enabled and Protecting: Encountered file that is too large: %s - Skipping. Enforce Strong Passwords. Enforce strong passwords Enter Premium Key Enter Premium License Key Enter a duration (default is forever) Enter a full URL (e.g., http://example.com/blocked/) Enter a reason Enter a valid IP or domain Enter activation code: Enter an IP address Enter the code from your authenticator app below to verify and activate two-factor authentication for this account. Enter the email address you would like to send the Wordfence activity log to. Note that the activity log may contain thousands of lines of data. This log is usually only sent to a member of the Wordfence support team. It also contains your PHP configuration from the phpinfo() function for diagnostic data. Enter username to enable Two-Factor Authentication for Enter your premium license key to enable real-time protection for your website. Entered fork() Entering start scan routine Entire Site Equatorial Guinea Eritrea Error Error Activating 2FA Error Deactivating 2FA Error During Setup Error Enabling All Options Page Error Generating New Codes Error Installing License Error Restoring Defaults Error Saving Option Error Saving Options Error Sending Notification Error checking domain blocklists: %s Error during Export Error during Import Error finishing writing value for %1$s (MySQLi error: [%2$s] %3$s) Error reassembling value for %s Error writing value chunk for %1$s (MySQLi error: [%2$s] %3$s) Error writing value for %1$s (MySQLi error: [%2$s] %3$s) Error writing value header for %s Errors occurred while saving the configuration. Errors occurred while saving the configuration: %s Estonia Ethiopia Europe Every Other Day Everything Examining URLs found in posts we scanned for dangerous websites Examining URLs found in the options we scanned for dangerous websites Exceeded the maximum global requests per minute for crawlers or humans. Exceeded the maximum number of login failures which is: %1$s. The last username they tried to sign in with was: '%2$s' Exceeded the maximum number of page not found errors per minute for a crawler. Exceeded the maximum number of page not found errors per minute for humans. Exceeded the maximum number of page requests per minute for humans. Exceeded the maximum number of requests per minute for crawlers. Exceeded the maximum number of tries to recover their password which is set at: %1$s. The last username or email they entered before getting locked out was: '%2$s' Exclude files from scan that match these wildcard patterns Exclude files from scan that match these wildcard patterns (one per line) Executed before Multisite is loaded Existing User Existing WAF Installation Detected: Expand All Expand All Results Expiration Explicitly set blog URL Explicitly set site URL Export Successful Export this site's Wordfence options for import on another site Export<span class="wf-hidden-xs"> All IPs</span> Export<span class="wf-hidden-xs"> Wordfence</span> Options Extended Protection Extended Protection Mode has not been disabled. This may be because <code>auto_prepend_file</code> is configured somewhere else or the value is still cached by PHP. Extended Protection Mode of the Wordfence Web Application Firewall uses the PHP ini setting called <code>auto_prepend_file</code> in order to ensure it runs before any potentially vulnerable code runs. This PHP setting currently refers to the Wordfence file at: Extended Protection: External object cache Failed Failed Login Failed Login: Invalid Username Failed Login: Valid Username Falkland Islands (Malvinas) Faroe Islands Fetching core, theme and plugin file signatures from Wordfence Fetching fresh core hashes Fetching fresh malware prefixes Fetching list of known core files from Wordfence Fetching list of known malware files from Wordfence Fetching stored cronkey for comparison. Fiji File File "%s" does not exist File "%s" is unreadable File "%s" is unwritable File Changes File Name File Size: File System Credentials Required File Type File access blocked. (WORDFENCE_DISABLE_FILE_VIEWER is true) File appears to be malicious or unsafe: %s File contains illegal characters. File contains suspected malware URL: File contains suspected phishing URL: File does not exist. File hidden successfully File is an old version of TimThumb which is vulnerable. File last modified: File restored OK File type: Filename Filename: Filesystem Credentials Required Filesystem Permission Error Filter Filter Traffic Filter Value Filter by Type, Detail, or Reason Finalizing malware scan results Find the documentation and help you need Finland Firewall Firewall Options Firewall Response Firewall Response: Firewall Rules Status Firewall Rules: Firewall Status Firewall Summary: Firewall issues may be caused by file permission changes or other technical problems. Fixing wp_mail from address: %s For admins only For all users with "publish posts" capability For entry-level hosting plans. Provides limited detection capability with very low resource utilization. For help on setting up an app, visit our help article. For maximum security use PHP's built in REMOTE_ADDR. For site owners who think they may have been hacked. More thorough but may produce false positives. Force SSL for administrative logins Force admins and publishers to use strong passwords (recommended) Force all members to use strong passwords Forking during hash scan to ensure continuity. Forking during indexing: %s Forking during malware scan (%s) to ensure continuity. Found Found %d plugin Found %d plugins Found %d theme Found %d themes Found .suspected file: %s France Free License Installed Free Support French Guiana French Polynesia French Southern Territories Friday From: Front-end Website Full Browser ID: Full Name Full Path Disclosure Full Path Disclosure (FPD) vulnerabilities enable the attacker to see the path to the webroot/file. e.g.: /home/user/htdocs/file/. Certain vulnerabilities, such as using the load_file() (within a SQL Injection) query to view the page source, require the attacker to have the full path to the file they wish to view. GDPR Information Gabon Gambia Gathering host keys. General General Data Protection Regulation General Options General Wordfence Options General information about the Wordfence installation. Generate Generate New Codes Generate New Recovery Codes Generated by Wordfence at Generated by Wordfence at %s Generated in %.4f seconds GeoIP Version Georgia Germany Get Help Getting plugin list from WordPress Getting theme list from WordPress Ghana Gibraltar Global Options Global Wordfence Options Go To Dashboard Go To New 2FA Go To Option Go to Go to Support Forums Go: Google Bot Google Crawlers Got a true deserialized value back from 'wfsd_engine' with type: %s Got error response from Wordfence servers: %s Got it Got max_execution_time value from ini: %s Got value from wf config maxExecutionTime: %s Greater than 2 Gigs Greece Greenland Greetings! The default configuration for Wordfence Live Traffic has changed. The new default saves only logins and blocked requests, while this site is currently recording all traffic. Would you like to change to the new default? Grenada Group By: Guadeloupe Guam Guatemala Guernsey Guinea Guinea-Bissau Guyana HIGH SENSITIVITY scanning is enabled, it may produce false positives HTML tags will be stripped prior to output and line breaks will be converted into the appropriate tags. HTTP %1$d received from Wordfence Central: %2$s HTTP Response Code HTTP Response Code: Haiti Header Heard Island and McDonald Islands Help Here's where you'll see all the blocking rules you've created. You can also manage them as well as remove or modify them from this table. Hide File Hide WordPress version Hide log High High Sensitivity High Severity Problems: Hit enter to add a username Holy See (Vatican City State) Honduras Hong Kong Hostname Hostname for a proxy server How are these categorized? How do I get to 100%? How does Wordfence determine this? How does Wordfence get IPs How long is an IP address blocked when it breaks a rule How much memory should Wordfence request when scanning How should we treat Google's crawlers How to block a network How to get IPs Human Human/Bot: Humans Hungary IP IP / Action IP Address IP Block IP Detection IP Range IP Throttled IP reputation monitoring IP(s) used by this server IP: IP<span class="wf-hidden-xs"> Address to Block</span> IP<span class="wf-hidden-xs"> Address</span> IP<span class="wf-hidden-xs"> Address</span> Range IPs Iceland Idle If a crawler's page views exceed If a crawler's pages not found (404s) exceed If a human's page views exceed If a human's pages not found (404s) exceed If anyone's requests exceed If disabled, XML-RPC requests that attempt authentication will be rejected. If enabled, XML-RPC calls that require authentication will also require a valid 2FA code to be appended to the password. You must choose the "Skipped" option if you use the WordPress app, the Jetpack plugin, or other services that require XML-RPC. If enabled, all settings and 2FA records will be deleted on deactivation. If later reactivated, all users that previously had 2FA active will need to set it up again. If enabled, users with 2FA enabled may choose to be prompted for a code only once every 30 days per device. If the email address provided was on the alert email list, it has been sent an unsubscribe link. If this is a false positive, you can exclude this parameter from being filtered by the firewall If user from a blocked country hits the relative URL ____ then redirect that user to ____ and set a cookie that will bypass all country blocking If user hits the relative URL If user who is allowed to access the site views the relative URL If user who is allowed to access the site views the relative URL ____ then set a cookie that will bypass country blocking in future in case that user hits the site from a blocked country If you are a WordPress user with administrative privileges on this site please enter your email in the box below and click "Send". You will then receive an email that helps you regain access. If you are using a web server not listed in the dropdown or if file permissions prevent the installer from completing successfully, you will need to perform the change manually. Click Continue below to create the required file and view manual installation instructions. If you cannot complete the setup process, If you did not request these instructions then you can safely ignore them. If you did not request this, you can safely ignore it. If you don't have one, you can purchase one now. If you have a conflict with the new 2FA method, you can temporarily switch back to the Legacy version. If you have automatic updates enabled (see above), you'll get an email when an update occurs. If you have separate WordPress installations with Wordfence installed within a subdirectory of this site, it is recommended that you perform the Firewall installation procedure on those sites before this one. If you know your web server's configuration, please select it from the list below. If you think you have been blocked in error, contact the owner of this site for assistance. If you want to reenable Wordfence Live Traffic, you need to deactivate %1$s and then go to the Wordfence options page and reenable Live Traffic there. Wordfence does work with %1$s, however Live Traffic will be disabled and the Wordfence firewall will also count less hits per visitor because of the %1$s caching function. All other functions should work correctly. If you would like to sign-in to <a href="%1$s">%1$s</a> please <a href="%2$s">click here</a> now. You can change the frequency of this email or turn it on and off by visiting your <a href="%3$s">Wordfence options page</a>. If you're looking for a more comprehensive solution, the <a href="%s" target="_blank" rel="noopener noreferrer">full Wordfence plugin</a> includes all of the features in this plugin as well as a full-featured WordPress firewall, a security scanner, live traffic, and more. The standard installation includes a robust set of free features that can be upgraded via a Premium license key. If you're moving to a new host or a new installation location, you may need to temporarily disable extended protection to avoid any file not found errors. Use this action to remove the configuration changes that enable extended protection mode or you can <a href="%s" target="_blank" rel="noopener noreferrer">remove them manually<span class="screen-reader-text"> (opens in new tab)</span></a>. Ignore Ignore Ignore All for User Ignore Only this Password Ignore Only this Title Ignore Option Ignore URL Ignore Until File Changes Ignore Until Version Changes Ignore Update Ignore Value Ignore this URL Ignored Ignored IP addresses for Wordfence Web Application Firewall alerting Ignored IPs must be separated by commas or placed on separate lines. These addresses will be ignored from any alerts about increased attacks and can be used to ignore things like standalone website security scanners. Ignored<span class="wf-hidden-xs"> Results</span> Immediately block IPs that access these URLs Immediately block the IP of users who try to sign in as these usernames Immediately lock out invalid usernames Import Successful Import Wordfence options from another site using a token Import/Export Options Import<span class="wf-hidden-xs"> Wordfence</span> Options Importing and exporting of options has moved to the Tools page Importing and exporting of options is available on the Tools page In this mode, the Wordfence Web Application Firewall is actively blocking requests matching known attack patterns and is actively protecting your site from attackers. In this mode, the Wordfence Web Application Firewall is functionally turned off and does not run any of its rules or analyze the request in any way. In use Inactive Include Including files that are outside the WordPress installation in the scan. Increased Attack Rate Index time: %s Indexing files for scanning India Individual Allowlisting Indonesia Initiating quick scan Insecure Password Install Install License Install Wordfence License Installation Failed Installation Successful Interval the trash is automatically emptied at in days Introducing the New Wordfence 2FA Invalid IP address. Invalid IP range. Invalid block duration. Invalid block type. Invalid bulk operation selected Invalid email address given. Invalid email address provided Invalid file requested. (Relative paths not allowed) Invalid function specified. Please check the link we emailed you and make sure it was not cut-off by your email reader. Invalid hostname. Invalid key provided for authentication. Invalid log type to wfLog: %s Invalid response from Wordfence API during check_possible_malware Invalid response from Wordfence Central. Invalid response from Wordfence Central. Parameter %s not found in response. Invalid response from Wordfence Central: %s Invalid response from Wordfence servers. Invalid response received from Wordfence Central when fetching nonce. Invalid response received from Wordfence Central when fetching token. Invalid response: Invalid response: %s Invalid user ID. Iran, Islamic Republic of Iraq Ireland Isle of Man Israel Issue First Detected Issue Found Issue Found: %s It has unpatched security issues and may have compatibility problems with the current version of WordPress. It is currently configured to use an older version of PHP and may become deactivated if PHP is updated. You may perform the configuration update automatically by <a href="%1$s">clicking here</a>. <a class="wfhelp" target="_blank" rel="noopener noreferrer" href="%2$s"><span class="screen-reader-text"> ( It is not currently in extended protection mode but was configured to use an older version of PHP and may have become deactivated when PHP was updated. You may perform the configuration update automatically by <a href="%1$s">clicking here</a> or use the "Optimize the Wordfence Firewall" button on the Firewall Options page. <a class="wfhelp" target="_blank" rel="noopener noreferrer" href="%2$s"><span class="screen-reader-text"> ( It looks like you've tried to connect this site to Wordfence Central, but the installation did not finish. It was last updated %1$s ago and tested up to WordPress %2$s. It was last updated %s ago. Italy Jamaica Japan JavaScript Errors Jersey Job Jordan Kazakhstan Kenya Key: Kiribati Kosovo Kuwait Kyrgyzstan LICENSE KEY: %s LOG: Language choice Lao Peoples Democratic Republic Last Attempt Last CAPTCHA Last Hit: Last Login Last Updated Last Updated: %s Last Updated: %s ago Last hit was %s ago. Last scan failed Latvia Learn More Learn More: %s Learn more about repairing modified files. Learn more<span class="wf-hidden-xs"> about Blocking</span> Learn more<span class="wf-hidden-xs"> about Global Options</span> Learn more<span class="wf-hidden-xs"> about Scanning</span> Learn more<span class="wf-hidden-xs"> about Two-Factor Authentication</span> Learn more<span class="wf-hidden-xs"> about the Dashboard</span> Learn more<span class="wf-hidden-xs"> about the Firewall</span> Learn more<span class="wf-hidden-xs"> about the Scanner</span> Learn more<span class="wfls-hidden-xs"> about Login Security</span> Learn more<span class="wfls-hidden-xs"> about Two-Factor Authentication</span> Learning Mode Learning Mode Enabled Learning Mode Until %s Learning Mode: Lebanon Legacy Two-Factor Authentication Active Legacy support for SMS-based two-factor authentication is being phased out, as it is less secure than using a modern authenticator app. Lesotho Let Wordfence choose when to scan my site (recommended) Let Wordfence use the most secure method to get visitor IP addresses. Prevents spoofing and works with most sites. Liberia Libyan Arab Jamahiriya License Key License Status: License already in use License is expired License renews %s License renews in %d days License renews in 1 day License renews today License renews tomorrow Liechtenstein Limit the number of issues sent in the scan results email Limited Limited Scan List of WordPress cron jobs scheduled by WordPress, plugins, or themes. List of comma separated IP addresses to ignore List of comma separated usernames to ignore List of directories to exclude from recently modified file list LiteSpeed/lsapi Lithuania Live Traffic Live Traffic Options Live Traffic, Whois Lookup, Import/Export, and Diagnostics Live Updates Paused Live Updates Paused — Click inside window to resume Live traffic defaults to a summary view of all security-related traffic. Details are viewable by clicking anywhere within the summary record. To switch to the expanded view, click the <strong>Expand All Records</strong> switch. Live traffic now defaults to a summary view. Details are viewable by clicking anywhere within the summary record. To switch to the expanded view, click the <strong>Expand All Records</strong> switch. New installations will only log security-related traffic by default, though your previous setting has been preserved. Loading... Location Location: Lock out after how many forgot password attempts Lock out after how many login failures Locked Out Locked out from logging in Lockout Log Files Logged In Login Attempts Login Form Login Name Login Only Login Security Login Security Options Login Security Settings Login Security options are available on the Login Security options page Login Security: Allow remembering device for 30 days Login Security: Allowlisted IP addresses that bypass 2FA Login Security: Disable XML-RPC authentication Login Security: Enable 2FA for these roles Login Security: Enable reCAPTCHA on the login and user registration pages Login Security: Require 2FA for XML-RPC call authentication Login Verification Required Login and firewall activity will appear below. Logins Logins and Logouts Look up IP or Domain Looks like the Wordfence database tables have been deleted. You can fix this by de-activating and re-activating the Wordfence plugin from your Plugins menu. Low Low Severity Problems: Low resource utilization, limited detection capability Luxembourg Macao Macedonia Madagascar Make Permanent Malawi Malaysia Maldives Mali Malta Malware Scan Malware Signatures Status Malware Signatures: Malware URLs Malware data received from Wordfence servers was not valid. Manage 2FA Manage 2FA Settings Manage Blocking Rules Manage Brute Force Protection Manage Firewall Manage Firewall Rules Manage Options Manage Plugins Manage Real-Time IP Blocklist Manage Scan Manage Scan Settings Manage Users Manage WAF Manage global and advanced firewall options Manage global blocking options. Manage global options for Wordfence such as alerts, premium status, and more Manage scan options including scheduling Manage your Wordfence license, see alerts and automatic plugin updates, and import/export your settings. Manual Configuration Manual Installation Instructions Manual block by administrator Manual permanent block by admin Manually Refresh Rules Manually schedule scans Mark as Fixed Marking comment as spam for containing a malware URL. Comment has %s Marking comment as spam for containing a phishing URL. Comment has %s Marshall Islands Martinique Mauritania Mauritius Maximum days to keep Live Traffic data Maximum days to keep Live Traffic data (minimum: 1) Maximum email alerts to send per hour Maximum execution time for each scan stage Maximum execution time for each scan stage Mayotte Medium Medium Severity Problems: Memory size in megabytes Methods of detecting a visitor's IP address. Mexico Micronesia, Federated States of Migrate Migrate or switch to new two-factor authentication? Migration Cannot Proceed Migration Failed Mode Modified Modified plugin file: %s Modified theme file: %s Modifying the .htaccess file did not resolve the issue, so the original .htaccess file was restored. You can fix this manually by setting <code>display_errors</code> to <code>Off</code> in your php.ini if your site is on a VPS or dedicated server that you control. Moldova, Republic of Monaco Monday Mongolia Monitor Web Application Firewall status Monitor Your Wordfence Protection Monitor background requests from an administrator's web browser for false positives Monitor background requests from an administrator's web browser for false positives (Admin Panel) Monitor background requests from an administrator's web browser for false positives (Front-end Website) Monitor disk space Montenegro Month Montserrat More Details and Instructions More Information Morocco Mozambique Multisite Blog Domain Multisite Blog ID Multisite Blog Path Multisite enabled Multisite enabled, Older subdomain installation constant Multisite enabled, WordPress will load the /wp-content/sunrise.php file Multisite enabled, subdomain installation constant Multisite/network ability enabled Must-Use WordPress Plugins Myanmar NGINX NOTE: NOTE: This checkbox enables ALL blocking/throttling functions including IP, country and advanced blocking, and the "Rate Limiting Rules" below. NOTE: You are using the free version of Wordfence and are missing out on features like real-time firewall rule and malware signature updates, country blocking, and detecting if your site IP is sending spam. <a href="http://www.wordfence.com/zz6/">Click here to upgrade to Wordfence Premium now</a>. NOTE: You are using the free version of Wordfence. Upgrade today: NOTE: You are using the free version of Wordfence. Upgrade today:
- Receive real-time Firewall and Scan engine rule updates for protection as threats emerge
- Real-time IP Blocklist blocks the most malicious IPs from accessing your site
- Country blocking
- IP reputation monitoring
- Schedule scans to run more frequently and at optimal times
- Access to Premium Support
- Discounts for multi-year and multi-license purchases
Click here to upgrade to Wordfence Premium:
https://www.wordfence.com/zz1/wordfence-signup/ NTP NTP Time Offset Name Namibia Nauru Need help from the WordPress security experts? Nepal Netherlands Network Activated Never New New Caledonia New Issues (%d total) New Login Page Captcha Feature New Plugin Version New Recovery Codes New Theme Version New Two-Factor Authentication Active New WordPress Version New Zealand Next Next Update Check: %s Next scan in %1$s (%2$s) Next scan is starting now Nicaragua Nice work! The firewall is now optimized. Niger Nigeria Niue No No Data Available During Learning Mode No IPs blocked yet. No Ignored Issues No MU-Plugins No New Issues No Thanks No Themes No activity to report yet. Please complete your first scan. No allowlisted URLs currently set. No block parameters provided. No block parameters were provided. No blocked attacks yet. No blocks are currently active. No blocks have been recorded. No blocks match the current filter. No blocks were provided. No configuration changes were provided to save. No configuration section was provided. No countries selected. No data currently. No failed logins have been recorded. No failed logins yet. No files readable No files remaining for malware scan. No files writable No issues have been ignored. No license was provided to install. No log files found. No longer an administrator for this site? <a href="%s" target="_blank">Click here</a> to stop receiving security alerts. No longer an administrator for this site? Click here to stop receiving security alerts: %s No new issues have been found. No notifications received No requests blocked yet. No requests to report yet. No rules currently set. No rules were updated. Please verify you have permissions to write to the /wp-content/wflogs directory. No rules were updated. Please verify your website can reach the Wordfence servers. No rules were updated. Your website has reached the maximum number of rule update requests. Please try again later. No scan is scheduled No successful logins have been recorded. No thanks. No updates are available at this time. No users currently have cellphone sign-in enabled. No: %s Nonce format is invalid. Nonce is invalid. None Norfolk Island Normal Normal request North Korea Northern Mariana Islands Norway Not Allowed Not a core, theme, or plugin file from wordpress.org Note: Status will update when changes are saved Note: This does not include Login Security settings and tables. An option to delete those must be selected separately on the Login Security settings page. Nothing done Nothing selected to block. Notification Sent Notifications Number of scan results to return. OK Odd Days & Weekends Off Offset of scan results to return. Old WordPress core file not removed during update: %s Oman On Once Daily Once a day Once a month Once a week Once you have downloaded the files, click Continue to complete the setup. Once you have downloaded the files, click Continue to complete uninstallation. Once you have entered credentials, click Continue to complete the setup. Once you have entered credentials, click Continue to complete uninstallation. One or more users with two-factor authentication active are using SMS, which is unsupported in the new login security module. Please either deactivate two-factor authentication for those users or change them to use an authenticator app prior to migration. Only alert me when that administrator signs in from a new device Only alert me when that user signs in from a new device Optimize Wordfence Firewall Optimize the Wordfence Firewall Optimize the Wordfence Firewall. Option Option Name Option contains a suspected malware URL: %s Option contains a suspected phishing site URL: %s Optional Other Tests Our recommendation for all websites. Provides the best detection capability in the industry. Our senior support engineers <strong>respond to Premium tickets within a few hours</strong> on average and have a direct line to our QA and development teams. Overdue Overridden permissions for a new file Overridden permissions for a new folder Overridden: %s Override Overwrite image edits when restoring the original PHP Update Needed for Country Blocking PHP error logs generated by your site, if enabled by your host. PHP version too old PHP version, important PHP extensions. PLUGIN VERSION: %s PM POST Body POST received with blank user-agent and referer Page Visited Page contains %d malware URL: Page contains %d malware URLs: Pages Not Found Paid Members Only Pakistan Palau Palestinian Territory Panama Papua New Guinea Paraguay Param Param Name Part of the Firewall configuration procedure for NGINX depends on creating a <code>%1$s</code> file in the root of your WordPress installation. This file can contain sensitive information and public access to it should be restricted. We have <a href="%2$s" target="_blank" rel="noreferrer noopener">instructions on our documentation site<span class="screen-reader-text"> (opens in new tab)</span></a> on what directives to put in your nginx.conf to fix this. Participate in the Real-Time Wordfence Security Network Passing public key to Wordfence Central. Password Strength Password recovery attempted Passwords containing a space followed by "wf" without quotes are not allowed. Pause live updates when window loses focus Payment Method Expired Payment Method Expiring Payment Method Invalid Payment Method Missing Performance Options Permanent Peru Philippines Phone (%s) Pick<span class="wf-hidden-xs"> from List</span> Pitcairn Please Complete Wordfence Installation Please choose a different password. The password you are using exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. <a href="%s">Learn More</a> Please choose a stronger password. Try including numbers, symbols, and a mix of upper and lowercase letters and remove common words. Please confirm the unsubscribe request for %s. Please download a backup of the following files before we make the necessary changes: Please enter a valid IP address or domain name for your whois lookup. Please enter a valid IP address to block. Please enter a valid email address. Please enter an email address to unsubscribe from alerts. If this email address exists on the alert email list, it will receive a confirmation link to unsubscribe. Please enter the license to install. Please include your support ticket number or forum username. Please make a backup of this file before proceeding. If you need to restore this backup file, you can copy it to the following path from your site's root: Please make sure you separate your IP addresses with commas. The following allowlisted IP addresses are invalid: Please read this article in our FAQ to make an important change that will ensure your site stability during an update. Please specify a reason Please specify a valid IP address range in the form of "1.2.3.4 - 1.2.3.5" without quotes. Make sure the dash between the IP addresses in a normal dash (a minus sign on your keyboard) and not another character that looks like a dash. Please specify either an IP address range, Hostname or a web browser pattern to match. Please tell us where Wordfence should send you security alerts for your website: Please verify a login attempt for your account on <a href="%s"><strong>%s</strong></a>. Please wait 3 minutes and try again Plugin Abandoned Plugin File Plugin Name Plugin Name: Plugin Removed Plugin URL Plugin Upgrade Plugin Version: Plugin Vulnerable Plugin contains an unpatched security vulnerability. Plugin has unpatched security issues. Plugins Plugins can be removed from wordpress.org for various reasons. This can include benign issues like a plugin author discontinuing development or moving the plugin distribution to their own site, but some might also be due to security issues. In any case, future updates may or may not be available, so it is worth investigating the cause and deciding whether to temporarily or permanently replace or remove the plugin. Poland Port for a proxy server Portugal Post Post editing automatic saving interval Post revisions saved by WordPress Post title contains suspicious code Posted on Posts, Comments, & Files Premium Premium Feature Premium Feature: Premium License Conflict Premium License Expiring Premium License Installed Premium Protection Disabled Premium Protection Enabled Premium Support Prevent discovery of usernames through "/?author=N" scans, the oEmbed API, the WordPress REST API, and WordPress XML Sitemaps Prevent discovery of usernames through '/?author=N' scans, the oEmbed API, the WordPress REST API, and WordPress XML Sitemaps Prevent the use of passwords leaked in data breaches Prevent users registering "admin" username if it doesn't exist Prevent users registering 'admin' username if it doesn't exist Previous Previous scan terminated with an error. See below. Previous scan was stopped successfully. Process Owner Processing pending issues Product Updates Promotions Protect More Sites Protection Level Protection from known and emerging threats Public Files Publicly Accessible Config/Backup/Log Publicly accessible config, backup, or log file found: %s Publicly accessible quarantined file found: %s Puerto Rico Put Geographic Protection In Place With Country Blocking Qatar Quarantined File Query String Quick Quick Scan Complete. Scanned in %s. Ranges mixing IPv4 and IPv6 addresses are not supported. Rate Limiting Rate limiting based on type of request (human vs crawler) may be less accurate because this prevents loading the extra JavaScript used for that identification. Real-Time IP Blocklist Real-Time IP Blocklist: Real-time IP Blocklist blocks the most malicious IPs from accessing your site Reason Receive real-time Firewall and Scan engine rule updates for protection as threats emerge Recent Recent Activity Recently Blocked Attacks Recently Modified Files Recently removed wflogs files Recommended Settings Change Reconnect This Site Recovery Codes Redirected Redirected by Country Blocking bypass URL Redirecting back to Wordfence Central. Referer Referrer Referrer: Registered Users Regular traffic and security-related traffic will appear below. Reload Reminder: If you lose access to your authenticator device, you can use recovery codes to log in. If you have not saved a copy of your recovery codes, we recommend downloading them now. Remove Extended Protection Renew License Repair Repair All Repairable Files Repair Files Repair the Wordfence Firewall configuration. Repaired %1$d files but we encountered the following errors with other files: %2$s Repaired %d files successfully Repaired %d files successfully. No errors were encountered. Repaired some files with errors Repository URL Reputation Check Status Reputation Checks Request Time: Request received via unlock email link to unblock all IPs via disabling firewall rules. Request received via unlock email link to unblock all IPs. Request was generated at: %s Requesting max memory Requests Require 2FA for XML-RPC call authentication Require Cellphone Sign-in for all Administrators Required Required parameters not sent. Requires downloading from the server directly Rescheduled missing daily cron Rescheduled missing hourly cron Reset License Reset Score Statistics Response Restore Defaults Restore<span class="wf-hidden-xs"> Defaults</span> Results Found Results<span class="wf-hidden-xs"> Found</span> Resume Installation Resuming malware scan at rule %s. Retrieving access token using authorization grant. Retrying Failed. Return to scan results Return to the <a href="%s">Wordfence Admin Page</a> Return to the site home page Return value of is_multisite() Reunion Revert Revert back to legacy two-factor authentication? Revert to Legacy 2FA Review Review Payment Method Revoke Capabilities Role Romania Rule Added Rule Update Failed Rule updates delayed by 30 days Rules Rules Updated Rules updated in real-time Run Time Run Whois Run a Scan Run reCAPTCHA in test mode Russian Federation Rwanda SHOW ALL RULES SITE: %s SSL is not supported by your web server and is required to use this function. Please ask your hosting provider or site admin to install cURL with openSSL to use this feature. SUM_KILLED:A request was received to stop the previous scan from Wordfence Central. Saint Bartelemey Saint Helena Saint Kitts and Nevis Saint Lucia Saint Martin Saint Pierre and Miquelon Saint Vincent and the Grenadines Samoa San Marino Sao Tome and Principe Saturday Saudi Arabia Save Save Changes Save<span class="wf-hidden-xs wf-hidden-sm"> Changes</span> Save<span class="wfls-visible-sm-inline"> Changes</span> Scan Scan Complete. Scan Complete. Scanned %1$d files, %2$d plugins, %3$d themes, %4$d posts, %5$d comments and %6$d URLs in %7$s. Scan Engine Error: %s Scan Failed Scan Issues Scan Options Scan Options & Settings Scan Options and Scheduling Scan Progress and Activity Scan Scheduling Scan Status Scan Stopping Scan Time Limit Exceeded Scan Type Scan Type: Scan WordPress core, plugin, and theme options for known dangerous URLs and suspicious content Scan can't continue - stored data not found after a fork. Scan can't continue - stored data not found after a fork. Got type: %s Scan comments for known dangerous URLs and suspicious content Scan complete. Congratulations, no new problems found. Scan complete. You have %d new issue to fix. Scan complete. You have %d new issues to fix. Scan completed on %s Scan core files against repository versions for changes Scan engine received request. Scan file contents for backdoors, trojans and suspicious code Scan file contents for malicious URLs Scan files outside your WordPress installation Scan for misconfigured How does Wordfence get IPs Scan for out of date, abandoned, and vulnerable plugins, themes, and WordPress versions Scan for publicly accessible configuration, backup, or log files Scan for publicly accessible quarantined files Scan for signatures of known malicious files Scan for suspicious admin users created outside of WordPress Scan images, binary, and other files as if they were executable Scan interrupted. No problems found prior to stopping. Scan interrupted. Scanned %1$d files, %2$d plugins, %3$d themes, %4$d posts, %5$d comments and %6$d URLs in %7$s. Scan interrupted. You have %d new issue to fix. See below. Scan interrupted. You have %d new issues to fix. See below. Scan plugin files against repository versions for changes Scan posts for known dangerous URLs and suspicious content Scan process ended after forking. Scan result group or all results. Scan stop request received from Wordfence Central. Scan stop request received. Scan terminated with error: %s Scan the code below with your authenticator app to add this account. Some authenticator apps also allow you to type in the text version instead. Scan theme files against repository versions for changes Scan was stopped on administrator request. Scan wp-admin and wp-includes for files not bundled with WordPress Scanned comment with %s Scanned contents of %1$d additional files at %2$.2f per second Scanner Options Scanning additional paths is optional and is not always necessary. Scanning comment with %s Scanning comments for URLs on a domain blocklist Scanning comments with %d left to scan. Scanning contents: %1$s (Size: %2$s Mem: %3$s) Scanning contents: %1$s (Size: %2$s) Scanning file contents for URLs on a domain blocklist Scanning file contents for infections and vulnerabilities Scanning for admin users not created through WordPress Scanning for known malware files Scanning for old themes, plugins and core files Scanning for publicly accessible quarantined files Scanning for suspicious site options Scanning for unknown files in wp-admin and wp-includes Scanning for weak passwords Scanning posts for URLs on a domain blocklist Scanning posts with %d left to scan. Scanning to check available disk space Scanning: %1$s (Mem:%2$s) Scanning: %s Scans are not functional because SSL is unavailable. Schedule Wordfence Scans Schedule scans to run more frequently and at optimal times Scheduled Wordfence scan starting at %s Scheduled time for day %s hour %s is: %s Seconds since last hit: Security Alerts Security Event Security Only Security token has expired. Click <a href="%s">here</a> to return to the scan page. See below. See recent traffic See the details of these scan results on your site at: %s Select Countries to Block from List Select row ${idx} Select/deselect all Selected automatically when General Options have been customized for this website. Send Send Report by Email Send Test Activity Report Send Test Email Send Unlock Email Send a test activity report email: Send a test email from this WordPress server to an email address: Send code to a phone number: Senegal Separate multiple URLs with commas or place them on separate lines. Asterisks are wildcards, but use with care. If you see an attacker repeatedly probing your site for a known vulnerability you can use this to immediately block them. All URLs must start with a "/" without quotes and must be relative. e.g. /badURLone/, /bannedPage.html, /dont-access/this/URL/, /starts/with-* Separate multiple addresses with commas Serbia Serialized config writing Server State Server Time Server Time: Server Update Server time accuracy and applied offsets. Set up the way you want the firewall to protect your site including the web application firewall, brute force protection, rate limiting, and blocking. Set up the way you want the scan to monitor your site security including custom scan configurations and scheduling. Set: %s Setting Name Setting higher will reduce browser traffic but slow scan starts, live traffic & status updates. Setting up error handling environment Setting up scanRunning and starting scan Settings Severity: %s Seychelles Should be: Show Advanced Filters Show log Show more Show<span class="wf-hidden-xs"> Wordfence</span> Automatic<span class="wf-hidden-xs"> Blocks</span> Sierra Leone Signature is invalid. Signature updates delayed by 30 days Signatures updated in real-time Since you have High Sensitivity scanning enabled, there is a very high likelihood that your results will include false positives. If you think you have indeed been hacked, our team of security experts can help. Since you have the beta threat defense feed enabled, there is a high likelihood that your results could include false positives. If you think you have indeed been hacked, our team of security experts can help. Singapore Sint Maarten Site Except Login Site ID is invalid. Site is not connected to Wordfence Central. Skip Skipped Skipped Paths Skipping core scan Skipping file larger than max size: %s Skipping malware scan Skipping plugin scan Skipping scan of file contents for URLs on a domain blocklist Skipping scan of file contents for infections and vulnerabilities Skipping theme scan Skipping unknown core file scan Skipping unneeded hash: %s Slovakia Slovenia Solomon Islands Somalia Someone tried to recover the password for user with email address: %s Sorry but this feature is only available for paid customers. Sorry but your browser sent an invalid security token when trying to use this form. Sorry, but no data for that IP or domain was found. Sorry, you are not allowed to list users. Source Source IP: %s South Africa South Georgia and the South Sandwich Islands South Korea Space Remaining Spain Spam Spam Check Spamvertising Checks Specific config options to return. Specific config options to set. Specify a valid IP range Specify a valid hostname Specify an IP range, Hostname or Browser pattern Sri Lanka Standard Standard Scan Standard detection capability Standard detection capability, chance of false positives Start New Scan Start Your First Scan Start all scans remotely (Try this if your scans aren't starting and your site is publicly accessible) Start time Starting cron via proxy at URL %s Starting cron with normal ajax at URL %s Starting password strength check on %d user. Starting password strength check on %d users. Starting scan of file contents Status Status Updates Paused<br /><small>Click inside window to resume</small> Status of installed plugins. Status of installed themes. Stop Failed Stop Ignoring Stop Scan Stops Complex Attacks Stops Password Guessing Attacks Success deleting file Success removing option Success restoring file Success updating option Successful Successfully deleted admin Successfully revoked admin Sudan Sunday Super Administrator Support Support for free customers is available via our forums page on wordpress.org. The majority of requests <strong>receive an answer within a few days.</strong> Suriname Svalbard and Jan Mayen Swaziland Sweden Switch Switch to New 2FA Switzerland Syrian Arab Republic System configuration, memory test, send test email from this server. TOTP Time Source Tables missing (prefix %1$s, %2$s): %3$s Tables missing (prefix %1$s, %2$s): %s Taiwan Tajikistan Take Login Security to the next level with Two-Factor Authentication Tanzania, United Republic of Test Email Sent Test email failed to send Test email sent successfully Test result of scan start URL fetch: %s Test your WordPress host's available memory Testing accessibility of: %s Testing initial communication with Wordfence Central. Testing public key authentication with Wordfence Central. Testing that Wordfence Central is able to communicate with this site. Thailand Thanks for sending your diagnostic page over email That user has already been removed from the list. The 'How does Wordfence get IPs' option was successfully updated to the recommended value. The <code>auto_prepend_file</code> setting has been successfully removed from <code>.htaccess</code> and <code>.user.ini</code>. Once this change takes effect, Extended Protection Mode will be disabled. The Beta option can be turned off at the bottom of the Diagnostics page. The Full Path disclosure issue has been fixed The GDPR is a set of rules that provides more control over EU personal data. Defiant has updated its terms of service, privacy policies, and software, as well as made available standard contractual clauses to meet GDPR compliance. The GeoIP database that is required for country blocking has been updated to a new format. This new format requires sites to run PHP 5.4 or newer, and this site is on PHP %s. To ensure country blocking continues functioning, please update PHP. The IP address %s is allowlisted and can't be blocked. You can remove this IP from the allowlist on the Wordfence options page. The IP address %s is in a range of IP addresses that Wordfence does not block. The IP range may be internal or belong to a service safe to allow access for. The IP address you're trying to block belongs to Google. Your options are currently set to not block these crawlers. Change this in Wordfence options if you want to manually block Google. The IP you provided must be in dotted quad notation or use ranges with square brackets. e.g. 10.11.12.13 or 10.11.12.[1-50] The IP/range %s is invalid. The Plugin "%1$s" appears to be abandoned (updated %2$s). The Plugin "%1$s" appears to be abandoned (updated %2$s, tested to WP %3$s). The Plugin "%1$s" needs an upgrade (%2$s -> %3$s). The Plugin "%s" has been removed from wordpress.org. The Theme "%1$s" needs an upgrade (%2$s -> %3$s). The URL %1$s is on the malware list. More info available at <a href="http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=%2$s&client=googlechrome&hl=en-US" target="_blank" rel="noopener noreferrer">Google Safe Browsing diagnostic page<span class="screen-reader-text"> ( The URL %1$s is on the phishing list. More info available at <a href="http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=%2$s&client=googlechrome&hl=en-US" target="_blank" rel="noopener noreferrer">Google Safe Browsing diagnostic page<span class="screen-reader-text"> ( The URL %s is on the blocklist. The URL is: %s The URL/parameters in this table will not be tested by the firewall. They are typically added while the firewall is in Learning Mode or by an admin who identifies a particular action/request is a false positive. The WAF is currently in read-only mode and will not save any configuration changes. The WAF storage engine is currently set to mysqli, but Wordfence is unable to use the database. The WAF will fall back to using local file system storage instead. The Wordfence Dashboard provides valuable insights into the current state of your site's security. You'll find useful data summarized here as well as important status updates and notifications. The Wordfence Live Traffic feature has been disabled because you have %s active which is not compatible with Wordfence Live Traffic. The Wordfence Premium License in use on this site has been removed from your account. The Wordfence Web Application Firewall blocks known and emerging attacks using firewall rules. When you first install the WAF, it will be in learning mode. This allows Wordfence to learn about your site so that we can understand how to protect it and how to allow normal visitors through the firewall. We recommend you let Wordfence learn for a week before you enable the firewall. The Wordfence Web Application Firewall cannot run. The Wordfence Web Application Firewall has blocked %1$d attacks over the last %2$s. Below is a sample of these recent attacks: The Wordfence Web Application Firewall is a PHP-based, application-level firewall that filters out malicious requests to your site. It is designed to run at the beginning of WordPress' initialization to filter any attacks before plugins or themes can run any potentially vulnerable code. The Wordfence Web Application Firewall is in read-only mode. The Wordfence Web Application Firewall needs a configuration update. The Wordfence activation server returned an unexpected response. Please try again. The Wordfence administrative URL for this site is: %s The Wordfence firewall protects your sites from attackers The Wordfence license could not be installed. The Wordfence license provided has been installed. The Wordfence license you're using does not match this site's address. Premium features are disabled. The Wordfence scanning servers are currently unavailable. This may be for maintenance or a temporary outage. If this still occurs in an hour, please contact support. [%s] The Wordfence server's response did not contain the expected elements. The admin user %s was successfully deleted. The changes have not yet taken effect. If you are using LiteSpeed or IIS as your web server or CGI/FastCGI interface, you may need to wait a few minutes for the changes to take effect since the configuration files are sometimes cached. You also may need to select a different server configuration in order to complete this step, but wait for a few minutes before trying. You can try refreshing this page. The code provided does not match the expected value. Please verify that the time on your authenticator device is correct and that this server's time is correct. The code you entered is invalid. Cellphone sign-in will not be enabled for this user until you enter a valid code. The configuration files are corrupt or inaccessible by the web server, which is preventing the WAF from functioning. Please verify the web server has permission to access the configuration files. You may also try to rebuild the configuration file by <a href="%1$s">clicking here</a>. It will automatically resume normal operation when it is fixed. <a class="wfhelp" target="_blank" rel="noopener noreferrer" href="%2$s"><span class="screen-reader-text"> ( The core files scan has not run because this version is not currently indexed by Wordfence. New WordPress versions may take up to a day to be indexed. The core files scan will not be run because this version of WordPress is not currently indexed by Wordfence. This may be due to using a prerelease version or because the servers are still indexing a new release. If you are using an official WordPress release, this issue will automatically dismiss once the version is indexed and another scan is run. The current scan looks like it has failed. Its last status update was <span id="wf-scan-failed-time-ago">%s</span> ago. You may continue to wait in case it resumes or stop and restart the scan. Some sites may need adjustments to run scans reliably. The disk has %s MB available The duration of the block is %s. The duration of the lockout is %s. The email address provided has been unsubscribed from future alert emails. The error returned was: The file %s was successfully deleted. The file %s was successfully hidden from public view. The file %s was successfully restored. The file <code>%s</code> was deleted successfully. The file <code>%s</code> was restored successfully. The following IPs you selected to ignore in live traffic reports are not valid: The following IPs/ranges you selected to trust as proxies are not valid: The following emails are invalid: The following users you selected to ignore in live traffic reports are not valid on this system: The given user already has two-factor authentication active. The given user does not exist. The grace period end time must be in the future. The issue type is: %s The key used to start a scan expired. The value is: %1$s and split is: %2$s and time is: %3$d The last rules update for the Wordfence Web Application Firewall was unsuccessful. The last successful update check was %s, so this site may be missing new rules added since then. The license key entered is not in a valid format. It must contain only numbers and the letters A-F. The license provided is already in use on another site. The license you were using has been removed from your account. Please reach out to <a href="mailto:billing@wordfence.com">billing@wordfence.com</a> or create a Premium support case at <a href="https://support.wordfence.com/support/tickets" target="_blank">https://support.wordfence.com/support/tickets<span class="screen-reader-text"> (opens in new tab)</span></a> for more information. Our staff is happy to help. The license you were using has been removed from your account. Please reach out to billing@wordfence.com or create a Premium support case at https://support.wordfence.com/support/tickets for more information. Our staff is happy to help. The main navigation no longer includes an <strong>Options</strong> link. Options are now accessed via the <strong>Options</strong> link on each feature's main page. Live Traffic is now located in the Tools section, and blocking is found under the Firewall. Shortcuts to add a <strong>Blocking</strong> link back to the main navigation are available under Blocking options. The malicious URL matched The matched text in this file is: %s The multisite blog with ID %d is listed on Google's Safe Browsing malware list. The multisite blog with ID %d is listed on Google's Safe Browsing phishing list. The multisite blog with ID %d is listed on a domain blocklist. The multisite blog with ID %d is listed on the Wordfence domain blocklist. The option "Scan files outside your WordPress installation" is off by default, which means %1$d path and its file(s) will not be scanned for malware or unauthorized changes. To continue skipping this path, you may ignore this issue. Or to start scanning it, enable the option and subsequent scans will include it. Some paths may not be necessary to scan, so this is optional. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> ( The option "Scan files outside your WordPress installation" is off by default, which means %1$d paths and their file(s) will not be scanned for malware or unauthorized changes. To continue skipping these paths, you may ignore this issue. Or to start scanning them, enable the option and subsequent scans will include them. Some paths may not be necessary to scan, so this is optional. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> ( The option %s was successfully removed. The phone number you entered must start with a '+', then country code and then area code and number. For example, a number in the United States with country code '1' would look like this: +1-123-555-1234 The plugin will load as a regular plugin after WordPress has been loaded, and while it can block many malicious requests, some vulnerable plugins or WordPress itself may run vulnerable code before all plugins are loaded. The previous scan has failed. Some sites may need adjustments to run scans reliably. The previous scan has terminated because the time limit of %s was reached. This limit can be customized on the options page. The previous scan has terminated because we detected an update occurring during the scan. The reason is: "%s". The request has been allowlisted. Please try it again. The request was flagged as suspicious, and we need verification that you attempted to log in to allow it to proceed. This verification link <b>will be valid for 15 minutes</b> from the time it was sent. If you did not attempt this login, please change your password immediately. The required file has been created. You'll need to insert the following code into your <code>php.ini</code> to finish installation: The results of your scan may indicate that you could benefit from Wordfence Site Cleaning The scan has failed because we received an unexpected response from the Wordfence servers. This may be a temporary error, though some sites may need adjustments to run scans reliably. The scan has failed because we were unable to contact the Wordfence servers. Some sites may need adjustments to run scans reliably. The scan has failed to start. This is often because the site either cannot make outbound requests or is blocked from connecting to itself. The scan time limit of %1$s has been exceeded and the scan will be terminated. This limit can be customized on the options page. <a href="%2$s" target="_blank" rel="noopener noreferrer">Get More Information<span class="screen-reader-text"> ( The scan was terminated early because it reached the time limit for scans. If you would like to allow your scans to run longer, you can customize the limit on the options page: <a href="%1$s">%2$s</a> or read more about scan options to improve scan speed here: <a href="%3$s">%4$s</a> The signature on the request to start a scan is invalid. Please try again. The two panels below show a before and after view of a file on your system that has been modified. The left panel shows the original file before modification. The right panel shows your version of the file that has been modified. Use this view to determine if a file has been modified by an attacker or if this is a change that you or another trusted person made. If you are happy with the modifications you see here, then you should choose to ignore this file the next time Wordfence scans your system. The update was successful! The user does not exist. The user specified does not have two-factor authentication active. The username you specified does not exist. The username you specified is already enabled. The view %s does not exist or is not readable. The view could not be loaded. The whois service gives you a way to look up who owns an IP address or domain name that is visiting your website or is engaging in malicious activity on your website. Theme File Theme Name Theme Name: Theme URL Theme Upgrade Theme Version: Theme stylesheet folder override Theme template folder override Themes Themes & Plugins There are no differences between the original file and the file in the repository. There is already a scan running. There was an error connecting to the Wordfence scanning servers: %s There was an error deleting the file. There was an error restoring the file. There was an error starting the scan: %s. There was an error while sending the email. There was an error writing to your .htaccess file. There was an unknown error connecting to the Wordfence scanning servers. There was an unknown error starting the scan. These IPs (or CIDR ranges) will be ignored when determining the requesting IP via the X-Forwarded-For HTTP header. Enter one IP or CIDR range per line. These URL patterns will be excluded from the throttling rules used to limit crawlers. These instructions <b>will be valid for 30 minutes</b> from the time they were sent. These options are also available throughout the plugin pages, in the relevant sections. This page is provided for easier setup for experienced Wordfence users. These options let you choose which traffic to log and to ignore certain types of visitors, based on their level of access, usernames, IP address, or browser type. If you run a high-traffic website where it is not feasible to see your visitors in real-time, simply change the <strong>Traffic logging mode</strong> to "Security Only." This %1$s contains a URL that is a suspected phishing site that is currently listed on Google's list of known phishing sites. The URL is: %2$s This %1$s contains a URL that is currently listed on Wordfence's domain blocklist. The URL is: %2$s This %1$s contains a suspected malware URL listed on Google's list of malware sites. The URL is: %2$s - More info available at <a href="http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=%3$s&client=googlechrome&hl=en-US" target="_blank" rel="noopener noreferrer">Google Safe Browsing diagnostic page<span class="screen-reader-text"> ( This IP address is in a range of addresses that Wordfence does not block. The IP range may be internal or belong to a service that is always allowed. Allowlisting of external services can be disabled. <a href="%s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a> This WordPress core file has been modified and differs from the original file distributed with this version of WordPress. This additional info may help you diagnose the issue. The response headers we received were: This email was sent from your website "%1$s" by the Wordfence plugin at %2$s This email was sent from your website "%s" by the Wordfence plugin. This email was sent from your website <a href="%1$s">%1$s</a> and is a summary of security related activity that Wordfence monitors for the period %2$s to %3$s. This feature blocks all traffic from IPs with a high volume of recent malicious activity using Wordfence's real-time blocklist. This file appears to be an old version of the TimThumb script which makes your system vulnerable to attackers. Please upgrade the theme or plugin that uses this or remove it. This file appears to be installed or modified by a hacker to perform malicious activity. If you know about this file you can choose to ignore it to exclude it from future scans. This file belongs to plugin "%1$s" version "%2$s" and has been modified from the file that is distributed by WordPress.org for this version. Please use the link to see how the file has changed. If you have modified this file yourself, you can safely ignore this warning. If you see a lot of changed files in a plugin that have been made by the author, then try uninstalling and reinstalling the plugin to force an upgrade. Doing this is a workaround for plugin authors who don't manage their code correctly. <a href="%3$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> ( This file belongs to theme "%1$s" version "%2$s" and has been modified from the original distribution. It is common for site owners to modify their theme files, so if you have modified this file yourself you can safely ignore this warning. <a href="%3$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> ( This file contains a URL that is a suspected phishing site that is currently listed on Google's list of known phishing sites. The URL is: This file contains a URL that is currently listed on Wordfence's domain blocklist. The URL is: This file contains a suspected malware URL listed on Google's list of malware sites. Wordfence decodes %1$s when scanning files so the URL may not be visible if you view this file. The URL is: %2$s - More info available at <a href="http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=%3$s&client=googlechrome&hl=en-US" target="_blank" rel="noopener noreferrer">Google Safe Browsing diagnostic page<span class="screen-reader-text"> (opens in new tab)</span></a>. This file is a PHP executable file and contains the word "eval" (without quotes) and the word "%s" (without quotes). The eval() function along with an encoding function like the one mentioned are commonly used by hackers to hide their code. If you know about this file you can choose to ignore it to exclude it from future scans. This file was detected because you have enabled HIGH SENSITIVITY scanning. This option is more aggressive than the usual scans, and may cause false positives. This file is in a WordPress core location but is from an older version of WordPress and not used with your current version. Hosting or permissions issues can cause these files to get left behind when WordPress is updated and they should be removed if possible. This file is in a WordPress core location but is not distributed with this version of WordPress. This scan often includes files left over from a previous WordPress version, but it may also find files added by another plugin, files added by your host, or malicious files added by an attacker. This file is in a WordPress core location but is not distributed with this version of WordPress. This scan often includes files left over from a previous WordPress version, but it may also find files added by another plugin, files added by your host, or malicious files added by an attacker. <a href="%s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> ( This file is suspected malware: %s This file may contain malicious executable code: This file was detected because you have enabled "Scan images, binary, and other files as if they were executable", which treats non-PHP files as if they were PHP code. This option is more aggressive than the usual scans, and may cause false positives. This file was detected because you have enabled HIGH SENSITIVITY scanning. This option is more aggressive than the usual scans, and may cause false positives. This file's signature matches a known malware file. The title of the malware is '%s'. Immediately inspect this file using the 'View' option below and consider deleting it from your server. This is a test email from %1$s.
The IP address that requested this was: %2$s This is where you can monitor the work Wordfence is doing to protect your site and also where you can manage the options to optimize the firewall's configuration. This is your Dashboard This is your main configuration file and cannot be deleted. It must be cleaned manually. This likely means that your hosting provider is blocking requests to noc1.wordfence.com or has set up a proxy that is not behaving itself. This list may include WordPress core/plugin/theme updates, error logs, cache files, and other normal changes. This option contains a URL that is a suspected phishing site that is currently listed on Google's list of known phishing sites. It may indicate your site is infected with malware. The URL is: %s This option contains a URL that is currently listed on Wordfence's domain blocklist. It may indicate your site is infected with malware. The URL is: %s This option contains a suspected malware URL listed on Google's list of malware sites. It may indicate your site is infected with malware. The URL is: %s This option enables all "Brute Force Protection" options, including strong password enforcement and invalid login throttling. You can modify individual options below. This page shows information that can be used for troubleshooting conflicts, configuration issues, or compatibility with other plugins, themes, or a host's environment. This post contains code that is suspicious. Please check the title of the post and confirm that the code in the title is not malicious. This site appears to be behind Cloudflare, so using the Cloudflare "CF-Connecting-IP" HTTP header will resolve to the correct IPs. This site appears to be behind a front-end proxy, so using the X-Forwarded-For HTTP header will resolve to the correct IPs. This site appears to be behind a front-end proxy, so using the X-Real-IP HTTP header will resolve to the correct IPs. This site is currently using PHP's built in REMOTE_ADDR. This site is currently using the Cloudflare "CF-Connecting-IP" HTTP header, which should only be used when the site is behind Cloudflare. This site is currently using the X-Forwarded-For HTTP header, which should only be used when the site is behind a front-end proxy that outputs this header. This site is currently using the X-Real-IP HTTP header, which should only be used when the site is behind a front-end proxy that outputs this header. This update includes a number of significant interface changes. We'd like to walk you through some of them, but you can bypass the tour for a section at any time by closing the dialogs. This user's email is the network admin email. It will need to be changed before deleting this user. This will be shown only once. Keep these codes somewhere safe. Throttled Throttling IP %1$s. %2$s Thursday Ticket Number/Forum Username: Time Time Limit Time limit that a scan can run in seconds Time: Timor-Leste Title To change your alert options for Wordfence, visit:
%s To clone one site's configuration to another, use the import/export tools below. To connect your site your site to Wordfence Central, use the link below: To continue using Defiant products and services including the Wordfence plugin, all customers must review and agree to the updated terms and privacy policies. These changes reflect our commitment to follow data protection best practices and regulations. The Wordfence interface will remain disabled until these terms are agreed to. To ensure uninterrupted Premium Wordfence protection on your site,
please renew your license by visiting http://www.wordfence.com/ Sign in, go to your dashboard,
select the license about to expire and click the button to renew that license. To make your site as secure as possible, take a moment to optimize the Wordfence Web Application Firewall: To make your site as secure as possible, the Wordfence Web Application Firewall is designed to run via a PHP setting called <code>auto_prepend_file</code>, which ensures it runs before any potentially vulnerable code runs. To make your site as secure as possible, the Wordfence Web Application Firewall is designed to run via a PHP setting called <code>auto_prepend_file</code>, which ensures it runs before any potentially vulnerable code runs. This PHP setting is currently in use, and is including this file: To preserve the integrity of your website we are not running Wordfence auto-update.
You are running the LiteSpeed web server which has been known to cause a problem with Wordfence auto-update.
Please go to your website now and make a minor change to your .htaccess to fix this.
You can find out how to make this change at:
%s
Alternatively you can disable auto-update on your website to stop receiving this message and upgrade Wordfence manually.
To see current Wordfence alerts, visit:
%s To update your license settings please visit http://www.wordfence.com/zz9/dashboard To: Today Toggle row ${idx} Togo Tokelau Token is invalid. Tonga Tool Options Tools Top %d Countries Blocked Top %d Failed Logins Top %d IPs Blocked Top 10 Countries Blocked Top 10 Failed Logins Top 10 IPs Blocked Top Countries by Number of Attacks - Last 7 Days Top IPs Blocked Top Topics and Questions Total Total Attacks Total Attacks Blocked: Total IPs Blocked Total Users Total disk space: %1$s -- Free disk space: %2$s Total of %d users left to process in password strength check. Total of %d users left to process in password strength check. Track each scan stage as Wordfence scans your entire site. Along the way you can see the activity log one line at a time or expand the activity log for a more detailed view. Clicking on scan results will reveal detailed scan findings. Traffic logging mode Traffic logging mode (Live Traffic) Traffic logging mode: All traffic Traffic logging mode: Security-related traffic only Treat Google like any other Crawler Trinidad and Tobago Trusted Proxies Try Again Tuesday Tunisia Turkey Turkmenistan Turks and Caicos Islands Turn Off Beta Signatures Turn On Tuvalu Twice Daily Two Factor Status Two-Factor Authentication Two-Factor Authentication Options Two-Factor Authentication Recovery Codes - %s (%s) Two-Factor Authentication Users Two-Factor Authentication, or 2FA, significantly improves login security for your website. Wordfence 2FA works with a number of TOTP-based apps like Google Authenticator, FreeOTP, and Authy. For a full list of tested TOTP-based apps, <a href="%s" target="_blank" rel="noopener noreferrer">click here</a>. Two-factor authentication is not currently enabled for this account type. To enable it, visit the Wordfence 2FA Settings page. Two-factor authentication is using legacy support, which enables SMS-based codes but is less compatible. An improved interface and use by non-administrators is available by activating the new login security module. Two-factor authentication now has its own IP allowlist. If necessary, you can allow specific IP addresses or ranges to skip 2FA when logging in. Type Type: Type: %s UA/Referrer/IP Range not allowed URL URL redirected to if the visitor tries to access a nonexistent blog URL to redirect blocked countries to URL to redirect blocked users to URL to the "wp-content" folder URL: URLs Checked UTC Uganda Ukraine Unable to Uninstall Unable to access available disk space information Unable to accurately detect IPs Unable to authenticate with Wordfence Central. Unable to automatically hide file Unable to remove code execution protections applied to the .htaccess file in the uploads directory. Please check your permissions on that file. Unable to save the .htaccess file needed to disable script execution in the uploads directory. Please check your permissions on that directory. Unable to validate the reCAPTCHA site key. Please check the key and try again. Unable to verify - table count too high Unavailable Unblock Unblock All Unblock IP Unblock range Unblocking Uninstall Wordfence Firewall Uninstallation Complete Uninstallation Failed Uninstallation from this site was successful! The Wordfence Firewall is still active because it is installed in another WordPress installation. Uninstallation was successful! United Arab Emirates United Kingdom United States United States Minor Outlying Islands Unknown Unknown (mixed plugin version) Unknown Administrator Unknown Core File Unknown Type Unknown WordPress core version: %s Unknown authentication mode. Unknown dashboard data set. Unknown file in WordPress core: %s Unknown file size. Unknown firewall mode. Unknown two-factor authentication mode. Unlimited Unlock email requested Unspecified Unsubscribe Requested Unsubscribe Successful Unsubscribe from Security Alerts Unsubscription Confirmation Sent Update Blocked Countries Update Blocked IPs Update Login Security Options Update Now Update Payment Method Update Wordfence automatically when a new version is released? Update includes security-related fixes. Update interval in seconds Update<span class="wf-hidden-xs"> Block</span> Updated Navigation Updates Needed Updates Needed (Plugin, Theme, or Core) Updating the .htaccess did not fix the issue. You may need to add <code>Options -Indexes</code> to your httpd.conf if using Apache, or find documentation on how to disable directory listing for your web server. Upgrade Upgrade Now to Access Premium Support Upgrade To Premium Upgrade to Premium Uruguay Use PHP's built in REMOTE_ADDR and don't use anything else. Very secure if this is compatible with your site. Use Recommended Value Use authenticator app Use low resource scanning (reduces server load by lengthening the scan duration) Use one of these %d codes to log in if you lose access to your authenticator device. Codes are %d characters long plus optional spaces. Each one may be used only once. Use one of these %s codes to log in if you are unable to access your phone. Codes are 16 characters long, plus optional spaces. Each one may be used only once. Use one of these %s codes to log in if you lose access to your authenticator device. Codes are 16 characters long, plus optional spaces. Each one may be used only once. Use preferred start time Use the Cloudflare "CF-Connecting-IP" HTTP header to get a visitor IP. Only use if you're using Cloudflare. Use the X-Forwarded-For HTTP header. Only use if you have a front-end proxy or spoofing may result. Use the X-Real-IP HTTP header. Only use if you have a front-end proxy or spoofing may result. Use the buttons below to migrate to the new two-factor authentication system or switch without migration. Migration will copy all existing authenticator-based user activations over to the new system while switching will use only users already set up in the new system. Existing SMS-based two-factor authentication activations must be disabled prior to migration. Use the most secure method to get visitor IP addresses. Prevents spoofing and works with most sites. Used Used an invalid username '%s' to try to sign in Used by banks, government agencies, and military worldwide, two-factor authentication is one of the most secure forms of remote system authentication available. With it enabled, an attacker needs to know your username, password, <em>and</em> have control of your phone to log into your site. Upgrade to Premium now to enable this powerful feature. User User "%1$s" with "%2$s" access has an easy password. User "%s" with 'subscriber' access has a very easy password. User & Option Audit User Agent User Email User ID User IP: %s
User Summary User defined scan pattern User hostname: %s
User location: User locked out from signing in User login User login blocked for insecure password User: Username Username: Users Checked Using MySQLi directly. Using cached core hashes Using cached malware prefixes Using low resource scanning Uzbekistan Validation error: 'fields' parameter is empty or not an array. Value Vanuatu Venezuela Verified Google crawlers will not be rate-limited Verifying start request signature. Version %s Vietnam View View Additional Detail View Customization View Differences View Documentation View File View Option View Recent Traffic View Updates View every issue: View<span class="wf-hidden-xs"> full</span> log Virgin Islands, British Virgin Islands, U.S. Visit Wordfence Central Vulnerability Information Vulnerability Scan Vulnerability Status WAF Currently in Learning Mode WAF File Permissions WAF Status WAF auto prepend active WAF log path WAF subdirectory installation WHOIS LOOKUP WORDPRESS VERSION: %s WP cron status Waiting for Changes Waiting for it to take effect. This may take up to %s. Wallis and Futuna Warning We are about to change your <em>.htaccess</em> file. Please make a backup of this file before proceeding. We are excited to announce the release of a completely rebuilt two-factor authentication (2FA) feature within Wordfence. 2FA is an important layer of security that protects you from password guessing and credential stuffing attacks. Previously a Premium-only feature, it is now available for sites running the free version of Wordfence. You are now able to enable 2FA for any role, we’ve added a number of important security features, and we’ve significantly improved the admin interface. We can't modify your .htaccess file for you because: %s We cannot read $_SERVER[%s] We could not delete any of the files you selected. We encountered the following errors: %s We could not fetch a core WordPress file from the Wordfence API. We could not find that issue in our database. We could not find that user in the database. We could not find the user you are trying to activate. They may have been removed from the list of Cellphone Sign-in users. Please reload this page. We could not find your .htaccess file to modify it. We could not generate a verification code. We could not get the contents of the original file to do a comparison. We could not get the original file to do a repair. We could not open the requested file for reading. The error was: %s We could not repair any of the files you selected. We encountered the following errors: %s We could not retrieve the original file of %s to do a repair. We could not write to %1$s. (%2$d bytes written) You may not have permission to modify files on your WordPress server. We could not write to %1$s. The error was: %2$s We could not write to that file. You may not have permission to modify files on your WordPress server. We didn't delete anything and no errors were found. We didn't repair anything and no errors were found. We do not use this email address for any other purpose unless you opt-in to receive other mailings. You can turn off alerts in the options. We encountered a problem We encountered an error trying load more data. We failed to send a termination request. We found your .htaccess file but could not open it for writing: %s We received a data structure that is not the expected array when contacting the Wordfence scanning servers and calling the '%s' function. We received a request to email "%s" instructions to unlock their access. If that is the email address of a site administrator or someone on the Wordfence alert list, they have been emailed instructions on how to regain access to this system. The instructions we sent will expire 30 minutes from now. We received an empty data response from the Wordfence scanning servers when calling the '%s' function. We received an error while trying to activate the license with the Wordfence servers: We successfully exported your site options. To import your site options on another site, copy and paste the token below into the import text box on the destination site. Keep this token secret — it is like a password. If anyone else discovers the token it will allow them to import your options excluding your license. We successfully imported the site options. We welcome your feedback and comments at <a href="mailto:feedback@wordfence.com">feedback@wordfence.com</a>. For a deeper dive on all of the changes, <a href="https://www.wordfence.com/blog/2018/01/introducing-wordfence-7/" target="_blank" rel="noopener noreferrer">click here<span class="screen-reader-text"> (opens in new tab)</span></a>. We were unable to create the <code>wordfence-waf.php</code> file in the root of the WordPress installation. It's possible WordPress cannot write to the <code>wordfence-waf.php</code> file because of file permissions. Please verify the permissions are correct and retry the installation. We were unable to generate the user list for your password check. We were unable to make changes to the %1$s file. It's possible WordPress cannot write to the %1$s file because of file permissions. Please verify the permissions are correct and retry the installation. We were unable to make changes to the .htaccess file. It's possible WordPress cannot write to the .htaccess file because of file permissions, which may have been set by another security plugin, or you may have set them manually. Please verify the permissions allow the web server to write to the file, and retry the installation. We were unable to remove the <code>wordfence-waf.php</code> file in the root of the WordPress installation. It's possible WordPress cannot remove the <code>wordfence-waf.php</code> file because of file permissions. Please verify the permissions are correct and retry the removal. We were unable to write to %s which the WAF uses for storage. Please update permissions on the parent directory so the web server can write to it. We've preselected your server configuration based on our tests, but if you know your web server's configuration, please select it now. We've preselected your server configuration based on our tests, but if you know your web server's configuration, please select it now. You can also choose "Manual Configuration" for alternate installation details. Web Application Firewall Web Application Firewall (WAF) Web Application Firewall Allowlisted URLs Web Application Firewall Protection Level Web Application Firewall Rules Web Application Firewall Status Web Application Firewall is disabled Web server exposes the document root Wednesday Week Weekdays Weekends Western Sahara What to do when we block someone What to do when we block someone visiting from a blocked country When you first install the Wordfence Web Application Firewall, it will be in learning mode. This allows Wordfence to learn about your site so that we can understand how to protect it and how to allow normal visitors through the firewall. We recommend you let Wordfence learn for a week before you enable the firewall. <a href="%s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a> Where to email alerts While in test mode, reCAPTCHA will score login and registration requests but not actually block them. The scores will be recorded and can be used to select a human/bot threshold value. Whois Lookup Windows (IIS) With Two-Factor Authentication enabled, an attacker needs to know your username, password <em>and</em> have control of your phone to log in to your site. We recommend you enable Two-Factor Authentication for all Administrator level accounts. WordPress "drop-in" plugins that are active. WordPress "mu-plugins" that are always active, including those provided by hosts. WordPress (v%s) WordPress Configuration File WordPress Core File WordPress Plugins WordPress Settings WordPress Time Zone WordPress admin cookie path WordPress base path WordPress cookie domain WordPress cookie path WordPress core file modified: %s WordPress debug mode WordPress error display override WordPress error logging override WordPress memory limit WordPress plugins cookie path WordPress query debug mode WordPress script debug mode WordPress site cookie path WordPress version %s is now available. Please upgrade immediately to get the latest security updates from WordPress. WordPress version and internal settings/constants. WordPress version too old Wordfence Wordfence - Securing your WordPress Website Wordfence 2FA Active Wordfence 2FA is active. Wordfence 2FA is inactive. Wordfence Activity Log Wordfence Central Wordfence Central Installation Process Wordfence Central Status Wordfence Central allows you to manage Wordfence on multiple sites from one location. It makes security monitoring and configuring Wordfence easier. Wordfence Central secret key has not been created yet. Wordfence Central site ID has not been created yet. Wordfence Dashboard Wordfence Deactivated Wordfence Firewall & Premium Enabled Wordfence Firewall Activated Wordfence Firewall Deactivated Wordfence Firewall blocked a background request to WordPress for the URL %s. If this occurred as a result of an intentional action, you may consider allowlisting the request to allow it in the future. Wordfence Full Activity Log Wordfence Global Options Wordfence License Wordfence License Installation Failed Wordfence License Installation Successful Wordfence Live Activity: Wordfence Live Traffic shows you what is happening on your site in real-time, including user logins, hack attempts, and requests that were blocked by the Wordfence Firewall. You can choose to log security-related traffic only or all traffic. Traffic is logged directly on the server, which means it includes visits that don't execute JavaScript. Google and other JavaScript-based analytics packages typically only show visits from browsers that are operated by a human, while Live Traffic can show visits from crawlers like Google and Bing. Wordfence Login Security Wordfence Login Security Installed Wordfence Network Wordfence Network Time Wordfence Network Time Offset Wordfence Protection Activated Wordfence Scan & Premium Enabled Wordfence Scan Deactivated Wordfence Scan Enabled Wordfence Security Wordfence Security - Anti-virus, Firewall and Malware Scan Wordfence System Info Wordfence Table Check Wordfence Test Email Wordfence Upgrade not run. Please modify your .htaccess Wordfence Upgraded to version %s Wordfence Version Wordfence WAF Deactivated Wordfence activity for %1$s on %2$s Wordfence activity from <br><strong>%1$s</strong> to <strong>%2$s</strong> Wordfence activity in the past %s Wordfence could not find a saved cron key to start the scan so assuming it started and exiting. Wordfence could not find your .htaccess file. Wordfence could not get the attack signature patterns from the scanning server. Wordfence could not read the contents of your base WordPress directory. This usually indicates your permissions are so strict that your web server can't read your WordPress directory. Wordfence could not register with the Wordfence scanning servers when it activated. Wordfence could not start a scan because the cron key does not match the saved key. Saved: %1$s Sent: %2$s Current unexploded: %3$s Wordfence country blocking is designed to stop an attack, prevent content theft, or end malicious activity that originates from a geographic region in less than 1/300,000th of a second. Blocking countries who are regularly creating failed logins, a large number of page not found errors, and are clearly engaged in malicious activity is an effective way to protect your site during an attack. Wordfence encountered an internal error executing that request. Wordfence error: No encryption key found! Wordfence file scanner detected a possible infinite loop. Exiting on file: %s Wordfence found the following new issues on "%1$s" (%2$d existing issue was also found again). Wordfence found the following new issues on "%1$s" (%2$d existing issues were also found again). Wordfence found the following new issues on "%1$s". Wordfence generated an error on activation. The output we received during activation was: Wordfence has blocked IP address %s. Wordfence installation is incomplete Wordfence is a security plugin installed on over 4 million WordPress sites. The owner of this site is using Wordfence to manage access to their site. Wordfence is working... Wordfence lets you take control of protecting your site with powerful blocking features. Block traffic based on IP, IP range, hostname, browser, or referrer. Country blocking is available for Premium customers. Wordfence now includes the option to enable Google reCaptcha v3 on your WordPress login and registration pages. This adds a powerful new layer of protection against password guessing and credential stuffing attacks from bots without slowing down real users. Wordfence protects your site from password-guessing attacks by locking out attackers and helping you avoid weak passwords. Wordfence received malformed attack signature patterns from the scanning server. Wordfence scan failed because of license site URL conflict Wordfence scan script accessed directly, or WF did not receive a cronkey. Wordfence scan starting at %s from Wordfence Central Wordfence two-factor authentication is currently active on the account <strong>%s</strong>. You may deactivate it by clicking the button below. Wordfence two-factor authentication is currently active on your account. You may deactivate it by clicking the button below. Wordfence used %1$s of memory for scan. Server peak memory usage was: %2$s Wordfence was unable to validate a test request to your website. This can happen if your website is behind a proxy that does not use one of the standard ways to convey the IP of the request or it is unreachable publicly. IP blocking and live traffic information may not be accurate. <a href="%s" target="_blank" rel="noopener noreferrer">Get More Information<span class="screen-reader-text"> ( Wordfence's Web Application Firewall has been unexpectedly disabled. If you see a notice at the top of the Wordfence admin pages that says "The Wordfence Web Application Firewall cannot run," click the link in that message to rebuild the configuration. If this does not work, you may need to fix file permissions. <a href="%s" target="_blank" rel="noopener noreferrer">More Details<span class="screen-reader-text"> ( Wordfence's terms of service and privacy policy have changed Wordfence: All recent hits for IP address %s Wordfence: File Viewer Wordfence: Viewing File Differences Would you also like to join our WordPress security mailing list to receive WordPress security alerts and Wordfence news? XML-RPC authentication is disabled. Jetpack is currently active and requires XML-RPC authentication to work correctly. <a href="%s">Manage Settings</a> Yemen Yes Yes Please Yes, enable auto-update. You appear to have logged out or you are not an admin. Please sign-out and sign-in again. You are currently running the WAF from another WordPress installation. These rules can be disabled or enabled once you configure the firewall to run correctly on this site. You are currently running the WAF from another WordPress installation. This option can be changed once you configure the firewall to run correctly on this site. You are currently running the Wordfence Web Application Firewall from another WordPress installation. Please <a href="%s">click here</a> to configure the Firewall to run correctly on this site. You are currently running the Wordfence Web Application Firewall from another WordPress installation. Please configure the firewall to run correctly on this site. You are running PHP version %1$s that is not supported by Wordfence %2$s. Wordfence features will not be available until PHP has been upgraded. We recommend using PHP version 7.4, but Wordfence will run on PHP version 5.3 at a minimum. You are temporarily locked out You are using Nginx as your web server. You'll need to disable autoindexing in your nginx.conf. See the <a target='_blank' rel='noopener noreferrer' href='https://nginx.org/en/docs/http/ngx_http_autoindex_module.html'>Nginx docs for more info</a> on how to do this. You are using an Nginx web server and using a FastCGI processor like PHP5-FPM. You will need to manually delete or hide those files. You are using an Nginx web server and using a FastCGI processor like PHP5-FPM. You will need to manually modify your php.ini to disable <em>display_error</em> You can also read the documentation to learn about Wordfence's blocking tools, or visit wordfence.com to learn more about Wordfence. You can proceed with the installation and we will include this from within our <code>wordfence-waf.php</code> file which should maintain compatibility with your site, or you can opt to override the existing PHP setting. You can try to fix this by deactivating Wordfence and then activating it again, so Wordfence will retry registering for you. If you keep seeing this error, it usually means your WordPress server can't connect to our scanning servers, or your wfConfig database table cannot be created to save the key. You can try asking your host to allow your server to connect to noc1.wordfence.com or check the wfConfig database table and database privileges. You can't block your own IP address. You do not currently have two-factor authentication active on your account, which will be required beginning %s.
Configure 2FA: %s You do not currently have two-factor authentication active on your account, which will be required beginning %s. <a href="%s">Configure 2FA</a> You do not have permission to activate 2FA. You do not have permission to activate the given user. You do not have permission to change options. You do not have permission to deactivate 2FA. You do not have permission to deactivate the given user. You do not have permission to generate new recovery codes for the given user. You do not have permission to generate new recovery codes. You do not have permission to reset reCAPTCHA statistics. You do not have permission to send notifications. You don't have permission to repair %s. You need to either fix the file manually using FTP or change the file permissions and ownership so that your web server has write access to repair the file. You don't have permission to repair .htaccess. You need to either fix the file manually using FTP or change the file permissions and ownership so that your web server has write access to repair the file. You forgot to include a reason you're blocking this IP range. We ask you to include this for your own record keeping. You have %d new Wordfence notification. You have %d new Wordfence notifications. You have %s disk space remaining You have been temporarily locked out of this system. This means that you will not be able to log in for a while. You have just installed the Wordfence Login Security plugin. It contains a subset of the functionality found in the full Wordfence plugin: Two-factor Authentication, XML-RPC Protection and Login Page CAPTCHA. You have successfully installed Wordfence %s You have successfully updated to Wordfence %s You have unsaved changes to your options. If you leave this page, those changes will be lost. You have used this form too much. Please wait 3 minutes and try again. You may bypass this verification step permanently by enabling two-factor authentication on your account. You may wait for the next automatic attempt at %1$s or try to <a href="%2$s">Manually Update</a> by clicking the "Manually Refresh Rules" button below the Rules list. You may wait for the next automatic attempt at %s or log into the parent site to manually update by clicking the "Manually Refresh Rules" button below the Rules list. You may wait for the next automatic attempt or log into the parent site to manually update by clicking the "Manually Refresh Rules" button below the Rules list. You may wait for the next automatic attempt or try to <a href="%s">Manually Update</a> by clicking the "Manually Refresh Rules" button below the Rules list. You need to upgrade "%s" to the newest version to ensure you have any security fixes the developer has released. You only have %s of your disk space remaining. Please free up disk space or your website may stop serving requests. You'll find this icon throughout the plugin. Clicking it will show you the options and features for each section of Wordfence. From the dashboard, you can find the <strong>Global Options</strong> for Wordfence such as alerts, automatic updates, and managing your site's Premium License. You've chosen to block the network that <span style="color: #F00;">%s</span> is part of. We've marked the networks we found that this IP address belongs to in red below. Make sure you read all the WHOIS information so that you see all networks this IP belongs to. We recommend blocking the network with the lowest number of addresses. You may find this is listed at the end as part of the 'rWHOIS' query which contacts the local WHOIS server that is run by the network administrator. Your 'How does Wordfence get IPs' setting is misconfigured. Your .htaccess has been updated successfully. Please verify your site is functioning normally. Your IP with this setting: Your Premium Wordfence License expires in 1 day. Your Premium Wordfence License expires in 2 days. Your Premium Wordfence License expires in less than 2 weeks. Your Premium Wordfence License expires in less than a week. Your Premium Wordfence License is set to auto-renew in 10 days. Your WordPress version is out of date Your Wordfence License Your Wordfence Premium License has Expired! Your Wordfence activity log was sent to %s Your Wordfence installation has been upgraded to version %s Your access to this service has been limited. (HTTP response code 503) Your access to this service has been temporarily limited. Please try again in a few minutes. (HTTP response code 503) Your access to this site has been limited Your access to this site has been limited by the site owner Your access to this site has been temporarily limited by the site owner Your browser sent an invalid security token to Wordfence. Please try reloading this page or signing out and in again. Your browser sent an invalid security token. Please try reloading this page. Your computer's time: Your computer's time: Your options have been saved, but you left your license key blank, so we tried to get you a free license key from the Wordfence servers. There was a problem fetching the free key: Your options have been saved. However we noticed you changed your license key, and we tried to verify it with the Wordfence servers but received an error: Your options have been saved. However we tried to verify your license key with the Wordfence servers and received an error: Your request was received Your rules have been updated successfully. Your rules have been updated successfully. You are currently using the free version of Wordfence. Upgrade to Wordfence premium to have your rules updated automatically as new threats emerge. <a href="https://www.wordfence.com/wafUpdateRules1/wordfence-signup/">Click here to purchase a premium license</a>. <em>Note: Your rules will still update every 30 days as a free user.</em> Your site is listed on Google's Safe Browsing malware list. Your site is listed on Google's Safe Browsing phishing list. Your site is listed on a domain blocklist. Your site is listed on the Wordfence domain blocklist. Your site is now using the legacy two-factor authentication system. Your site is now using the new login security module and two-factor authentication. Before logging out, we recommend testing your login in a different browser or a private/incognito window. If any plugins or your theme cause conflicts with logging in, you can revert to the old 2FA method. Your site is using a PHP version (%1$s) that is no longer supported by Wordfence and needs to be updated. We recommend using the newest version of PHP available but will currently support PHP versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. Your site is using a PHP version (%1$s) that will no longer be supported by Wordfence in an upcoming release and needs to be updated. We recommend using the newest version of PHP available but will currently support PHP versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. Your site is using a WordPress version (%1$s) that is no longer supported by Wordfence and needs to be updated. We recommend using the newest version of WordPress but will currently support WordPress versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. Your site is using a WordPress version (%1$s) that will no longer be supported by Wordfence in an upcoming release and needs to be updated. We recommend using the newest version of WordPress but will currently support WordPress versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. Your test email was sent to the requested email address. The result we received from the WordPress wp_mail() function was: %s<br /><br />A 'True' result means WordPress thinks the mail was sent without errors. A 'False' result means that WordPress encountered an error sending your mail. Note that it's possible to get a 'True' response with an error elsewhere in your mail system that may cause emails to not be delivered. Zambia Zimbabwe [invalid] [none] `runInstall` called with previous version = %s a moment ago allowlisted and and %d additional attacks and %d more and set a cookie that will bypass all country blocking. block it blocked access via country blocking blocked access via country blocking and redirected to URL (%s) blocked by firewall blocked by firewall for %s blocked by real-time IP blocklist blocked by the Wordfence Security Network blocked for %s cURL Features Code cURL Host cURL SSL Version cURL Support Protocols cURL libz Version click here for help day days e.g., *.amazonaws.com or *.linode.com e.g., *badRobot*, *MSIE*, or *browserSuffix e.g., *badwebsite.example.com* e.g., 192.168.200.200 - 192.168.200.220 or 192.168.200.0/24 getHits got invalid hitType: %s getMaxExecutionTime() returning config value: %s getMaxExecutionTime() returning default of: 15 getMaxExecutionTime() returning half ini value: %d hour hours http://www.wordfence.com/ https://www.wordfence.com/help/dashboard/#dashboard-status https://www.wordfence.com/help/firewall/#firewall-status https://www.wordfence.com/help/scan/#scan-status in %d days in 1 day ini value of %1$d is higher than value for WORDFENCE_SCAN_MAX_INI_EXECUTION_TIME (%2$d), reducing less than 1 second less than a minute locked out from logging in lowercase minute minutes month months more than %s or reCAPTCHA Score History reCAPTCHA human/bot threshold score reCAPTCHA test mode is enabled. While enabled, login and registration requests will be checked for their score but will not be blocked if the score is below the minimum score. <a href="%s">Manage Settings</a> reCAPTCHA v3 Secret reCAPTCHA v3 Site Key reCAPTCHA v3 does not make users solve puzzles or click a checkbox like previous versions. The only visible part is the reCAPTCHA logo. If a visitor's browser fails the CAPTCHA, Wordfence will send an email to the user's address with a link they can click to verify that they are a user of your site. You can read further details <a href="%s" target="_blank" rel="noopener noreferrer">in our documentation</a>. redirected to bypass URL regular case second seconds then then redirect that user to then set a cookie that will bypass country blocking in future in case that user hits the site from a blocked country. throttle it to manually update it. today tomorrow visit the options page wfConfig::set() got an array as second param with key: %1$s and value: %2$s wordfence-waf.php path wp_mail from address is incomplete, attempting to fix wp_remote_post() test back to this server failed! Response was: wp_remote_post() test to noc1.wordfence.com failed! Response was: year years PO-Revision-Date: 2022-03-02 01:43:52+0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Plural-Forms: nplurals=2; plural=n != 1;
X-Generator: GlotPress/3.0.0-alpha.2
Language: en_CA
Project-Id-Version: Plugins - Wordfence Security – Firewall & Malware Scan - Stable (latest release)
"%s" is not a valid regular expression. "languages" folder is in default location "plugins" folder is in default location "wp-content" folder is in default location # Scan Issues ## Ignored Issues (%d total) ## New Issues (%d total) ${totalIPs} addresses in this network %1$s ago -- %2$s -- %3$s in Unixtime %1$s arrived from %2$s and %3$s %1$s at an unknown location at IP %2$s %1$s attempted a <span style="color: #F00;">failed login</span> as "%2$s". %1$s attempted a <span style="color: #F00;">failed login</span> using an invalid username "%2$s". %1$s contains a suspected malware URL: %2$s %1$s contains a suspected phishing site URL: %2$s %1$s left %2$s and %3$s %1$s logged in successfully as "%2$s". %1$s visited %2$s %1$s was %2$s at %3$s %1$s was redirected when visiting %2$s %1$s with author %2$s contains a suspected malware URL. %d Countries %d Job Overdue %d Jobs Overdue %d existing issue was found again and is not shown. %d files indexed %d ignored issue was also detected. %d ignored issues were also detected. %d issue found in most recent scan %d issues found in most recent scan %d issue was omitted from this email due to length limits. %d more similar files were found. %d path was skipped for the malware scan due to scan settings %d per minute %d plugin %d plugins %d seconds %d theme %d themes %d unused recovery code remains. You may generate a new set by clicking below. %d unused recovery codes remain. You may generate a new set by clicking below. %s - using constant %s - using template %s changed their password. %s contains a suspected malware URL. %s contains a suspected phishing site URL. %s hits %s in POST body: %s %s in cookie: %s %s in file: %s %s in query string: %s %s is not valid hostname %s logged out successfully. %s requested a password reset. %s tried to access a <span style="color: #F00;">non-existent page</span> © %1$d to %2$d Wordfence — Visit <a href="http://wordfence.com/">Wordfence.com</a> for help, security updates and more. © %d to %d Wordfence — Visit <a href="http://wordfence.com/">Wordfence.com</a> for help, security updates and more. 'How does Wordfence get IPs' is misconfigured (+ %d more) (Choose One) (Recommended) (Unknown) (default) (not required) (not set) (you) * User counts currently only reflect the main site on multisite installations. +1 (000) 000 0000 , and %d more. .htaccess Updated .htaccess change /bypassurl/ /page-name/ /set-country-bypass/ 0 for default. Must be %d or greater and 10-20 or higher is recommended for most servers 0 means unlimited alerts will be sent. 0 or empty means the default of %s will be used 0 or empty means unlimited issues will be sent 0.0 (definitely a bot) 0.1 0.2 0.3 0.4 0.5 (probably a human) 0.6 0.7 0.8 0.9 0660 - using default 1 Country 1 more similar file was found. 1. Scan Code or Enter Key 1.0 (definitely a human) 2. Enter Code from Authenticator App 24 Hours 2FA 2FA Active 2FA Inactive 2FA Migration Error: %s 2FA Mode: Legacy 2FA Mode: Normal 2FA Status 2FA will soon be required on %s 30 Days 404 Not Found 7 Days : Disabled <a class="wfls-btn wfls-btn-default wfls-btn-sm wfls-dismiss-link" href="#" onclick="GWFLS.dismiss_notice('%s'); return false;">Dismiss</a> <a href="#" onclick="WFAD.wafUpdateRules();return false;" role="button">Click here</a> to pull down the latest from the Wordfence servers. <a href="%1$s" target="_blank" rel="noopener noreferrer">%1$s</a> is publicly accessible and may expose source code or sensitive information about your site. Files such as this one are commonly checked for by scanners and should be made inaccessible. Alternately, some can be removed if you are certain your site does not need them. Sites using the nginx web server may need manual configuration changes to protect such files. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn more<span class="screen-reader-text"> ( <a href="%s"><b>Verify and Log In</b></a> <a href="%s">Click here</a> to rebuild the configuration file. <br><strong>This setting will be ignored because the PHP configuration option <code>output_buffering</code> is off.</strong> <em>Reputation check</em> <i class="wf-fa wf-fa-lightbulb-o wf-tip" aria-hidden="true"></i> When you first install the Wordfence Web Application Firewall, it will be in learning mode. This allows Wordfence to learn about your site so that we can understand how to protect it and how to allow normal visitors through the firewall. We recommend you let Wordfence learn for a week before you enable the firewall. <span class="wf-hidden-xs">Back to </span>%s <span class="wf-hidden-xs">Block </span>Reason <span class="wf-hidden-xs">Block </span>Type <span class="wf-hidden-xs">Block access to the rest of the site</span><span class="wf-visible-xs">Rest of site</span> <span class="wf-hidden-xs">Browser </span>User Agent <span class="wf-hidden-xs">Custom </span>Pattern <span class="wf-hidden-xs">Restore </span>Defaults <span class="wf-hidden-xs">What to </span>Block <span class="wf-red-dark">Warning:</span> You are running the LiteSpeed web server and Wordfence can't determine whether "noabort" is set. Please verify that the environmental variable "noabort" is set for the local site, or the server's global External Application Abort is set to "No Abort". <strong>AUTHENTICATION FAILURE</strong>: A temporary failure was encountered while trying to log in. Please try again. <strong>CHECK YOUR PHONE</strong>: A code has been sent to your phone and will arrive within 30 seconds. Enter it below to sign in. <strong>CHECK YOUR PHONE</strong>: A code has been sent to your phone and will arrive within 30 seconds. Please sign in again and add a space and the code to the end of your password (e.g., <code>wfABCD</code>). <strong>CHECK YOUR PHONE</strong>: A code has been sent to your phone and will arrive within 30 seconds. Please sign in again and add a space, the letters <code>wf</code>, and the code to the end of your password (e.g., <code>wf123456</code>). <strong>CODE EXPIRED. CHECK YOUR PHONE:</strong> The code you entered has expired. Codes are only valid for 30 minutes for security reasons. We have sent you a new code. Please sign in using your username, password, and the new code we sent you. <strong>CODE INVALID</strong>: The 2FA code provided is either expired or invalid. Please try again. <strong>CODE REQUIRED</strong>: Please check your authenticator app for the current code. Enter it below to sign in. <strong>CODE REQUIRED</strong>: Please check your authenticator app for the current code. Please sign in again and add a space, the letters <code>wf</code>, and the code to the end of your password (e.g., <code>wf123456</code>). <strong>CODE REQUIRED</strong>: Please enter your 2FA code immediately after your password in the same field. <strong>CODE REQUIRED</strong>: Please provide your 2FA code when prompted. <strong>Cellphone Sign-in Required</strong>: Cellphone Sign-in is required for all administrator accounts. Please contact the site administrator to enable it for your account. <strong>Congratulations!</strong> You've optimized configurations for this feature! If you want to learn more about how this score is determined, click the link below. <strong>ERROR</strong>: A username and password must be provided. <a href="%s" title="Password Lost and Found">Lost your password</a>? <strong>ERROR</strong>: An error occurred while sending the message. Please try again. <strong>ERROR</strong>: Incorrect username or password. <strong>ERROR</strong>: The username or password you entered is incorrect. <a href="%2$s" title="Password Lost and Found">Lost your password</a>? <strong>ERROR</strong>: The username or password you entered is incorrect. <a href="%s" title="Password Lost and Found">Lost your password</a>? <strong>ERROR</strong>: Unable to send message. Please refresh the page and try again. <strong>ERROR</strong>: Unable to send message. You have exceeded the maximum number of messages that may be sent at this time. Please try again later. <strong>ERROR</strong>: You can't register using that username <strong>Enable Separate Prompt for Two-Factor Code<a href="%s" target="_blank" rel="noopener noreferrer" class="wfhelp wf-inline-help"><span class="screen-reader-text"> (opens in new tab)</span></a></strong><br><em>Note:</em> This setting changes the behaviour for obtaining the two-factor authentication code from using the password field to showing a separate prompt. If your theme overrides the default login page, you may not be able to use this option. <strong>INSECURE PASSWORD:</strong> Your login attempt has been blocked because the password you are using exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. Please <a href="%1$s">reset your password</a> to reactivate your account. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn More<span style="font-size:0;"> (opens in new tab)</span></a> <strong>INVALID CODE</strong>: Please sign in again and add a space, the letters <code>wf</code>, and the code from your authenticator app to the end of your password (e.g., <code>wf123456</code>). <strong>INVALID CODE</strong>: Please sign in again and add a space, the letters <code>wf</code>, and the code sent to your phone to the end of your password (e.g., <code>wf123456</code>). <strong>INVALID CODE</strong>: You need to enter the code generated by your authenticator app. The code should be a six digit number (e.g., 123456). <strong>INVALID CODE</strong>: You need to enter the code generated sent to your phone. The code should be a six digit number (e.g., 123456). <strong>INVALID CODE</strong>: You need to enter your password and the code we sent to your phone. The code should start with 'wf' and should be four characters (e.g., wfAB12). <strong>MESSAGE SENT</strong>: Your message was sent to the site owner. <strong>Note:</strong> Blocking is disabled when the option "Enable Rate Limiting and Advanced Blocking" is off. <strong>Note:</strong> The GeoIP database that is required for country blocking has been updated to a new format. This new format requires sites to run PHP 5.4 or newer, and this site is on PHP %s. To ensure country blocking continues functioning, please update PHP. <strong>Note:</strong> Two-Factor Authentication is disabled when the option "Enable Brute Force Protection" is off. <strong>REGISTRATION ATTEMPT BLOCKED</strong>: The security token for the login attempt was invalid or expired. Please reload the page and try again. <strong>REGISTRATION ATTEMPT BLOCKED</strong>: This site requires a security token created when the page loads for all registration attempts. Please ensure JavaScript is enabled and try again. <strong>REGISTRATION BLOCKED</strong>: The registration request was blocked because it was flagged as spam. Please try again or <a href="#" class="wfls-registration-captcha-contact" data-token="%s">contact the site owner</a> for help. <strong>REGISTRATION BLOCKED</strong>: The registration request was blocked because it was flagged as spam. Please try again or contact the site owner for help. <strong>Require Cellphone Sign-in for all Administrators<a href="%s" target="_blank" rel="noopener noreferrer" class="wfhelp wf-inline-help"><span class="screen-reader-text"> (opens in new tab)</span></a></strong><br><em>Note:</em> This setting requires at least one administrator to have Cellphone Sign-in enabled. On multisite, this option applies only to super admins. <strong>This update includes security-related fixes.</strong> <strong>VALIDATION FAILED</strong>: The 2FA code could not be validated. Please try logging in again. <strong>VERIFICATION FAILED</strong>: Two-factor authentication verification failed. Please try again. <strong>VERIFICATION REQUIRED</strong>: Additional verification is required for login. Please check the email address associated with the account for a verification link. <strong>WARNING: </strong> Your site is using a PHP version (%1$s) that is no longer supported by Wordfence and needs to be updated. We recommend using the newest version of PHP available but will currently support PHP versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. <strong>WARNING: </strong> Your site is using a PHP version (%1$s) that will no longer be supported by Wordfence in an upcoming release and needs to be updated. We recommend using the newest version of PHP available but will currently support PHP versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. <strong>WARNING: </strong> Your site is using a WordPress version (%1$s) that is no longer supported by Wordfence and needs to be updated. We recommend using the newest version of WordPress but will currently support WordPress versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. <strong>WARNING: </strong> Your site is using a WordPress version (%1$s) that will no longer be supported by Wordfence in an upcoming release and needs to be updated. We recommend using the newest version of WordPress but will currently support WordPress versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. <strong>WARNING: </strong>The password you are using exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. Please <a href="%1$s">change your password</a>. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> ( <strong>WARNING: </strong>Your login has been allowed because you have previously logged in from the same IP, but you will be blocked if your IP changes. The password you are using exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. Please <a href="%1$s">change your password</a>. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> ( <strong>WARNING:</strong> If you delete the wrong file, it could cause your WordPress website to stop functioning, and you will probably have to restore from a backup. A Wordfence scan examines all files, posts, pages, and comments on your WordPress website looking for malware, known malicious URLs, and known patterns of infections. It also does several other reputation and server checks. A Wordfence scan looks for malware, malicious URLs, and patterns of infections by examining all of the files, posts, and comments on your WordPress website. It also checks your server and monitors your site's online reputation. A block reason must be provided. A new version of WordPress (v%s) is available. A new version of the plugin "%s" is available. A new version of the theme "%s" is available. A non-admin user with username "%s" signed in to your WordPress site. A reCAPTCHA score equal to or higher than this value will be considered human. Anything lower will be treated as a bot and require additional verification for login and registration. A reminder to activate two-factor authentication was sent to %d user. A reminder to activate two-factor authentication was sent to %d users. A request was received to stop the previous scan. A scan is already running. Use the stop scan button if you would like to terminate the current scan. A server error occurred while saving the configuration: %s A termination request has been sent to stop any running scans. A test request to this website was detected on a different value for this setting. IP blocking and live traffic information may not be accurate. <a href="%s" target="_blank" rel="noopener noreferrer">Get More Information<span class="screen-reader-text"> ( A user with 'subscriber' access has a password that is very easy to guess. Please either change it or ask the user to change their password. A user with IP address %1$s has been locked out from signing in or using the password recovery form for the following reason: %2$s. A user with the a role of '%s' has a password that is easy to guess. Please change this password yourself or ask the user to change it. A user with username "%1$s" tried to sign in to your WordPress site. Access was denied because the password being used exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. Please change or reset the password (%2$s) to reactivate this account. Learn More: %3$s A user with username "%s" deactivated Wordfence on your WordPress site. A user with username "%s" deactivated the Wordfence Web Application Firewall on your WordPress site. A user with username "%s" who has administrator access signed in to your WordPress site. A user with username "%s" who has administrator access tried to sign in to your WordPress site. Access was denied because all administrator accounts are required to have Cellphone Sign-in enabled but this account does not. A valid server configuration was not provided. A visitor blocked from registration sent the following message.
----------------------------------------
IP: %s
Username: %s
Email: %s
reCAPTCHA Score: %f
----------------------------------------
%s A wildcard cannot be used to exclude all files from the scan. ADMIN EMAIL: %s AM Ability to connect to the Wordfence servers and your own site. Ability to read/write various files. Ability to save Wordfence settings to the database. Aborting scan because WordPress updated from version %1$s to %2$s. The scan will be reattempted later. About Wordfence Access from your area has been temporarily limited for security reasons Access to Premium Support Access token not found. Accessed a banned URL Activate Activate 2FA Activate Premium Activated - connected by %1$s on %2$s Active Active WAF storage engine Activity Detail Activity Log Sent Activity Report Add Add Additional Signatures Add Allowlisted URL/Param Add Filter Add Param to Firewall Allowlist Add action to allowlist Add code to .htaccess Adding issue %s Adding issue: %1$s Adding issue: %s Additional Detail Additional Options Additional scan signatures Additional scan signatures (one per line) Admin Contact Info Admin Login Admin Login Blocked Admin Panel Admin user with this email address not found. Administrative memory limit Advanced Block Advanced Country Blocking Options Advanced Firewall Options Advanced Scan Options Advanced blocking in effect. Advanced caching plugin Afghanistan Agree Agreement to New Terms and Privacy Policies Ajax request received to start scan. Aland Islands Albania Alert generated at %s Alert me when a non-admin user signs in Alert me when someone with administrator access signs in Alert me when there's a large increase in attacks detected on my site Alert me with scan results of this severity level or greater Alert me with scan results of this severity level or greater: Alert when an IP address is blocked Alert when someone is blocked from logging in for using a password found in a breach Alert when someone is locked out from login Alert when the "lost password" form is used for a valid user Algeria All Countries All Documentation All Firewall Options All Hits All Options All PHP requests will be processed by the firewall prior to running. All Tables Exist All Traffic All blocking rules you create will show here. You can manage them as well as remove or modify them from the same location. All capabilties of admin user %s were successfully revoked. All of the Firewall settings are now located here. This includes configuration options for the web application firewall, brute force protection, rate limiting, allowlisted URLs, and blocking. All of the blocking rules you create are now in one central location. Simply choose the block type and enter the details for the rule you want to create. Premium users have access to advanced country blocking options, found via the <strong>Options</strong> link. All of your blocking rules are in one central location. Choose the Block Type, then enter the details for the rule. Once it has been added, you'll see it saved as a rule for your site. All of your scan options, including scheduling, are now located here. All two-factor authentication settings and users' codes will revert to your older settings. If any users had set up two-factor authentication after the update, they will no longer have 2FA enabled until you switch to the new version again. Allow remembering device for 30 days Allowlist Entry Exists Allowlisted 404 URLs Allowlisted IP addresses that bypass 2FA Allowlisted IP addresses that bypass all rules Allowlisted IPs must be placed on separate lines. You can specify ranges using the following formats: 127.0.0.1/24, 127.0.0.[1-100], or 127.0.0.1-127.0.1.100. Allowlisted IPs must be separated by commas or placed on separate lines. You can specify ranges using the following formats: 127.0.0.1/24, 127.0.0.[1-100], or 127.0.0.1-127.0.1.100<br/>Wordfence automatically allowlists <a href="http://en.wikipedia.org/wiki/Private_network" target="_blank" rel="noopener noreferrer">private networks<span class="screen-reader-text"> (opens in new tab)</span></a> because these are not routable on the public Internet. Allowlisted URLs Allowlisted hosts Allowlisted services Allowlisted via Firewall Options page Allowlisted via Live Traffic Alternate WP cron Always Ignore Always Ignore Version American Samoa Amount of Live Traffic data to store (number of rows) Amount of time a user is locked out An admin user with a suspicious username %s was found. An admin user with a suspicious username %s was found. Administrators accounts with usernames similar to this are commonly seen created by hackers. It's possible a plugin could have created the account, but if you do not recognize the user, we suggest you remove it. An admin user with the username %s was created outside of WordPress. An admin user with the username %s was created outside of WordPress. It's possible a plugin could have created the account, but if you do not recognize the user, we suggest you remove it. An allowlist entry for this URL and parameter already exists. An empty licence key was entered. An error occured when fetching the WAF configuration from the database. An error occurred An error occurred when adding the request to the allowlist. An error occurred while creating the block. An error occurred while saving the configuration. An error occurred while saving the configuration: %s An error occurred while saving the licence. An error occurred while saving the licence: %s An error occurred while trying to hide the file. An error occurred: An error occurred: %s An error occurred: Invalid options format received. An error was encountered while trying to activate two-factor authentication. Please try again. An error was encountered while trying to deactivate two-factor authentication. Please try again. An error was encountered while trying to generate new recovery codes. Please try again. An error was encountered while trying to send the notification. Please try again. An error was encountered while validating the reCAPTCHA site key: %s An expected parameter was not provided. An invalid IP address was specified. An invalid IP source was provided. An invalid country was selected. An invalid file %s was specified for repair. An invalid file was requested for deletion. An invalid file was requested for hiding. An invalid file was specified for repair. An invalid operation was called. An invalid status was specified when trying to update that issue. An invalid type was specified to get file. An unknown action was provided. An unknown configuration section was provided. An unknown location at IP An unknown location at IP %s An update is available for Updates are available for Analyzed %1$d files containing %2$s of data so far Analyzed %1$d files containing %2$s of data. Andorra Angola Anguilla Antarctica Antigua and Barbuda Any previous value for <code>auto_prepend_file</code> will need to be re-enabled manually if still needed. Anyone claiming to be Google will not be rate-limited Apache + CGI/FastCGI Apache + mod_php Apache + suPHP Application passwords have been disabled by Wordfence. Are you sure you want to allowlist this action? Are you sure you want to deactivate two-factor authentication? Are you sure you want to delete? Are you sure you want to disconnect your site from Wordfence Central? Are you sure you want to generate new recovery codes? Any remaining unused codes will be disabled. Are you sure you want to repair? Are you sure you want to restore the default Blocking settings? This will undo any custom changes you have made to the options on this page. Any existing blocks will be preserved. Are you sure you want to restore the default Diagnostics settings? This will undo any custom changes you have made to the options on this page. Are you sure you want to restore the default Firewall settings? This will undo any custom changes you have made to the options on this page. If you have manually disabled any rules or added any custom allowlisted URLs, those changes will not be overwritten. Are you sure you want to restore the default Live Traffic settings? This will undo any custom changes you have made to the options on this page. Are you sure you want to restore the default Scan settings? This will undo any custom changes you have made to the options on this page. Are you sure you want to restore the default Two-Factor Authentication settings? This will undo any custom changes you have made to the options on this page. If you have configured any users to use two-factor authentication, they will not be changed. Are you sure you want to restore the default global settings? This will undo any custom changes you have made to the options on this page. Your configured licence key and alert emails will not be changed. Are you sure you want to restore the default settings? This will undo any custom changes you have made to the options on this page. If you have manually disabled any rules or added any custom allowlisted URLs, those changes will not be overwritten. Are you sure you want to stop blocking the ${count} selected IPs, ranges, and countries? Are you sure you want to stop blocking the selected IP, range, or country? Argentina Armenia Aruba As a free Wordfence user, you are currently using the Community version of the Threat Defense Feed. Premium users are protected by additional firewall rules and malware signatures as well as the Wordfence real-time IP blocklist. Upgrade to Premium today to improve your protection. As a free Wordfence user, you are currently using the Community version of the Threat Defense Feed. Premium users are protected by additional firewall rules and malware signatures. Upgrade to Premium today to improve your protection. Asking Wordfence to check URLs against malware list. Attacks Blocked for %s Attempt to return to the admin login page (you may still be locked out) Australia Austria Auth grant is invalid. Auth grant not found. Authentication Code Authenticator Author Author: %s Authorization header format is invalid. Auto-renew is disabled Automatic WP Core updates Automatic database repair Automatic migration of the 2FA-enabled accounts failed. Please verify that your server is reachable via the internet and try again. Automatically enable on Automatically generated from previous country blocking settings Automatically updates Wordfence to the newest version within 24 hours of a new release. Azerbaijan Back Back to Scan Back<span class="wf-hidden-xs"> to Dashboard</span> Background Request Blocked Backtrack limit is %d, reducing to 1000000 Bad URL Bad security token. It may have been more than 12 hours since you reloaded the page you came from. Try reloading the page you came from. If that doesn't work, please sign out and sign-in again. Bahamas Bahrain Bangladesh Barbados Basic Firewall Options Basic Protection Basic Scan Type Options Basic WordPress Protection: Basic config writing Before this file can be deleted, the configuration for the <code>auto_prepend_file</code> setting needs to be removed. Beginning file hashing Belarus Belgium Belize Benin Bermuda Beta scan signatures are currently enabled. These signatures have not been fully tested yet and may cause false positives or scan stability issues on some sites. Bhutan Block All Block Count Block Duration Block IP Block IPs who send POST requests with blank User-Agent and Referer Block Reason Block Reason: Block Technical Data Block This Network Block Type Block countries even if they are logged in Block crawlers that are using too many resources or stealing content Block external URL requests Block traffic by country, IP, IP range, user agent, referrer, or hostname Block<span class="wf-hidden-xs"> Visitors Matching this Pattern</span> Block<span class="wf-hidden-xs"> Visitors Matching this</span> Pattern Block<span class="wf-hidden-xs"> the Selected Countries</span> Block<span class="wf-hidden-xs"> this IP Address</span> Blocked Blocked By Firewall Blocked User Registration Contact Form Blocked WAF Blocked attack counts not available yet. Blocked because the IP is blocklisted Blocked by Wordfence Blocked by Wordfence Security Network Blocked by Wordfence plugin settings Blocked by login security setting Blocked by the Wordfence Application Firewall and plugin settings Blocked by the Wordfence Security Network Blocked by the Wordfence Web Application Firewall Blocked for %1$s in POST body: %2$s = %3$s Blocked for %1$s in cookie: %2$s = %3$s Blocked for %1$s in file: %2$s = %3$s Blocked for %1$s in query string: %2$s = %3$s Blocked for %s Blocking Blocking Builder Blocking IP %1$s. %2$s Blocking IP %s Blocking Options Blocklist Blocklist Check Blocklist Status Blocks requests from known malicious IPs Blog Highlights Bolivia Bonaire, Saint Eustatius and Saba Bosnia and Herzegovina Bot Botswana Bouvet Island Brazil British Indian Ocean Territory Browser Time: Browser user-agent to ignore Brunei Darussalam Brute Force Brute Force Protection Brute Force Protection Status Built-in caching Bulgaria Burkina Faso Burundi By default, Wordfence will scan your site daily. Start your first scan now to see if your site has any security issues that need to be addressed. From here you can run manual scans any time you like. Bypass Cookie Bypass Redirect Bypass the LiteSpeed "noabort" check Call to Wordfence API to resolve IPs failed: %s Calling Wordfence API v%s: Calling fork() from wordfenceHash with maxExecTime: %s Calling startScan(true) Cambodia Cameroon Canada Cancel Cancel Changes Cancel Scan Cancel<span class="wf-hidden-xs wf-hidden-sm"> Changes</span> Cancel<span class="wfls-visible-sm-inline"> Changes</span> Cape Verde Category Cayman Islands Cellphone Sign-In Recovery Codes Cellphone Sign-in Enabled Cellphone Sign-in activated for user. Cellphone Sign-in is only available to paid members. <a href="https://www.wordfence.com/gnl1twoFac3/wordfence-signup/" target="_blank" rel="noopener noreferrer">Click here to upgrade now.<span class="screen-reader-text"> ( Central African Republic Chad Change Filter Changelog Check for publicly accessible configuration files, backup files and logs Check if this website IP is generating spam Check if this website is being "Spamvertised" Check if this website is being "Spamvertised" Check if this website is on a domain blocklist Check if your site is being Spamvertized is for paid members only Check password strength on profile update Check spam & spamvertising blocklists Check the strength of passwords Checking %1$d URLs from %2$d sources. Checking %d host keys against Wordfence scanning servers. Checking OpenSSL version Checking Web Application Firewall status Checking basic config reading/writing Checking cronkey: %1$s (expecting %2$s) Checking for OpenSSL support Checking for cURL support Checking for future GeoIP support Checking for paths skipped due to scan settings Checking for the most secure way to get IPs Checking if MySQL user has <code>ALTER TABLE</code> privilege Checking if MySQL user has <code>CREATE TABLE</code> privilege Checking if MySQL user has <code>DELETE</code> privilege Checking if MySQL user has <code>DROP</code> privilege Checking if MySQL user has <code>INSERT</code> privilege Checking if MySQL user has <code>SELECT</code> privilege Checking if MySQL user has <code>TRUNCATE</code> privilege Checking if MySQL user has <code>UPDATE</code> privilege Checking if scan is already running Checking if web server can read from <code>~/plugins/wordfence</code> Checking if web server can read from <code>~/wp-content/wflogs</code> Checking if web server can write to <code>~/plugins/wordfence</code> Checking if web server can write to <code>~/wp-content/wflogs</code> Checking if your IP is generating spam is for paid members only Checking if your server discloses the path to the document root Checking if your site IP is generating spam Checking if your site is being Spamvertised Checking if your site is on a domain blocklist Checking if your site is on a domain blocklist is for paid members only Checking password strength of user '%1$s' with ID %2$d Checking saved cronkey against cronkey param Checking serialized config reading/writing Chile China Christmas Island Clear Clear Connection Data Clear Filter Clear all Wordfence Central connection data Click here for steps you can try. Click here to configure Click here to download a backup copy of this file now Click here to download a backup copy of your .htaccess file now Click here to unblock all IP addresses. Click here to unlock all IP addresses and disable the Wordfence Firewall and Wordfence login security for all users Click here to unlock your ability to sign-in and to access to the site. Click here to update now Click here to upgrade to Wordfence Premium: Click here to use the recommended setting Click inside window to resume Click to fix .htaccess Click to view your system's configuration in a new window Close Cocos (Keeling) Islands Code Collapse All Colombia Community Comoros Comparing core WordPress files against originals in repository Comparing open source themes against WordPress.org originals Comparing plugins against WordPress.org originals Completed checking password strength of user '%s' Complex Concatenate JavaScript files Configuration Complete Configured WAF storage engine (WFWAF_STORAGE_ENGINE) Configured but not valid Confirm Disconnect Confirm Restore Defaults Confirm Unsubscribe Congo Congo, The Democratic Republic of the Congratulations! Configuration is complete and Wordfence Premium is active on your website. Congratulations! Wordfence Premium is now active on your website. Please note that some Premium features are not enabled by default. Connect Site Connect This Site Connected by %1$s on %2$s Connecting back to this site Connecting to Wordfence servers (http) Connecting to Wordfence servers (https) Contacting Wordfence to initiate scan Content Safety Continue Cook Islands Cookie Core Core Upgrade Core hashes data received from Wordfence servers was not valid. Corrected Time (NTP): Corrected Time (WF): Costa Rica Cote dIvoire Could not connect to database to start scan: %s Could not contact Wordfence servers to generate a verification code: %s Could not delete file %1$s. Error was: %2$s Could not delete file %1$s. The error was: %2$s Could not delete file because that issue does not appear to be a file related issue. Could not delete file because we could not find that issue. Could not delete files Could not fetch core hashes from Wordfence servers. Could not fetch free licence key from Wordfence: %s Could not fetch malware signatures from Wordfence servers. Could not generate verification code: %s Could not get username for user with ID %d when checking password strength. Could not read directory %s to do scan. Could not remove the option %1$s. The error was: %2$s Could not remove the option because that issue does not appear to be a database related issue. Could not remove the option because we could not find that issue. Could not repair files Could not understand the response we received from the Wordfence servers when applying for a free licence key. Could not verify Wordfence Licence: %s Count Count failures over what time period Countries<span class="wf-hidden-xs"> to Block</span> Country Country Block Country Blocking Country blocking Crawlers Create a Blocking Rule Created Critical Critical Problems: Croatia Cron Jobs Cron Status Cron running frequency lock Cron test received and message printed Cuba Curacao Current Plugin Version Current Theme Version Current WAF configuration. Current WordPress Version Current blocks<span class="wf-hidden-xs"> for %s</span> Currently in Learning Mode Custom Custom "usermeta" table Custom "users" table Custom PHP error message Custom PHP fatal error handler Custom Scan Custom database class Custom database error message Custom installation script Custom maintenance message Custom scan options selected Custom site deleted message Custom site inactive message Custom site suspended message Custom text shown on block pages Custom upload folder location Cyprus Czech Republic Dashboard Dashboard Notification Options Dashboard notifications will also be displayed for Security Alerts, Promotions, Blog Highlights, and Product Updates. These notifications can be disabled by upgrading to a premium licence. Data is invalid. Database Tables Database Version Database character set Database collation Database table names, sizes, timestamps, and other metadata. Database version and privileges. Date Deactivate Deactivate 2FA Debugging Options Default Deferring scheduled scan by %s Defines the multisite database ID for the current site Defines the multisite domain for the current site Defines the multisite path for the current site Delay IP and Country blocking until after WordPress and plugins have loaded (only process firewall rules early) Delete Delete All Deletable Files Delete File Delete Files Delete Login Security tables and data on deactivation Delete Option Delete User Delete Wordfence tables and data on deactivation Deleted %1$d files but we encountered the following errors with other files: %2$s Deleted %d files successfully Deleted %d files successfully. No errors were encountered. Deleted some files with errors Deleting an infected wp-config.php file must be done outside of Wordfence. The wp-config.php file contains your database credentials, which you will need to restore normal site operations. Your site will NOT function once the wp-config.php file has been deleted. Denmark Description Description: %s Detail Details Detected IP(s): Detected IP: Detected loop in malware scan, aborting. Detection of security issues Diagnostic report has been sent successfully. Diagnostics Directory Listing Disabled Directory Listing Enabled Directory listing has been disabled on your server. Directory listing is enabled Directory listing provides an attacker with the complete index of all the resources located inside of the directory. The specific risks and consequences vary depending on which files are listed and accessible, but it is recommended that you disable it unless it is needed. Disable Disable Author Scanning. Disable Code Execution for Uploads directory Disable WordPress application passwords Disable XML-RPC authentication Disable reading of php://input Disable the fatal error handler Disabled Disabled: Disallow plugin/theme editing Disallow plugin/theme update and installation Disconnect Disconnect Site Disconnect This Site Disconnected by %1$s on %2$s Discounts for multi-year and multi-licence purchases Disk Space Dismiss Display "All Options" menu item Display "Blocking" menu item Display "Live Traffic" menu item Display All Options menu item Display Blocking menu item Display Blocking menu option Display Live Traffic menu item Display Live Traffic menu option Djibouti Do not delete files on your system unless you're ABSOLUTELY sure you know what you're doing. If you delete the wrong file it could cause your WordPress website to stop functioning and you will probably have to restore from backups. If you're unsure, Cancel and work with your hosting provider to clean your system of infected files. If you'd like to learn more, <a href="%s" target="_blank" rel="noopener noreferrer">click here for our help article<span class="screen-reader-text"> (opens in new tab)</span></a>. Do not repair files on your system unless you're ABSOLUTELY sure you know what you're doing. If you repair the wrong file it could cause your WordPress website to stop functioning and you will probably have to restore from backups. If you're unsure, Cancel and work with your hosting provider to clean your system of infected files. Do not upgrade global tables Do this if you keep getting locked out or blocked and can't access your site. You can re-enable login security and the firewall once you sign-in to the site by visiting the Wordfence Firewall menu, clicking and then turning on the firewall and login security options. If you use country blocking, you will also need to choose which countries to block. Do this if you simply need to regain access because you were accidentally locked out. If you received an "Insecure Password" message before getting locked out, you may also need to reset your password. Do this if you still can't regain access using the link above. It causes everyone who is blocked or locked out to be able to access your site again. Do you want Wordfence to stay up-to-date automatically? Documentation Documentation about Wordfence may be found on our website by clicking the button below or by clicking the <i class="wf-fa wf-fa-question-circle-o" aria-hidden="true"></i> links on any of the plugin's pages. Dominica Dominican Republic Don't ask again Don't let WordPress reveal valid users in login errors Don't log signed-in users with publishing access Done Done URL check. Done examining URLs Done file contents scan Done host key check. Download Download %s Download Backup File Download Recovery Codes Drop-In WordPress Plugins Each feature contains a status percentage reminding you at a high level of what's enabled, disabled, or needing your attention. The Notifications section highlights actions you need to take. Each feature contains a status that reminds you what's enabled, disabled or needs attention. The Notifications section will highlight actions you need to take. Each line of %d letters and numbers is a single recovery code, with optional spaces for readability. To use a recovery code, after entering your username and password, enter the code like "1234 5678 90AB CDEF" at the 2FA prompt. If your site has a custom login prompt and does not show a 2FA prompt, you can use the single-step method by entering your password and the code together in the Password field, like "mypassword1234 5678 90AB CDEF". Your recovery codes are: Each line of 16 letters and numbers is a single recovery code, with optional spaces for readability. When typing your password, enter "wf" followed by the entire code like "mypassword wf1234 5678 90AB CDEF". If your site shows a separate prompt for entering a code after entering only your username and password, enter only the code like "1234 5678 90AB CDEF". Your recovery codes are: Easily Monitor Your Wordfence Protection Ecuador Edit Edit Blocking Rule Edit trusted proxies Edit two-factor authentication for %s Editing User: %s <span class="wfls-text-plain">%s</span> Egypt Either you or someone at IP address <b>%1$s</b> requested an alert unsubscribe link for the website <a href="%2$s"><b>%3$s</b></a>. Either you or someone else at IP address <b>%1$s</b> requested instructions to regain access to the website <a href="%2$s"><b>%3$s</b></a>. El Salvador Email Alert Preferences Email Diagnostic Report Email Wordfence Activity Log Email address is invalid. Email address: Email me if Wordfence is deactivated Email me if the Wordfence Web Application Firewall is turned off Email me when Wordfence is automatically updated Email verification invalid or expired. Please try again. Email verification succeeded. Please continue logging in. Email: %s Email<span class="wf-hidden-xs"> activity</span> log Enable Enable Automatic Scans Enable Block Admin Registration. Enable Brute Force Protection. Enable Firewall Enable Firewall. Enable Mask Login Errors. Enable Premium Reputation Checks. Enable Premium Rules. Enable Premium Scan Signatures. Enable Rate Limiting and Advanced Blocking Enable Rate Limiting and Advanced Blocking. Enable Real-Time IP Blocklist. Enable Real-Time Wordfence Security Network. Enable SSL Verification (Disable this if you are consistently unable to connect to the Wordfence servers.) Enable Separate Prompt for Two Factor Code Enable Two-Factor Authentication Enable activity report widget on the WordPress dashboard Enable beta threat defense feed Enable brute force protection Enable country blocking by upgrading to Premium. Enable debugging mode (increases database load) Enable email summary Enable firewall. Enable reCAPTCHA on the login and user registration pages Enable scan option to check if this website is being "Spamvertised". Enable scan option to check if your website IP is generating spam. Enable scan option to check if your website is on a domain blocklist. Enabled Enabled and Protecting Enabled and Protecting: Encountered file that is too large: %s - Skipping. Enforce Strong Passwords. Enforce strong passwords Enter Premium Key Enter Premium Licence Key Enter a duration (default is forever) Enter a full URL (e.g., http://example.com/blocked/) Enter a reason Enter a valid IP or domain Enter activation code: Enter an IP address Enter the code from your authenticator app below to verify and activate two-factor authentication for this account. Enter the email address you would like to send the Wordfence activity log to. Note that the activity log may contain thousands of lines of data. This log is usually only sent to a member of the Wordfence support team. It also contains your PHP configuration from the phpinfo() function for diagnostic data. Enter username to enable Two-Factor Authentication for Enter your premium licence key to enable real-time protection for your website. Entered fork() Entering start scan routine Entire Site Equatorial Guinea Eritrea Error Error Activating 2FA Error Deactivating 2FA Error During Setup Error Enabling All Options Page Error Generating New Codes Error Installing Licence Error Restoring Defaults Error Saving Option Error Saving Options Error Sending Notification Error checking domain blocklists: %s Error during Export Error during Import Error finishing writing value for %1$s (MySQLi error: [%2$s] %3$s) Error reassembling value for %s Error writing value chunk for %1$s (MySQLi error: [%2$s] %3$s) Error writing value for %1$s (MySQLi error: [%2$s] %3$s) Error writing value header for %s Errors occurred while saving the configuration. Errors occurred while saving the configuration: %s Estonia Ethiopia Europe Every Other Day Everything Examining URLs found in posts we scanned for dangerous websites Examining URLs found in the options we scanned for dangerous websites Exceeded the maximum global requests per minute for crawlers or humans. Exceeded the maximum number of login failures which is: %1$s. The last username they tried to sign in with was: '%2$s' Exceeded the maximum number of page not found errors per minute for a crawler. Exceeded the maximum number of page not found errors per minute for humans. Exceeded the maximum number of page requests per minute for humans. Exceeded the maximum number of requests per minute for crawlers. Exceeded the maximum number of tries to recover their password which is set at: %1$s. The last username or email they entered before getting locked out was: '%2$s' Exclude files from scan that match these wildcard patterns Exclude files from scan that match these wildcard patterns (one per line) Executed before Multisite is loaded Existing User Existing WAF Installation Detected: Expand All Expand All Results Expiration Explicitly set blog URL Explicitly set site URL Export Successful Export this site's Wordfence options for import on another site Export<span class="wf-hidden-xs"> All IPs</span> Export<span class="wf-hidden-xs"> Wordfence</span> Options Extended Protection Extended Protection Mode has not been disabled. This may be because <code>auto_prepend_file</code> is configured somewhere else or the value is still cached by PHP. Extended Protection Mode of the Wordfence Web Application Firewall uses the PHP ini setting called <code>auto_prepend_file</code> in order to ensure it runs before any potentially vulnerable code runs. This PHP setting currently refers to the Wordfence file at: Extended Protection: External object cache Failed Failed Login Failed Login: Invalid Username Failed Login: Valid Username Falkland Islands (Malvinas) Faroe Islands Fetching core, theme and plugin file signatures from Wordfence Fetching fresh core hashes Fetching fresh malware prefixes Fetching list of known core files from Wordfence Fetching list of known malware files from Wordfence Fetching stored cronkey for comparison. Fiji File File "%s" does not exist File "%s" is unreadable File "%s" is unwritable File Changes File Name File Size: File System Credentials Required File Type File access blocked. (WORDFENCE_DISABLE_FILE_VIEWER is true) File appears to be malicious or unsafe: %s File contains illegal characters. File contains suspected malware URL: File contains suspected phishing URL: File does not exist. File hidden successfully File is an old version of TimThumb which is vulnerable. File last modified: File restored OK File type: Filename Filename: Filesystem Credentials Required Filesystem Permission Error Filter Filter Traffic Filter Value Filter by Type, Detail, or Reason Finalizing malware scan results Find the documentation and help you need Finland Firewall Firewall Options Firewall Response Firewall Response: Firewall Rules Status Firewall Rules: Firewall Status Firewall Summary: Firewall issues may be caused by file permission changes or other technical problems. Fixing wp_mail from address: %s For admins only For all users with "publish posts" capability For entry-level hosting plans. Provides limited detection capability with very low resource utilization. For help on setting up an app, visit our help article. For maximum security use PHP's built in REMOTE_ADDR. For site owners who think they may have been hacked. More thorough but may produce false positives. Force SSL for administrative logins Force admins and publishers to use strong passwords (recommended) Force all members to use strong passwords Forking during hash scan to ensure continuity. Forking during indexing: %s Forking during malware scan (%s) to ensure continuity. Found Found %d plugin Found %d plugins Found %d theme Found %d themes Found .suspected file: %s France Free Licence Installed Free Support French Guiana French Polynesia French Southern Territories Friday From: Front-end Website Full Browser ID: Full Name Full Path Disclosure Full Path Disclosure (FPD) vulnerabilities enable the attacker to see the path to the webroot/file. e.g.: /home/user/htdocs/file/. Certain vulnerabilities, such as using the load_file() (within a SQL Injection) query to view the page source, require the attacker to have the full path to the file they wish to view. GDPR Information Gabon Gambia Gathering host keys. General General Data Protection Regulation General Options General Wordfence Options General information about the Wordfence installation. Generate Generate New Codes Generate New Recovery Codes Generated by Wordfence at Generated by Wordfence at %s Generated in %.4f seconds GeoIP Version Georgia Germany Get Help Getting plugin list from WordPress Getting theme list from WordPress Ghana Gibraltar Global Options Global Wordfence Options Go To Dashboard Go To New 2FA Go To Option Go to Go to Support Forums Go: Google Bot Google Crawlers Got a true deserialized value back from 'wfsd_engine' with type: %s Got error response from Wordfence servers: %s Got it Got max_execution_time value from ini: %s Got value from wf config maxExecutionTime: %s Greater than 2 Gigs Greece Greenland Greetings! The default configuration for Wordfence Live Traffic has changed. The new default saves only logins and blocked requests, while this site is currently recording all traffic. Would you like to change to the new default? Grenada Group By: Guadeloupe Guam Guatemala Guernsey Guinea Guinea-Bissau Guyana HIGH SENSITIVITY scanning is enabled, it may produce false positives HTML tags will be stripped prior to output and line breaks will be converted into the appropriate tags. HTTP %1$d received from Wordfence Central: %2$s HTTP Response Code HTTP Response Code: Haiti Header Heard Island and McDonald Islands Help Here's where you'll see all the blocking rules you've created. You can also manage them as well as remove or modify them from this table. Hide File Hide WordPress version Hide log High High Sensitivity High Severity Problems: Hit enter to add a username Holy See (Vatican City State) Honduras Hong Kong Hostname Hostname for a proxy server How are these categorized? How do I get to 100%? How does Wordfence determine this? How does Wordfence get IPs How long is an IP address blocked when it breaks a rule How much memory should Wordfence request when scanning How should we treat Google's crawlers How to block a network How to get IPs Human Human/Bot: Humans Hungary IP IP / Action IP Address IP Block IP Detection IP Range IP Throttled IP reputation monitoring IP(s) used by this server IP: IP<span class="wf-hidden-xs"> Address to Block</span> IP<span class="wf-hidden-xs"> Address</span> IP<span class="wf-hidden-xs"> Address</span> Range IPs Iceland Idle If a crawler's page views exceed If a crawler's pages not found (404s) exceed If a human's page views exceed If a human's pages not found (404s) exceed If anyone's requests exceed If disabled, XML-RPC requests that attempt authentication will be rejected. If enabled, XML-RPC calls that require authentication will also require a valid 2FA code to be appended to the password. You must choose the "Skipped" option if you use the WordPress app, the Jetpack plugin, or other services that require XML-RPC. If enabled, all settings and 2FA records will be deleted on deactivation. If later reactivated, all users that previously had 2FA active will need to set it up again. If enabled, users with 2FA enabled may choose to be prompted for a code only once every 30 days per device. If the email address provided was on the alert email list, it has been sent an unsubscribe link. If this is a false positive, you can exclude this parameter from being filtered by the firewall If user from a blocked country hits the relative URL ____ then redirect that user to ____ and set a cookie that will bypass all country blocking If user hits the relative URL If user who is allowed to access the site views the relative URL If user who is allowed to access the site views the relative URL ____ then set a cookie that will bypass country blocking in future in case that user hits the site from a blocked country If you are a WordPress user with administrative privileges on this site please enter your email in the box below and click "Send". You will then receive an email that helps you regain access. If you are using a web server not listed in the dropdown or if file permissions prevent the installer from completing successfully, you will need to perform the change manually. Click Continue below to create the required file and view manual installation instructions. If you cannot complete the setup process, If you did not request these instructions then you can safely ignore them. If you did not request this, you can safely ignore it. If you don't have one, you can purchase one now. If you have a conflict with the new 2FA method, you can temporarily switch back to the Legacy version. If you have automatic updates enabled (see above), you'll get an email when an update occurs. If you have separate WordPress installations with Wordfence installed within a subdirectory of this site, it is recommended that you perform the Firewall installation procedure on those sites before this one. If you know your web server's configuration, please select it from the list below. If you think you have been blocked in error, contact the owner of this site for assistance. If you want to reenable Wordfence Live Traffic, you need to deactivate %1$s and then go to the Wordfence options page and reenable Live Traffic there. Wordfence does work with %1$s, however Live Traffic will be disabled and the Wordfence firewall will also count less hits per visitor because of the %1$s caching function. All other functions should work correctly. If you would like to sign-in to <a href="%1$s">%1$s</a> please <a href="%2$s">click here</a> now. You can change the frequency of this email or turn it on and off by visiting your <a href="%3$s">Wordfence options page</a>. If you're looking for a more comprehensive solution, the <a href="%s" target="_blank" rel="noopener noreferrer">full Wordfence plugin</a> includes all of the features in this plugin as well as a full-featured WordPress firewall, a security scanner, live traffic, and more. The standard installation includes a robust set of free features that can be upgraded via a Premium licence key. If you're moving to a new host or a new installation location, you may need to temporarily disable extended protection to avoid any file not found errors. Use this action to remove the configuration changes that enable extended protection mode or you can <a href="%s" target="_blank" rel="noopener noreferrer">remove them manually<span class="screen-reader-text"> (opens in new tab)</span></a>. Ignore Ignore Ignore All for User Ignore Only this Password Ignore Only this Title Ignore Option Ignore URL Ignore Until File Changes Ignore Until Version Changes Ignore Update Ignore Value Ignore this URL Ignored Ignored IP addresses for Wordfence Web Application Firewall alerting Ignored IPs must be separated by commas or placed on separate lines. These addresses will be ignored from any alerts about increased attacks and can be used to ignore things like standalone website security scanners. Ignored<span class="wf-hidden-xs"> Results</span> Immediately block IPs that access these URLs Immediately block the IP of users who try to sign in as these usernames Immediately lock out invalid usernames Import Successful Import Wordfence options from another site using a token Import/Export Options Import<span class="wf-hidden-xs"> Wordfence</span> Options Importing and exporting of options has moved to the Tools page Importing and exporting of options is available on the Tools page In this mode, the Wordfence Web Application Firewall is actively blocking requests matching known attack patterns and is actively protecting your site from attackers. In this mode, the Wordfence Web Application Firewall is functionally turned off and does not run any of its rules or analyze the request in any way. In use Inactive Include Including files that are outside the WordPress installation in the scan. Increased Attack Rate Index time: %s Indexing files for scanning India Individual Allowlisting Indonesia Initiating quick scan Insecure Password Install Install Licence Install Wordfence Licence Installation Failed Installation Successful Interval the trash is automatically emptied at in days Introducing the New Wordfence 2FA Invalid IP address. Invalid IP range. Invalid block duration. Invalid block type. Invalid bulk operation selected Invalid email address given. Invalid email address provided Invalid file requested. (Relative paths not allowed) Invalid function specified. Please check the link we emailed you and make sure it was not cut-off by your email reader. Invalid hostname. Invalid key provided for authentication. Invalid log type to wfLog: %s Invalid response from Wordfence API during check_possible_malware Invalid response from Wordfence Central. Invalid response from Wordfence Central. Parameter %s not found in response. Invalid response from Wordfence Central: %s Invalid response from Wordfence servers. Invalid response received from Wordfence Central when fetching nonce. Invalid response received from Wordfence Central when fetching token. Invalid response: Invalid response: %s Invalid user ID. Iran, Islamic Republic of Iraq Ireland Isle of Man Israel Issue First Detected Issue Found Issue Found: %s It has unpatched security issues and may have compatibility problems with the current version of WordPress. It is currently configured to use an older version of PHP and may become deactivated if PHP is updated. You may perform the configuration update automatically by <a href="%1$s">clicking here</a>. <a class="wfhelp" target="_blank" rel="noopener noreferrer" href="%2$s"><span class="screen-reader-text"> ( It is not currently in extended protection mode but was configured to use an older version of PHP and may have become deactivated when PHP was updated. You may perform the configuration update automatically by <a href="%1$s">clicking here</a> or use the "Optimize the Wordfence Firewall" button on the Firewall Options page. <a class="wfhelp" target="_blank" rel="noopener noreferrer" href="%2$s"><span class="screen-reader-text"> ( It looks like you've tried to connect this site to Wordfence Central, but the installation did not finish. It was last updated %1$s ago and tested up to WordPress %2$s. It was last updated %s ago. Italy Jamaica Japan JavaScript Errors Jersey Job Jordan Kazakhstan Kenya Key: Kiribati Kosovo Kuwait Kyrgyzstan LICENSE KEY: %s LOG: Language choice Lao Peoples Democratic Republic Last Attempt Last CAPTCHA Last Hit: Last Login Last Updated Last Updated: %s Last Updated: %s ago Last hit was %s ago. Last scan failed Latvia Learn More Learn More: %s Learn more about repairing modified files. Learn more<span class="wf-hidden-xs"> about Blocking</span> Learn more<span class="wf-hidden-xs"> about Global Options</span> Learn more<span class="wf-hidden-xs"> about Scanning</span> Learn more<span class="wf-hidden-xs"> about Two-Factor Authentication</span> Learn more<span class="wf-hidden-xs"> about the Dashboard</span> Learn more<span class="wf-hidden-xs"> about the Firewall</span> Learn more<span class="wf-hidden-xs"> about the Scanner</span> Learn more<span class="wfls-hidden-xs"> about Login Security</span> Learn more<span class="wfls-hidden-xs"> about Two-Factor Authentication</span> Learning Mode Learning Mode Enabled Learning Mode Until %s Learning Mode: Lebanon Legacy Two-Factor Authentication Active Legacy support for SMS-based two-factor authentication is being phased out, as it is less secure than using a modern authenticator app. Lesotho Let Wordfence choose when to scan my site (recommended) Let Wordfence use the most secure method to get visitor IP addresses. Prevents spoofing and works with most sites. Liberia Libyan Arab Jamahiriya Licence Key Licence Status: Licence already in use Licence is expired Licence renews %s Licence renews in %d days Licence renews in 1 day Licence renews today Licence renews tomorrow Liechtenstein Limit the number of issues sent in the scan results email Limited Limited Scan List of WordPress cron jobs scheduled by WordPress, plugins, or themes. List of comma separated IP addresses to ignore List of comma separated usernames to ignore List of directories to exclude from recently modified file list LiteSpeed/lsapi Lithuania Live Traffic Live Traffic Options Live Traffic, Whois Lookup, Import/Export, and Diagnostics Live Updates Paused Live Updates Paused — Click inside window to resume Live traffic defaults to a summary view of all security-related traffic. Details are viewable by clicking anywhere within the summary record. To switch to the expanded view, click the <strong>Expand All Records</strong> switch. Live traffic now defaults to a summary view. Details are viewable by clicking anywhere within the summary record. To switch to the expanded view, click the <strong>Expand All Records</strong> switch. New installations will only log security-related traffic by default, though your previous setting has been preserved. Loading... Location Location: Lock out after how many forgot password attempts Lock out after how many login failures Locked Out Locked out from logging in Lockout Log Files Logged In Login Attempts Login Form Login Name Login Only Login Security Login Security Options Login Security Settings Login Security options are available on the Login Security options page Login Security: Allow remembering device for 30 days Login Security: Allowlisted IP addresses that bypass 2FA Login Security: Disable XML-RPC authentication Login Security: Enable 2FA for these roles Login Security: Enable reCAPTCHA on the login and user registration pages Login Security: Require 2FA for XML-RPC call authentication Login Verification Required Login and firewall activity will appear below. Logins Logins and Logouts Look up IP or Domain Looks like the Wordfence database tables have been deleted. You can fix this by de-activating and re-activating the Wordfence plugin from your Plugins menu. Low Low Severity Problems: Low resource utilization, limited detection capability Luxembourg Macao Macedonia Madagascar Make Permanent Malawi Malaysia Maldives Mali Malta Malware Scan Malware Signatures Status Malware Signatures: Malware URLs Malware data received from Wordfence servers was not valid. Manage 2FA Manage 2FA Settings Manage Blocking Rules Manage Brute Force Protection Manage Firewall Manage Firewall Rules Manage Options Manage Plugins Manage Real-Time IP Blocklist Manage Scan Manage Scan Settings Manage Users Manage WAF Manage global and advanced firewall options Manage global blocking options. Manage global options for Wordfence such as alerts, premium status, and more Manage scan options including scheduling Manage your Wordfence licence, see alerts and automatic plugin updates, and import/export your settings. Manual Configuration Manual Installation Instructions Manual block by administrator Manual permanent block by admin Manually Refresh Rules Manually schedule scans Mark as Fixed Marking comment as spam for containing a malware URL. Comment has %s Marking comment as spam for containing a phishing URL. Comment has %s Marshall Islands Martinique Mauritania Mauritius Maximum days to keep Live Traffic data Maximum days to keep Live Traffic data (minimum: 1) Maximum email alerts to send per hour Maximum execution time for each scan stage Maximum execution time for each scan stage Mayotte Medium Medium Severity Problems: Memory size in megabytes Methods of detecting a visitor's IP address. Mexico Micronesia, Federated States of Migrate Migrate or switch to new two-factor authentication? Migration Cannot Proceed Migration Failed Mode Modified Modified plugin file: %s Modified theme file: %s Modifying the .htaccess file did not resolve the issue, so the original .htaccess file was restored. You can fix this manually by setting <code>display_errors</code> to <code>Off</code> in your php.ini if your site is on a VPS or dedicated server that you control. Moldova, Republic of Monaco Monday Mongolia Monitor Web Application Firewall status Monitor Your Wordfence Protection Monitor background requests from an administrator's web browser for false positives Monitor background requests from an administrator's web browser for false positives (Admin Panel) Monitor background requests from an administrator's web browser for false positives (Front-end Website) Monitor disk space Montenegro Month Montserrat More Details and Instructions More Information Morocco Mozambique Multisite Blog Domain Multisite Blog ID Multisite Blog Path Multisite enabled Multisite enabled, Older subdomain installation constant Multisite enabled, WordPress will load the /wp-content/sunrise.php file Multisite enabled, subdomain installation constant Multisite/network ability enabled Must-Use WordPress Plugins Myanmar NGINX NOTE: NOTE: This checkbox enables ALL blocking/throttling functions including IP, country and advanced blocking, and the "Rate Limiting Rules" below. NOTE: You are using the free version of Wordfence and are missing out on features like real-time firewall rule and malware signature updates, country blocking, and detecting if your site IP is sending spam. <a href="http://www.wordfence.com/zz6/">Click here to upgrade to Wordfence Premium now</a>. NOTE: You are using the free version of Wordfence. Upgrade today: NOTE: You are using the free version of Wordfence. Upgrade today:
- Receive real-time Firewall and Scan engine rule updates for protection as threats emerge
- Real-time IP Blocklist blocks the most malicious IPs from accessing your site
- Country blocking
- IP reputation monitoring
- Schedule scans to run more frequently and at optimal times
- Access to Premium Support
- Discounts for multi-year and multi-licence purchases
Click here to upgrade to Wordfence Premium:
https://www.wordfence.com/zz1/wordfence-signup/ NTP NTP Time Offset Name Namibia Nauru Need help from the WordPress security experts? Nepal Netherlands Network Activated Never New New Caledonia New Issues (%d total) New Login Page Captcha Feature New Plugin Version New Recovery Codes New Theme Version New Two-Factor Authentication Active New WordPress Version New Zealand Next Next Update Check: %s Next scan in %1$s (%2$s) Next scan is starting now Nicaragua Nice work! The firewall is now optimized. Niger Nigeria Niue No No Data Available During Learning Mode No IPs blocked yet. No Ignored Issues No MU-Plugins No New Issues No Thanks No Themes No activity to report yet. Please complete your first scan. No allowlisted URLs currently set. No block parameters provided. No block parameters were provided. No blocked attacks yet. No blocks are currently active. No blocks have been recorded. No blocks match the current filter. No blocks were provided. No configuration changes were provided to save. No configuration section was provided. No countries selected. No data currently. No failed logins have been recorded. No failed logins yet. No files readable No files remaining for malware scan. No files writable No issues have been ignored. No licence was provided to install. No log files found. No longer an administrator for this site? <a href="%s" target="_blank">Click here</a> to stop receiving security alerts. No longer an administrator for this site? Click here to stop receiving security alerts: %s No new issues have been found. No notifications received No requests blocked yet. No requests to report yet. No rules currently set. No rules were updated. Please verify you have permissions to write to the /wp-content/wflogs directory. No rules were updated. Please verify your website can reach the Wordfence servers. No rules were updated. Your website has reached the maximum number of rule update requests. Please try again later. No scan is scheduled No successful logins have been recorded. No thanks. No updates are available at this time. No users currently have cellphone sign-in enabled. No: %s Nonce format is invalid. Nonce is invalid. None Norfolk Island Normal Normal request North Korea Northern Mariana Islands Norway Not Allowed Not a core, theme, or plugin file from wordpress.org Note: Status will update when changes are saved Note: This does not include Login Security settings and tables. An option to delete those must be selected separately on the Login Security settings page. Nothing done Nothing selected to block. Notification Sent Notifications Number of scan results to return. OK Odd Days & Weekends Off Offset of scan results to return. Old WordPress core file not removed during update: %s Oman On Once Daily Once a day Once a month Once a week Once you have downloaded the files, click Continue to complete the setup. Once you have downloaded the files, click Continue to complete uninstallation. Once you have entered credentials, click Continue to complete the setup. Once you have entered credentials, click Continue to complete uninstallation. One or more users with two-factor authentication active are using SMS, which is unsupported in the new login security module. Please either deactivate two-factor authentication for those users or change them to use an authenticator app prior to migration. Only alert me when that administrator signs in from a new device Only alert me when that user signs in from a new device Optimize Wordfence Firewall Optimize the Wordfence Firewall Optimize the Wordfence Firewall. Option Option Name Option contains a suspected malware URL: %s Option contains a suspected phishing site URL: %s Optional Other Tests Our recommendation for all websites. Provides the best detection capability in the industry. Our senior support engineers <strong>respond to Premium tickets within a few hours</strong> on average and have a direct line to our QA and development teams. Overdue Overridden permissions for a new file Overridden permissions for a new folder Overridden: %s Override Overwrite image edits when restoring the original PHP Update Needed for Country Blocking PHP error logs generated by your site, if enabled by your host. PHP version too old PHP version, important PHP extensions. PLUGIN VERSION: %s PM POST Body POST received with blank user-agent and referer Page Visited Page contains %d malware URL: Page contains %d malware URLs: Pages Not Found Paid Members Only Pakistan Palau Palestinian Territory Panama Papua New Guinea Paraguay Param Param Name Part of the Firewall configuration procedure for NGINX depends on creating a <code>%1$s</code> file in the root of your WordPress installation. This file can contain sensitive information and public access to it should be restricted. We have <a href="%2$s" target="_blank" rel="noreferrer noopener">instructions on our documentation site<span class="screen-reader-text"> (opens in new tab)</span></a> on what directives to put in your nginx.conf to fix this. Participate in the Real-Time Wordfence Security Network Passing public key to Wordfence Central. Password Strength Password recovery attempted Passwords containing a space followed by "wf" without quotes are not allowed. Pause live updates when window loses focus Payment Method Expired Payment Method Expiring Payment Method Invalid Payment Method Missing Performance Options Permanent Peru Philippines Phone (%s) Pick<span class="wf-hidden-xs"> from List</span> Pitcairn Please Complete Wordfence Installation Please choose a different password. The password you are using exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. <a href="%s">Learn More</a> Please choose a stronger password. Try including numbers, symbols, and a mix of upper and lowercase letters and remove common words. Please confirm the unsubscribe request for %s. Please download a backup of the following files before we make the necessary changes: Please enter a valid IP address or domain name for your whois lookup. Please enter a valid IP address to block. Please enter a valid email address. Please enter an email address to unsubscribe from alerts. If this email address exists on the alert email list, it will receive a confirmation link to unsubscribe. Please enter the licence to install. Please include your support ticket number or forum username. Please make a backup of this file before proceeding. If you need to restore this backup file, you can copy it to the following path from your site's root: Please make sure you separate your IP addresses with commas. The following allowlisted IP addresses are invalid: Please read this article in our FAQ to make an important change that will ensure your site stability during an update. Please specify a reason Please specify a valid IP address range in the form of "1.2.3.4 - 1.2.3.5" without quotes. Make sure the dash between the IP addresses in a normal dash (a minus sign on your keyboard) and not another character that looks like a dash. Please specify either an IP address range, Hostname or a web browser pattern to match. Please tell us where Wordfence should send you security alerts for your website: Please verify a login attempt for your account on <a href="%s"><strong>%s</strong></a>. Please wait 3 minutes and try again Plugin Abandoned Plugin File Plugin Name Plugin Name: Plugin Removed Plugin URL Plugin Upgrade Plugin Version: Plugin Vulnerable Plugin contains an unpatched security vulnerability. Plugin has unpatched security issues. Plugins Plugins can be removed from wordpress.org for various reasons. This can include benign issues like a plugin author discontinuing development or moving the plugin distribution to their own site, but some might also be due to security issues. In any case, future updates may or may not be available, so it is worth investigating the cause and deciding whether to temporarily or permanently replace or remove the plugin. Poland Port for a proxy server Portugal Post Post editing automatic saving interval Post revisions saved by WordPress Post title contains suspicious code Posted on Posts, Comments, & Files Premium Premium Feature Premium Feature: Premium Licence Conflict Premium Licence Expiring Premium Licence Installed Premium Protection Disabled Premium Protection Enabled Premium Support Prevent discovery of usernames through "/?author=N" scans, the oEmbed API, the WordPress REST API, and WordPress XML Sitemaps Prevent discovery of usernames through '/?author=N' scans, the oEmbed API, the WordPress REST API, and WordPress XML Sitemaps Prevent the use of passwords leaked in data breaches Prevent users registering "admin" username if it doesn't exist Prevent users registering 'admin' username if it doesn't exist Previous Previous scan terminated with an error. See below. Previous scan was stopped successfully. Process Owner Processing pending issues Product Updates Promotions Protect More Sites Protection Level Protection from known and emerging threats Public Files Publicly Accessible Config/Backup/Log Publicly accessible config, backup, or log file found: %s Publicly accessible quarantined file found: %s Puerto Rico Put Geographic Protection In Place With Country Blocking Qatar Quarantined File Query String Quick Quick Scan Complete. Scanned in %s. Ranges mixing IPv4 and IPv6 addresses are not supported. Rate Limiting Rate limiting based on type of request (human vs crawler) may be less accurate because this prevents loading the extra JavaScript used for that identification. Real-Time IP Blocklist Real-Time IP Blocklist: Real-time IP Blocklist blocks the most malicious IPs from accessing your site Reason Receive real-time Firewall and Scan engine rule updates for protection as threats emerge Recent Recent Activity Recently Blocked Attacks Recently Modified Files Recently removed wflogs files Recommended Settings Change Reconnect This Site Recovery Codes Redirected Redirected by Country Blocking bypass URL Redirecting back to Wordfence Central. Referer Referrer Referrer: Registered Users Regular traffic and security-related traffic will appear below. Reload Reminder: If you lose access to your authenticator device, you can use recovery codes to log in. If you have not saved a copy of your recovery codes, we recommend downloading them now. Remove Extended Protection Renew Licence Repair Repair All Repairable Files Repair Files Repair the Wordfence Firewall configuration. Repaired %1$d files but we encountered the following errors with other files: %2$s Repaired %d files successfully Repaired %d files successfully. No errors were encountered. Repaired some files with errors Repository URL Reputation Check Status Reputation Checks Request Time: Request received via unlock email link to unblock all IPs via disabling firewall rules. Request received via unlock email link to unblock all IPs. Request was generated at: %s Requesting max memory Requests Require 2FA for XML-RPC call authentication Require Cellphone Sign-in for all Administrators Required Required parameters not sent. Requires downloading from the server directly Rescheduled missing daily cron Rescheduled missing hourly cron Reset Licence Reset Score Statistics Response Restore Defaults Restore<span class="wf-hidden-xs"> Defaults</span> Results Found Results<span class="wf-hidden-xs"> Found</span> Resume Installation Resuming malware scan at rule %s. Retrieving access token using authorization grant. Retrying Failed. Return to scan results Return to the <a href="%s">Wordfence Admin Page</a> Return to the site home page Return value of is_multisite() Reunion Revert Revert back to legacy two-factor authentication? Revert to Legacy 2FA Review Review Payment Method Revoke Capabilities Role Romania Rule Added Rule Update Failed Rule updates delayed by 30 days Rules Rules Updated Rules updated in real-time Run Time Run Whois Run a Scan Run reCAPTCHA in test mode Russian Federation Rwanda SHOW ALL RULES SITE: %s SSL is not supported by your web server and is required to use this function. Please ask your hosting provider or site admin to install cURL with openSSL to use this feature. SUM_KILLED:A request was received to stop the previous scan from Wordfence Central. Saint Bartelemey Saint Helena Saint Kitts and Nevis Saint Lucia Saint Martin Saint Pierre and Miquelon Saint Vincent and the Grenadines Samoa San Marino Sao Tome and Principe Saturday Saudi Arabia Save Save Changes Save<span class="wf-hidden-xs wf-hidden-sm"> Changes</span> Save<span class="wfls-visible-sm-inline"> Changes</span> Scan Scan Complete. Scan Complete. Scanned %1$d files, %2$d plugins, %3$d themes, %4$d posts, %5$d comments and %6$d URLs in %7$s. Scan Engine Error: %s Scan Failed Scan Issues Scan Options Scan Options & Settings Scan Options and Scheduling Scan Progress and Activity Scan Scheduling Scan Status Scan Stopping Scan Time Limit Exceeded Scan Type Scan Type: Scan WordPress core, plugin, and theme options for known dangerous URLs and suspicious content Scan can't continue - stored data not found after a fork. Scan can't continue - stored data not found after a fork. Got type: %s Scan comments for known dangerous URLs and suspicious content Scan complete. Congratulations, no new problems found. Scan complete. You have %d new issue to fix. Scan complete. You have %d new issues to fix. Scan completed on %s Scan core files against repository versions for changes Scan engine received request. Scan file contents for backdoors, trojans and suspicious code Scan file contents for malicious URLs Scan files outside your WordPress installation Scan for misconfigured How does Wordfence get IPs Scan for out of date, abandoned, and vulnerable plugins, themes, and WordPress versions Scan for publicly accessible configuration, backup, or log files Scan for publicly accessible quarantined files Scan for signatures of known malicious files Scan for suspicious admin users created outside of WordPress Scan images, binary, and other files as if they were executable Scan interrupted. No problems found prior to stopping. Scan interrupted. Scanned %1$d files, %2$d plugins, %3$d themes, %4$d posts, %5$d comments and %6$d URLs in %7$s. Scan interrupted. You have %d new issue to fix. See below. Scan interrupted. You have %d new issues to fix. See below. Scan plugin files against repository versions for changes Scan posts for known dangerous URLs and suspicious content Scan process ended after forking. Scan result group or all results. Scan stop request received from Wordfence Central. Scan stop request received. Scan terminated with error: %s Scan the code below with your authenticator app to add this account. Some authenticator apps also allow you to type in the text version instead. Scan theme files against repository versions for changes Scan was stopped on administrator request. Scan wp-admin and wp-includes for files not bundled with WordPress Scanned comment with %s Scanned contents of %1$d additional files at %2$.2f per second Scanner Options Scanning additional paths is optional and is not always necessary. Scanning comment with %s Scanning comments for URLs on a domain blocklist Scanning comments with %d left to scan. Scanning contents: %1$s (Size: %2$s Mem: %3$s) Scanning contents: %1$s (Size: %2$s) Scanning file contents for URLs on a domain blocklist Scanning file contents for infections and vulnerabilities Scanning for admin users not created through WordPress Scanning for known malware files Scanning for old themes, plugins and core files Scanning for publicly accessible quarantined files Scanning for suspicious site options Scanning for unknown files in wp-admin and wp-includes Scanning for weak passwords Scanning posts for URLs on a domain blocklist Scanning posts with %d left to scan. Scanning to check available disk space Scanning: %1$s (Mem:%2$s) Scanning: %s Scans are not functional because SSL is unavailable. Schedule Wordfence Scans Schedule scans to run more frequently and at optimal times Scheduled Wordfence scan starting at %s Scheduled time for day %s hour %s is: %s Seconds since last hit: Security Alerts Security Event Security Only Security token has expired. Click <a href="%s">here</a> to return to the scan page. See below. See recent traffic See the details of these scan results on your site at: %s Select Countries to Block from List Select row ${idx} Select/deselect all Selected automatically when General Options have been customized for this website. Send Send Report by Email Send Test Activity Report Send Test Email Send Unlock Email Send a test activity report email: Send a test email from this WordPress server to an email address: Send code to a phone number: Senegal Separate multiple URLs with commas or place them on separate lines. Asterisks are wildcards, but use with care. If you see an attacker repeatedly probing your site for a known vulnerability you can use this to immediately block them. All URLs must start with a "/" without quotes and must be relative. e.g. /badURLone/, /bannedPage.html, /dont-access/this/URL/, /starts/with-* Separate multiple addresses with commas Serbia Serialized config writing Server State Server Time Server Time: Server Update Server time accuracy and applied offsets. Set up the way you want the firewall to protect your site including the web application firewall, brute force protection, rate limiting, and blocking. Set up the way you want the scan to monitor your site security including custom scan configurations and scheduling. Set: %s Setting Name Setting higher will reduce browser traffic but slow scan starts, live traffic & status updates. Setting up error handling environment Setting up scanRunning and starting scan Settings Severity: %s Seychelles Should be: Show Advanced Filters Show log Show more Show<span class="wf-hidden-xs"> Wordfence</span> Automatic<span class="wf-hidden-xs"> Blocks</span> Sierra Leone Signature is invalid. Signature updates delayed by 30 days Signatures updated in real-time Since you have High Sensitivity scanning enabled, there is a very high likelihood that your results will include false positives. If you think you have indeed been hacked, our team of security experts can help. Since you have the beta threat defense feed enabled, there is a high likelihood that your results could include false positives. If you think you have indeed been hacked, our team of security experts can help. Singapore Sint Maarten Site Except Login Site ID is invalid. Site is not connected to Wordfence Central. Skip Skipped Skipped Paths Skipping core scan Skipping file larger than max size: %s Skipping malware scan Skipping plugin scan Skipping scan of file contents for URLs on a domain blocklist Skipping scan of file contents for infections and vulnerabilities Skipping theme scan Skipping unknown core file scan Skipping unneeded hash: %s Slovakia Slovenia Solomon Islands Somalia Someone tried to recover the password for user with email address: %s Sorry but this feature is only available for paid customers. Sorry but your browser sent an invalid security token when trying to use this form. Sorry, but no data for that IP or domain was found. Sorry, you are not allowed to list users. Source Source IP: %s South Africa South Georgia and the South Sandwich Islands South Korea Space Remaining Spain Spam Spam Check Spamvertising Checks Specific config options to return. Specific config options to set. Specify a valid IP range Specify a valid hostname Specify an IP range, Hostname or Browser pattern Sri Lanka Standard Standard Scan Standard detection capability Standard detection capability, chance of false positives Start New Scan Start Your First Scan Start all scans remotely (Try this if your scans aren't starting and your site is publicly accessible) Start time Starting cron via proxy at URL %s Starting cron with normal ajax at URL %s Starting password strength check on %d user. Starting password strength check on %d users. Starting scan of file contents Status Status Updates Paused<br /><small>Click inside window to resume</small> Status of installed plugins. Status of installed themes. Stop Failed Stop Ignoring Stop Scan Stops Complex Attacks Stops Password Guessing Attacks Success deleting file Success removing option Success restoring file Success updating option Successful Successfully deleted admin Successfully revoked admin Sudan Sunday Super Administrator Support Support for free customers is available via our forums page on wordpress.org. The majority of requests <strong>receive an answer within a few days.</strong> Suriname Svalbard and Jan Mayen Swaziland Sweden Switch Switch to New 2FA Switzerland Syrian Arab Republic System configuration, memory test, send test email from this server. TOTP Time Source Tables missing (prefix %1$s, %2$s): %3$s Tables missing (prefix %1$s, %2$s): %s Taiwan Tajikistan Take Login Security to the next level with Two-Factor Authentication Tanzania, United Republic of Test Email Sent Test email failed to send Test email sent successfully Test result of scan start URL fetch: %s Test your WordPress host's available memory Testing accessibility of: %s Testing initial communication with Wordfence Central. Testing public key authentication with Wordfence Central. Testing that Wordfence Central is able to communicate with this site. Thailand Thanks for sending your diagnostic page over email That user has already been removed from the list. The 'How does Wordfence get IPs' option was successfully updated to the recommended value. The <code>auto_prepend_file</code> setting has been successfully removed from <code>.htaccess</code> and <code>.user.ini</code>. Once this change takes effect, Extended Protection Mode will be disabled. The Beta option can be turned off at the bottom of the Diagnostics page. The Full Path disclosure issue has been fixed The GDPR is a set of rules that provides more control over EU personal data. Defiant has updated its terms of service, privacy policies, and software, as well as made available standard contractual clauses to meet GDPR compliance. The GeoIP database that is required for country blocking has been updated to a new format. This new format requires sites to run PHP 5.4 or newer, and this site is on PHP %s. To ensure country blocking continues functioning, please update PHP. The IP address %s is allowlisted and can't be blocked. You can remove this IP from the allowlist on the Wordfence options page. The IP address %s is in a range of IP addresses that Wordfence does not block. The IP range may be internal or belong to a service safe to allow access for. The IP address you're trying to block belongs to Google. Your options are currently set to not block these crawlers. Change this in Wordfence options if you want to manually block Google. The IP you provided must be in dotted quad notation or use ranges with square brackets. e.g. 10.11.12.13 or 10.11.12.[1-50] The IP/range %s is invalid. The Plugin "%1$s" appears to be abandoned (updated %2$s). The Plugin "%1$s" appears to be abandoned (updated %2$s, tested to WP %3$s). The Plugin "%1$s" needs an upgrade (%2$s -> %3$s). The Plugin "%s" has been removed from wordpress.org. The Theme "%1$s" needs an upgrade (%2$s -> %3$s). The URL %1$s is on the malware list. More info available at <a href="http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=%2$s&client=googlechrome&hl=en-US" target="_blank" rel="noopener noreferrer">Google Safe Browsing diagnostic page<span class="screen-reader-text"> ( The URL %1$s is on the phishing list. More info available at <a href="http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=%2$s&client=googlechrome&hl=en-US" target="_blank" rel="noopener noreferrer">Google Safe Browsing diagnostic page<span class="screen-reader-text"> ( The URL %s is on the blocklist. The URL is: %s The URL/parameters in this table will not be tested by the firewall. They are typically added while the firewall is in Learning Mode or by an admin who identifies a particular action/request is a false positive. The WAF is currently in read-only mode and will not save any configuration changes. The WAF storage engine is currently set to mysqli, but Wordfence is unable to use the database. The WAF will fall back to using local file system storage instead. The Wordfence Dashboard provides valuable insights into the current state of your site's security. You'll find useful data summarized here as well as important status updates and notifications. The Wordfence Live Traffic feature has been disabled because you have %s active which is not compatible with Wordfence Live Traffic. The Wordfence Premium Licence in use on this site has been removed from your account. The Wordfence Web Application Firewall blocks known and emerging attacks using firewall rules. When you first install the WAF, it will be in learning mode. This allows Wordfence to learn about your site so that we can understand how to protect it and how to allow normal visitors through the firewall. We recommend you let Wordfence learn for a week before you enable the firewall. The Wordfence Web Application Firewall cannot run. The Wordfence Web Application Firewall has blocked %1$d attacks over the last %2$s. Below is a sample of these recent attacks: The Wordfence Web Application Firewall is a PHP-based, application-level firewall that filters out malicious requests to your site. It is designed to run at the beginning of WordPress' initialization to filter any attacks before plugins or themes can run any potentially vulnerable code. The Wordfence Web Application Firewall is in read-only mode. The Wordfence Web Application Firewall needs a configuration update. The Wordfence activation server returned an unexpected response. Please try again. The Wordfence administrative URL for this site is: %s The Wordfence firewall protects your sites from attackers The Wordfence licence could not be installed. The Wordfence licence provided has been installed. The Wordfence licence you're using does not match this site's address. Premium features are disabled. The Wordfence scanning servers are currently unavailable. This may be for maintenance or a temporary outage. If this still occurs in an hour, please contact support. [%s] The Wordfence server's response did not contain the expected elements. The admin user %s was successfully deleted. The changes have not yet taken effect. If you are using LiteSpeed or IIS as your web server or CGI/FastCGI interface, you may need to wait a few minutes for the changes to take effect since the configuration files are sometimes cached. You also may need to select a different server configuration in order to complete this step, but wait for a few minutes before trying. You can try refreshing this page. The code provided does not match the expected value. Please verify that the time on your authenticator device is correct and that this server's time is correct. The code you entered is invalid. Cellphone sign-in will not be enabled for this user until you enter a valid code. The configuration files are corrupt or inaccessible by the web server, which is preventing the WAF from functioning. Please verify the web server has permission to access the configuration files. You may also try to rebuild the configuration file by <a href="%1$s">clicking here</a>. It will automatically resume normal operation when it is fixed. <a class="wfhelp" target="_blank" rel="noopener noreferrer" href="%2$s"><span class="screen-reader-text"> ( The core files scan has not run because this version is not currently indexed by Wordfence. New WordPress versions may take up to a day to be indexed. The core files scan will not be run because this version of WordPress is not currently indexed by Wordfence. This may be due to using a prerelease version or because the servers are still indexing a new release. If you are using an official WordPress release, this issue will automatically dismiss once the version is indexed and another scan is run. The current scan looks like it has failed. Its last status update was <span id="wf-scan-failed-time-ago">%s</span> ago. You may continue to wait in case it resumes or stop and restart the scan. Some sites may need adjustments to run scans reliably. The disk has %s MB available The duration of the block is %s. The duration of the lockout is %s. The email address provided has been unsubscribed from future alert emails. The error returned was: The file %s was successfully deleted. The file %s was successfully hidden from public view. The file %s was successfully restored. The file <code>%s</code> was deleted successfully. The file <code>%s</code> was restored successfully. The following IPs you selected to ignore in live traffic reports are not valid: The following IPs/ranges you selected to trust as proxies are not valid: The following emails are invalid: The following users you selected to ignore in live traffic reports are not valid on this system: The given user already has two-factor authentication active. The given user does not exist. The grace period end time must be in the future. The issue type is: %s The key used to start a scan expired. The value is: %1$s and split is: %2$s and time is: %3$d The last rules update for the Wordfence Web Application Firewall was unsuccessful. The last successful update check was %s, so this site may be missing new rules added since then. The licence key entered is not in a valid format. It must contain only numbers and the letters A-F. The licence provided is already in use on another site. The licence you were using has been removed from your account. Please reach out to <a href="mailto:billing@wordfence.com">billing@wordfence.com</a> or create a Premium support case at <a href="https://support.wordfence.com/support/tickets" target="_blank">https://support.wordfence.com/support/tickets<span class="screen-reader-text"> (opens in new tab)</span></a> for more information. Our staff is happy to help. The licence you were using has been removed from your account. Please reach out to billing@wordfence.com or create a Premium support case at https://support.wordfence.com/support/tickets for more information. Our staff is happy to help. The main navigation no longer includes an <strong>Options</strong> link. Options are now accessed via the <strong>Options</strong> link on each feature's main page. Live Traffic is now located in the Tools section, and blocking is found under the Firewall. Shortcuts to add a <strong>Blocking</strong> link back to the main navigation are available under Blocking options. The malicious URL matched The matched text in this file is: %s The multisite blog with ID %d is listed on Google's Safe Browsing malware list. The multisite blog with ID %d is listed on Google's Safe Browsing phishing list. The multisite blog with ID %d is listed on a domain blocklist. The multisite blog with ID %d is listed on the Wordfence domain blocklist. The option "Scan files outside your WordPress installation" is off by default, which means %1$d path and its file(s) will not be scanned for malware or unauthorized changes. To continue skipping this path, you may ignore this issue. Or to start scanning it, enable the option and subsequent scans will include it. Some paths may not be necessary to scan, so this is optional. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> ( The option "Scan files outside your WordPress installation" is off by default, which means %1$d paths and their file(s) will not be scanned for malware or unauthorized changes. To continue skipping these paths, you may ignore this issue. Or to start scanning them, enable the option and subsequent scans will include them. Some paths may not be necessary to scan, so this is optional. <a href="%2$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> ( The option %s was successfully removed. The phone number you entered must start with a '+', then country code and then area code and number. For example, a number in the United States with country code '1' would look like this: +1-123-555-1234 The plugin will load as a regular plugin after WordPress has been loaded, and while it can block many malicious requests, some vulnerable plugins or WordPress itself may run vulnerable code before all plugins are loaded. The previous scan has failed. Some sites may need adjustments to run scans reliably. The previous scan has terminated because the time limit of %s was reached. This limit can be customized on the options page. The previous scan has terminated because we detected an update occurring during the scan. The reason is: "%s". The request has been allowlisted. Please try it again. The request was flagged as suspicious, and we need verification that you attempted to log in to allow it to proceed. This verification link <b>will be valid for 15 minutes</b> from the time it was sent. If you did not attempt this login, please change your password immediately. The required file has been created. You'll need to insert the following code into your <code>php.ini</code> to finish installation: The results of your scan may indicate that you could benefit from Wordfence Site Cleaning The scan has failed because we received an unexpected response from the Wordfence servers. This may be a temporary error, though some sites may need adjustments to run scans reliably. The scan has failed because we were unable to contact the Wordfence servers. Some sites may need adjustments to run scans reliably. The scan has failed to start. This is often because the site either cannot make outbound requests or is blocked from connecting to itself. The scan time limit of %1$s has been exceeded and the scan will be terminated. This limit can be customized on the options page. <a href="%2$s" target="_blank" rel="noopener noreferrer">Get More Information<span class="screen-reader-text"> ( The scan was terminated early because it reached the time limit for scans. If you would like to allow your scans to run longer, you can customize the limit on the options page: <a href="%1$s">%2$s</a> or read more about scan options to improve scan speed here: <a href="%3$s">%4$s</a> The signature on the request to start a scan is invalid. Please try again. The two panels below show a before and after view of a file on your system that has been modified. The left panel shows the original file before modification. The right panel shows your version of the file that has been modified. Use this view to determine if a file has been modified by an attacker or if this is a change that you or another trusted person made. If you are happy with the modifications you see here, then you should choose to ignore this file the next time Wordfence scans your system. The update was successful! The user does not exist. The user specified does not have two-factor authentication active. The username you specified does not exist. The username you specified is already enabled. The view %s does not exist or is not readable. The view could not be loaded. The whois service gives you a way to look up who owns an IP address or domain name that is visiting your website or is engaging in malicious activity on your website. Theme File Theme Name Theme Name: Theme URL Theme Upgrade Theme Version: Theme stylesheet folder override Theme template folder override Themes Themes & Plugins There are no differences between the original file and the file in the repository. There is already a scan running. There was an error connecting to the Wordfence scanning servers: %s There was an error deleting the file. There was an error restoring the file. There was an error starting the scan: %s. There was an error while sending the email. There was an error writing to your .htaccess file. There was an unknown error connecting to the Wordfence scanning servers. There was an unknown error starting the scan. These IPs (or CIDR ranges) will be ignored when determining the requesting IP via the X-Forwarded-For HTTP header. Enter one IP or CIDR range per line. These URL patterns will be excluded from the throttling rules used to limit crawlers. These instructions <b>will be valid for 30 minutes</b> from the time they were sent. These options are also available throughout the plugin pages, in the relevant sections. This page is provided for easier setup for experienced Wordfence users. These options let you choose which traffic to log and to ignore certain types of visitors, based on their level of access, usernames, IP address, or browser type. If you run a high-traffic website where it is not feasible to see your visitors in real-time, simply change the <strong>Traffic logging mode</strong> to "Security Only." This %1$s contains a URL that is a suspected phishing site that is currently listed on Google's list of known phishing sites. The URL is: %2$s This %1$s contains a URL that is currently listed on Wordfence's domain blocklist. The URL is: %2$s This %1$s contains a suspected malware URL listed on Google's list of malware sites. The URL is: %2$s - More info available at <a href="http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=%3$s&client=googlechrome&hl=en-US" target="_blank" rel="noopener noreferrer">Google Safe Browsing diagnostic page<span class="screen-reader-text"> ( This IP address is in a range of addresses that Wordfence does not block. The IP range may be internal or belong to a service that is always allowed. Allowlisting of external services can be disabled. <a href="%s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a> This WordPress core file has been modified and differs from the original file distributed with this version of WordPress. This additional info may help you diagnose the issue. The response headers we received were: This email was sent from your website "%1$s" by the Wordfence plugin at %2$s This email was sent from your website "%s" by the Wordfence plugin. This email was sent from your website <a href="%1$s">%1$s</a> and is a summary of security related activity that Wordfence monitors for the period %2$s to %3$s. This feature blocks all traffic from IPs with a high volume of recent malicious activity using Wordfence's real-time blocklist. This file appears to be an old version of the TimThumb script which makes your system vulnerable to attackers. Please upgrade the theme or plugin that uses this or remove it. This file appears to be installed or modified by a hacker to perform malicious activity. If you know about this file you can choose to ignore it to exclude it from future scans. This file belongs to plugin "%1$s" version "%2$s" and has been modified from the file that is distributed by WordPress.org for this version. Please use the link to see how the file has changed. If you have modified this file yourself, you can safely ignore this warning. If you see a lot of changed files in a plugin that have been made by the author, then try uninstalling and reinstalling the plugin to force an upgrade. Doing this is a workaround for plugin authors who don't manage their code correctly. <a href="%3$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> ( This file belongs to theme "%1$s" version "%2$s" and has been modified from the original distribution. It is common for site owners to modify their theme files, so if you have modified this file yourself you can safely ignore this warning. <a href="%3$s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> ( This file contains a URL that is a suspected phishing site that is currently listed on Google's list of known phishing sites. The URL is: This file contains a URL that is currently listed on Wordfence's domain blocklist. The URL is: This file contains a suspected malware URL listed on Google's list of malware sites. Wordfence decodes %1$s when scanning files so the URL may not be visible if you view this file. The URL is: %2$s - More info available at <a href="http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=%3$s&client=googlechrome&hl=en-US" target="_blank" rel="noopener noreferrer">Google Safe Browsing diagnostic page<span class="screen-reader-text"> (opens in new tab)</span></a>. This file is a PHP executable file and contains the word "eval" (without quotes) and the word "%s" (without quotes). The eval() function along with an encoding function like the one mentioned are commonly used by hackers to hide their code. If you know about this file you can choose to ignore it to exclude it from future scans. This file was detected because you have enabled HIGH SENSITIVITY scanning. This option is more aggressive than the usual scans, and may cause false positives. This file is in a WordPress core location but is from an older version of WordPress and not used with your current version. Hosting or permissions issues can cause these files to get left behind when WordPress is updated and they should be removed if possible. This file is in a WordPress core location but is not distributed with this version of WordPress. This scan often includes files left over from a previous WordPress version, but it may also find files added by another plugin, files added by your host, or malicious files added by an attacker. This file is in a WordPress core location but is not distributed with this version of WordPress. This scan often includes files left over from a previous WordPress version, but it may also find files added by another plugin, files added by your host, or malicious files added by an attacker. <a href="%s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> ( This file is suspected malware: %s This file may contain malicious executable code: This file was detected because you have enabled "Scan images, binary, and other files as if they were executable", which treats non-PHP files as if they were PHP code. This option is more aggressive than the usual scans, and may cause false positives. This file was detected because you have enabled HIGH SENSITIVITY scanning. This option is more aggressive than the usual scans, and may cause false positives. This file's signature matches a known malware file. The title of the malware is '%s'. Immediately inspect this file using the 'View' option below and consider deleting it from your server. This is a test email from %1$s.
The IP address that requested this was: %2$s This is where you can monitor the work Wordfence is doing to protect your site and also where you can manage the options to optimize the firewall's configuration. This is your Dashboard This is your main configuration file and cannot be deleted. It must be cleaned manually. This likely means that your hosting provider is blocking requests to noc1.wordfence.com or has set up a proxy that is not behaving itself. This list may include WordPress core/plugin/theme updates, error logs, cache files, and other normal changes. This option contains a URL that is a suspected phishing site that is currently listed on Google's list of known phishing sites. It may indicate your site is infected with malware. The URL is: %s This option contains a URL that is currently listed on Wordfence's domain blocklist. It may indicate your site is infected with malware. The URL is: %s This option contains a suspected malware URL listed on Google's list of malware sites. It may indicate your site is infected with malware. The URL is: %s This option enables all "Brute Force Protection" options, including strong password enforcement and invalid login throttling. You can modify individual options below. This page shows information that can be used for troubleshooting conflicts, configuration issues, or compatibility with other plugins, themes, or a host's environment. This post contains code that is suspicious. Please check the title of the post and confirm that the code in the title is not malicious. This site appears to be behind Cloudflare, so using the Cloudflare "CF-Connecting-IP" HTTP header will resolve to the correct IPs. This site appears to be behind a front-end proxy, so using the X-Forwarded-For HTTP header will resolve to the correct IPs. This site appears to be behind a front-end proxy, so using the X-Real-IP HTTP header will resolve to the correct IPs. This site is currently using PHP's built in REMOTE_ADDR. This site is currently using the Cloudflare "CF-Connecting-IP" HTTP header, which should only be used when the site is behind Cloudflare. This site is currently using the X-Forwarded-For HTTP header, which should only be used when the site is behind a front-end proxy that outputs this header. This site is currently using the X-Real-IP HTTP header, which should only be used when the site is behind a front-end proxy that outputs this header. This update includes a number of significant interface changes. We'd like to walk you through some of them, but you can bypass the tour for a section at any time by closing the dialogs. This user's email is the network admin email. It will need to be changed before deleting this user. This will be shown only once. Keep these codes somewhere safe. Throttled Throttling IP %1$s. %2$s Thursday Ticket Number/Forum Username: Time Time Limit Time limit that a scan can run in seconds Time: Timor-Leste Title To change your alert options for Wordfence, visit:
%s To clone one site's configuration to another, use the import/export tools below. To connect your site your site to Wordfence Central, use the link below: To continue using Defiant products and services including the Wordfence plugin, all customers must review and agree to the updated terms and privacy policies. These changes reflect our commitment to follow data protection best practices and regulations. The Wordfence interface will remain disabled until these terms are agreed to. To ensure uninterrupted Premium Wordfence protection on your site,
please renew your licence by visiting http://www.wordfence.com/ Sign in, go to your dashboard,
select the licence about to expire and click the button to renew that licence. To make your site as secure as possible, take a moment to optimize the Wordfence Web Application Firewall: To make your site as secure as possible, the Wordfence Web Application Firewall is designed to run via a PHP setting called <code>auto_prepend_file</code>, which ensures it runs before any potentially vulnerable code runs. To make your site as secure as possible, the Wordfence Web Application Firewall is designed to run via a PHP setting called <code>auto_prepend_file</code>, which ensures it runs before any potentially vulnerable code runs. This PHP setting is currently in use, and is including this file: To preserve the integrity of your website we are not running Wordfence auto-update.
You are running the LiteSpeed web server which has been known to cause a problem with Wordfence auto-update.
Please go to your website now and make a minor change to your .htaccess to fix this.
You can find out how to make this change at:
%s
Alternatively you can disable auto-update on your website to stop receiving this message and upgrade Wordfence manually.
To see current Wordfence alerts, visit:
%s To update your licence settings please visit http://www.wordfence.com/zz9/dashboard To: Today Toggle row ${idx} Togo Tokelau Token is invalid. Tonga Tool Options Tools Top %d Countries Blocked Top %d Failed Logins Top %d IPs Blocked Top 10 Countries Blocked Top 10 Failed Logins Top 10 IPs Blocked Top Countries by Number of Attacks - Last 7 Days Top IPs Blocked Top Topics and Questions Total Total Attacks Total Attacks Blocked: Total IPs Blocked Total Users Total disc space: %1$s -- Free disc space: %2$s Total of %d users left to process in password strength check. Total of %d users left to process in password strength check. Track each scan stage as Wordfence scans your entire site. Along the way you can see the activity log one line at a time or expand the activity log for a more detailed view. Clicking on scan results will reveal detailed scan findings. Traffic logging mode Traffic logging mode (Live Traffic) Traffic logging mode: All traffic Traffic logging mode: Security-related traffic only Treat Google like any other Crawler Trinidad and Tobago Trusted Proxies Try Again Tuesday Tunisia Turkey Turkmenistan Turks and Caicos Islands Turn Off Beta Signatures Turn On Tuvalu Twice Daily Two Factor Status Two-Factor Authentication Two-Factor Authentication Options Two-Factor Authentication Recovery Codes - %s (%s) Two-Factor Authentication Users Two-Factor Authentication, or 2FA, significantly improves login security for your website. Wordfence 2FA works with a number of TOTP-based apps like Google Authenticator, FreeOTP, and Authy. For a full list of tested TOTP-based apps, <a href="%s" target="_blank" rel="noopener noreferrer">click here</a>. Two-factor authentication is not currently enabled for this account type. To enable it, visit the Wordfence 2FA Settings page. Two-factor authentication is using legacy support, which enables SMS-based codes but is less compatible. An improved interface and use by non-administrators is available by activating the new login security module. Two-factor authentication now has its own IP allowlist. If necessary, you can allow specific IP addresses or ranges to skip 2FA when logging in. Type Type: Type: %s UA/Referrer/IP Range not allowed URL URL redirected to if the visitor tries to access a nonexistent blog URL to redirect blocked countries to URL to redirect blocked users to URL to the "wp-content" folder URL: URLs Checked UTC Uganda Ukraine Unable to Uninstall Unable to access available disk space information Unable to accurately detect IPs Unable to authenticate with Wordfence Central. Unable to automatically hide file Unable to remove code execution protections applied to the .htaccess file in the uploads directory. Please check your permissions on that file. Unable to save the .htaccess file needed to disable script execution in the uploads directory. Please check your permissions on that directory. Unable to validate the reCAPTCHA site key. Please check the key and try again. Unable to verify - table count too high Unavailable Unblock Unblock All Unblock IP Unblock range Unblocking Uninstall Wordfence Firewall Uninstallation Complete Uninstallation Failed Uninstallation from this site was successful! The Wordfence Firewall is still active because it is installed in another WordPress installation. Uninstallation was successful! United Arab Emirates United Kingdom United States United States Minor Outlying Islands Unknown Unknown (mixed plugin version) Unknown Administrator Unknown Core File Unknown Type Unknown WordPress core version: %s Unknown authentication mode. Unknown dashboard data set. Unknown file in WordPress core: %s Unknown file size. Unknown firewall mode. Unknown two-factor authentication mode. Unlimited Unlock email requested Unspecified Unsubscribe Requested Unsubscribe Successful Unsubscribe from Security Alerts Unsubscription Confirmation Sent Update Blocked Countries Update Blocked IPs Update Login Security Options Update Now Update Payment Method Update Wordfence automatically when a new version is released? Update includes security-related fixes. Update interval in seconds Update<span class="wf-hidden-xs"> Block</span> Updated Navigation Updates Needed Updates Needed (Plugin, Theme, or Core) Updating the .htaccess did not fix the issue. You may need to add <code>Options -Indexes</code> to your httpd.conf if using Apache, or find documentation on how to disable directory listing for your web server. Upgrade Upgrade Now to Access Premium Support Upgrade To Premium Upgrade to Premium Uruguay Use PHP's built in REMOTE_ADDR and don't use anything else. Very secure if this is compatible with your site. Use Recommended Value Use authenticator app Use low resource scanning (reduces server load by lengthening the scan duration) Use one of these %d codes to log in if you lose access to your authenticator device. Codes are %d characters long plus optional spaces. Each one may be used only once. Use one of these %s codes to log in if you are unable to access your phone. Codes are 16 characters long, plus optional spaces. Each one may be used only once. Use one of these %s codes to log in if you lose access to your authenticator device. Codes are 16 characters long, plus optional spaces. Each one may be used only once. Use preferred start time Use the Cloudflare "CF-Connecting-IP" HTTP header to get a visitor IP. Only use if you're using Cloudflare. Use the X-Forwarded-For HTTP header. Only use if you have a front-end proxy or spoofing may result. Use the X-Real-IP HTTP header. Only use if you have a front-end proxy or spoofing may result. Use the buttons below to migrate to the new two-factor authentication system or switch without migration. Migration will copy all existing authenticator-based user activations over to the new system while switching will use only users already set up in the new system. Existing SMS-based two-factor authentication activations must be disabled prior to migration. Use the most secure method to get visitor IP addresses. Prevents spoofing and works with most sites. Used Used an invalid username '%s' to try to sign in Used by banks, government agencies, and military worldwide, two-factor authentication is one of the most secure forms of remote system authentication available. With it enabled, an attacker needs to know your username, password, <em>and</em> have control of your phone to log into your site. Upgrade to Premium now to enable this powerful feature. User User "%1$s" with "%2$s" access has an easy password. User "%s" with 'subscriber' access has a very easy password. User & Option Audit User Agent User Email User ID User IP: %s
User Summary User defined scan pattern User hostname: %s
User location: User locked out from signing in User login User login blocked for insecure password User: Username Username: Users Checked Using MySQLi directly. Using cached core hashes Using cached malware prefixes Using low resource scanning Uzbekistan Validation error: 'fields' parameter is empty or not an array. Value Vanuatu Venezuela Verified Google crawlers will not be rate-limited Verifying start request signature. Version %s Vietnam View View Additional Detail View Customization View Differences View Documentation View File View Option View Recent Traffic View Updates View every issue: View<span class="wf-hidden-xs"> full</span> log Virgin Islands, British Virgin Islands, U.S. Visit Wordfence Central Vulnerability Information Vulnerability Scan Vulnerability Status WAF Currently in Learning Mode WAF File Permissions WAF Status WAF auto prepend active WAF log path WAF subdirectory installation WHOIS LOOKUP WORDPRESS VERSION: %s WP cron status Waiting for Changes Waiting for it to take effect. This may take up to %s. Wallis and Futuna Warning We are about to change your <em>.htaccess</em> file. Please make a backup of this file before proceeding. We are excited to announce the release of a completely rebuilt two-factor authentication (2FA) feature within Wordfence. 2FA is an important layer of security that protects you from password guessing and credential stuffing attacks. Previously a Premium-only feature, it is now available for sites running the free version of Wordfence. You are now able to enable 2FA for any role, we’ve added a number of important security features, and we’ve significantly improved the admin interface. We can't modify your .htaccess file for you because: %s We cannot read $_SERVER[%s] We could not delete any of the files you selected. We encountered the following errors: %s We could not fetch a core WordPress file from the Wordfence API. We could not find that issue in our database. We could not find that user in the database. We could not find the user you are trying to activate. They may have been removed from the list of Cellphone Sign-in users. Please reload this page. We could not find your .htaccess file to modify it. We could not generate a verification code. We could not get the contents of the original file to do a comparison. We could not get the original file to do a repair. We could not open the requested file for reading. The error was: %s We could not repair any of the files you selected. We encountered the following errors: %s We could not retrieve the original file of %s to do a repair. We could not write to %1$s. (%2$d bytes written) You may not have permission to modify files on your WordPress server. We could not write to %1$s. The error was: %2$s We could not write to that file. You may not have permission to modify files on your WordPress server. We didn't delete anything and no errors were found. We didn't repair anything and no errors were found. We do not use this email address for any other purpose unless you opt-in to receive other mailings. You can turn off alerts in the options. We encountered a problem We encountered an error trying load more data. We failed to send a termination request. We found your .htaccess file but could not open it for writing: %s We received a data structure that is not the expected array when contacting the Wordfence scanning servers and calling the '%s' function. We received a request to email "%s" instructions to unlock their access. If that is the email address of a site administrator or someone on the Wordfence alert list, they have been emailed instructions on how to regain access to this system. The instructions we sent will expire 30 minutes from now. We received an empty data response from the Wordfence scanning servers when calling the '%s' function. We received an error while trying to activate the licence with the Wordfence servers: We successfully exported your site options. To import your site options on another site, copy and paste the token below into the import text box on the destination site. Keep this token secret — it is like a password. If anyone else discovers the token it will allow them to import your options excluding your licence. We successfully imported the site options. We welcome your feedback and comments at <a href="mailto:feedback@wordfence.com">feedback@wordfence.com</a>. For a deeper dive on all of the changes, <a href="https://www.wordfence.com/blog/2018/01/introducing-wordfence-7/" target="_blank" rel="noopener noreferrer">click here<span class="screen-reader-text"> (opens in new tab)</span></a>. We were unable to create the <code>wordfence-waf.php</code> file in the root of the WordPress installation. It's possible WordPress cannot write to the <code>wordfence-waf.php</code> file because of file permissions. Please verify the permissions are correct and retry the installation. We were unable to generate the user list for your password check. We were unable to make changes to the %1$s file. It's possible WordPress cannot write to the %1$s file because of file permissions. Please verify the permissions are correct and retry the installation. We were unable to make changes to the .htaccess file. It's possible WordPress cannot write to the .htaccess file because of file permissions, which may have been set by another security plugin, or you may have set them manually. Please verify the permissions allow the web server to write to the file, and retry the installation. We were unable to remove the <code>wordfence-waf.php</code> file in the root of the WordPress installation. It's possible WordPress cannot remove the <code>wordfence-waf.php</code> file because of file permissions. Please verify the permissions are correct and retry the removal. We were unable to write to %s which the WAF uses for storage. Please update permissions on the parent directory so the web server can write to it. We've preselected your server configuration based on our tests, but if you know your web server's configuration, please select it now. We've preselected your server configuration based on our tests, but if you know your web server's configuration, please select it now. You can also choose "Manual Configuration" for alternate installation details. Web Application Firewall Web Application Firewall (WAF) Web Application Firewall Allowlisted URLs Web Application Firewall Protection Level Web Application Firewall Rules Web Application Firewall Status Web Application Firewall is disabled Web server exposes the document root Wednesday Week Weekdays Weekends Western Sahara What to do when we block someone What to do when we block someone visiting from a blocked country When you first install the Wordfence Web Application Firewall, it will be in learning mode. This allows Wordfence to learn about your site so that we can understand how to protect it and how to allow normal visitors through the firewall. We recommend you let Wordfence learn for a week before you enable the firewall. <a href="%s" target="_blank" rel="noopener noreferrer">Learn More<span class="screen-reader-text"> (opens in new tab)</span></a> Where to email alerts While in test mode, reCAPTCHA will score login and registration requests but not actually block them. The scores will be recorded and can be used to select a human/bot threshold value. Whois Lookup Windows (IIS) With Two-Factor Authentication enabled, an attacker needs to know your username, password <em>and</em> have control of your phone to log in to your site. We recommend you enable Two-Factor Authentication for all Administrator level accounts. WordPress "drop-in" plugins that are active. WordPress "mu-plugins" that are always active, including those provided by hosts. WordPress (v%s) WordPress Configuration File WordPress Core File WordPress Plugins WordPress Settings WordPress Time Zone WordPress admin cookie path WordPress base path WordPress cookie domain WordPress cookie path WordPress core file modified: %s WordPress debug mode WordPress error display override WordPress error logging override WordPress memory limit WordPress plugins cookie path WordPress query debug mode WordPress script debug mode WordPress site cookie path WordPress version %s is now available. Please upgrade immediately to get the latest security updates from WordPress. WordPress version and internal settings/constants. WordPress version too old Wordfence Wordfence - Securing your WordPress Website Wordfence 2FA Active Wordfence 2FA is active. Wordfence 2FA is inactive. Wordfence Activity Log Wordfence Central Wordfence Central Installation Process Wordfence Central Status Wordfence Central allows you to manage Wordfence on multiple sites from one location. It makes security monitoring and configuring Wordfence easier. Wordfence Central secret key has not been created yet. Wordfence Central site ID has not been created yet. Wordfence Dashboard Wordfence Deactivated Wordfence Firewall & Premium Enabled Wordfence Firewall Activated Wordfence Firewall Deactivated Wordfence Firewall blocked a background request to WordPress for the URL %s. If this occurred as a result of an intentional action, you may consider allowlisting the request to allow it in the future. Wordfence Full Activity Log Wordfence Global Options Wordfence Licence Wordfence Licence Installation Failed Wordfence Licence Installation Successful Wordfence Live Activity: Wordfence Live Traffic shows you what is happening on your site in real-time, including user logins, hack attempts, and requests that were blocked by the Wordfence Firewall. You can choose to log security-related traffic only or all traffic. Traffic is logged directly on the server, which means it includes visits that don't execute JavaScript. Google and other JavaScript-based analytics packages typically only show visits from browsers that are operated by a human, while Live Traffic can show visits from crawlers like Google and Bing. Wordfence Login Security Wordfence Login Security Installed Wordfence Network Wordfence Network Time Wordfence Network Time Offset Wordfence Protection Activated Wordfence Scan & Premium Enabled Wordfence Scan Deactivated Wordfence Scan Enabled Wordfence Security Wordfence Security - Anti-virus, Firewall and Malware Scan Wordfence System Info Wordfence Table Check Wordfence Test Email Wordfence Upgrade not run. Please modify your .htaccess Wordfence Upgraded to version %s Wordfence Version Wordfence WAF Deactivated Wordfence activity for %1$s on %2$s Wordfence activity from <br><strong>%1$s</strong> to <strong>%2$s</strong> Wordfence activity in the past %s Wordfence could not find a saved cron key to start the scan so assuming it started and exiting. Wordfence could not find your .htaccess file. Wordfence could not get the attack signature patterns from the scanning server. Wordfence could not read the contents of your base WordPress directory. This usually indicates your permissions are so strict that your web server can't read your WordPress directory. Wordfence could not register with the Wordfence scanning servers when it activated. Wordfence could not start a scan because the cron key does not match the saved key. Saved: %1$s Sent: %2$s Current unexploded: %3$s Wordfence country blocking is designed to stop an attack, prevent content theft, or end malicious activity that originates from a geographic region in less than 1/300,000th of a second. Blocking countries who are regularly creating failed logins, a large number of page not found errors, and are clearly engaged in malicious activity is an effective way to protect your site during an attack. Wordfence encountered an internal error executing that request. Wordfence error: No encryption key found! Wordfence file scanner detected a possible infinite loop. Exiting on file: %s Wordfence found the following new issues on "%1$s" (%2$d existing issue was also found again). Wordfence found the following new issues on "%1$s" (%2$d existing issues were also found again). Wordfence found the following new issues on "%1$s". Wordfence generated an error on activation. The output we received during activation was: Wordfence has blocked IP address %s. Wordfence installation is incomplete Wordfence is a security plugin installed on over 4 million WordPress sites. The owner of this site is using Wordfence to manage access to their site. Wordfence is working... Wordfence lets you take control of protecting your site with powerful blocking features. Block traffic based on IP, IP range, hostname, browser, or referrer. Country blocking is available for Premium customers. Wordfence now includes the option to enable Google reCaptcha v3 on your WordPress login and registration pages. This adds a powerful new layer of protection against password guessing and credential stuffing attacks from bots without slowing down real users. Wordfence protects your site from password-guessing attacks by locking out attackers and helping you avoid weak passwords. Wordfence received malformed attack signature patterns from the scanning server. Wordfence scan failed because of licence site URL conflict Wordfence scan script accessed directly, or WF did not receive a cronkey. Wordfence scan starting at %s from Wordfence Central Wordfence two-factor authentication is currently active on the account <strong>%s</strong>. You may deactivate it by clicking the button below. Wordfence two-factor authentication is currently active on your account. You may deactivate it by clicking the button below. Wordfence used %1$s of memory for scan. Server peak memory usage was: %2$s Wordfence was unable to validate a test request to your website. This can happen if your website is behind a proxy that does not use one of the standard ways to convey the IP of the request or it is unreachable publicly. IP blocking and live traffic information may not be accurate. <a href="%s" target="_blank" rel="noopener noreferrer">Get More Information<span class="screen-reader-text"> ( Wordfence's Web Application Firewall has been unexpectedly disabled. If you see a notice at the top of the Wordfence admin pages that says "The Wordfence Web Application Firewall cannot run," click the link in that message to rebuild the configuration. If this does not work, you may need to fix file permissions. <a href="%s" target="_blank" rel="noopener noreferrer">More Details<span class="screen-reader-text"> ( Wordfence's terms of service and privacy policy have changed Wordfence: All recent hits for IP address %s Wordfence: File Viewer Wordfence: Viewing File Differences Would you also like to join our WordPress security mailing list to receive WordPress security alerts and Wordfence news? XML-RPC authentication is disabled. Jetpack is currently active and requires XML-RPC authentication to work correctly. <a href="%s">Manage Settings</a> Yemen Yes Yes Please Yes, enable auto-update. You appear to have logged out or you are not an admin. Please sign-out and sign-in again. You are currently running the WAF from another WordPress installation. These rules can be disabled or enabled once you configure the firewall to run correctly on this site. You are currently running the WAF from another WordPress installation. This option can be changed once you configure the firewall to run correctly on this site. You are currently running the Wordfence Web Application Firewall from another WordPress installation. Please <a href="%s">click here</a> to configure the Firewall to run correctly on this site. You are currently running the Wordfence Web Application Firewall from another WordPress installation. Please configure the firewall to run correctly on this site. You are running PHP version %1$s that is not supported by Wordfence %2$s. Wordfence features will not be available until PHP has been upgraded. We recommend using PHP version 7.4, but Wordfence will run on PHP version 5.3 at a minimum. You are temporarily locked out You are using Nginx as your web server. You'll need to disable autoindexing in your nginx.conf. See the <a target='_blank' rel='noopener noreferrer' href='https://nginx.org/en/docs/http/ngx_http_autoindex_module.html'>Nginx docs for more info</a> on how to do this. You are using an Nginx web server and using a FastCGI processor like PHP5-FPM. You will need to manually delete or hide those files. You are using an Nginx web server and using a FastCGI processor like PHP5-FPM. You will need to manually modify your php.ini to disable <em>display_error</em> You can also read the documentation to learn about Wordfence's blocking tools, or visit wordfence.com to learn more about Wordfence. You can proceed with the installation and we will include this from within our <code>wordfence-waf.php</code> file which should maintain compatibility with your site, or you can opt to override the existing PHP setting. You can try to fix this by deactivating Wordfence and then activating it again, so Wordfence will retry registering for you. If you keep seeing this error, it usually means your WordPress server can't connect to our scanning servers, or your wfConfig database table cannot be created to save the key. You can try asking your host to allow your server to connect to noc1.wordfence.com or check the wfConfig database table and database privileges. You can't block your own IP address. You do not currently have two-factor authentication active on your account, which will be required beginning %s.
Configure 2FA: %s You do not currently have two-factor authentication active on your account, which will be required beginning %s. <a href="%s">Configure 2FA</a> You do not have permission to activate 2FA. You do not have permission to activate the given user. You do not have permission to change options. You do not have permission to deactivate 2FA. You do not have permission to deactivate the given user. You do not have permission to generate new recovery codes for the given user. You do not have permission to generate new recovery codes. You do not have permission to reset reCAPTCHA statistics. You do not have permission to send notifications. You don't have permission to repair %s. You need to either fix the file manually using FTP or change the file permissions and ownership so that your web server has write access to repair the file. You don't have permission to repair .htaccess. You need to either fix the file manually using FTP or change the file permissions and ownership so that your web server has write access to repair the file. You forgot to include a reason you're blocking this IP range. We ask you to include this for your own record keeping. You have %d new Wordfence notification. You have %d new Wordfence notifications. You have %s disk space remaining You have been temporarily locked out of this system. This means that you will not be able to log in for a while. You have just installed the Wordfence Login Security plugin. It contains a subset of the functionality found in the full Wordfence plugin: Two-factor Authentication, XML-RPC Protection and Login Page CAPTCHA. You have successfully installed Wordfence %s You have successfully updated to Wordfence %s You have unsaved changes to your options. If you leave this page, those changes will be lost. You have used this form too much. Please wait 3 minutes and try again. You may bypass this verification step permanently by enabling two-factor authentication on your account. You may wait for the next automatic attempt at %1$s or try to <a href="%2$s">Manually Update</a> by clicking the "Manually Refresh Rules" button below the Rules list. You may wait for the next automatic attempt at %s or log into the parent site to manually update by clicking the "Manually Refresh Rules" button below the Rules list. You may wait for the next automatic attempt or log into the parent site to manually update by clicking the "Manually Refresh Rules" button below the Rules list. You may wait for the next automatic attempt or try to <a href="%s">Manually Update</a> by clicking the "Manually Refresh Rules" button below the Rules list. You need to upgrade "%s" to the newest version to ensure you have any security fixes the developer has released. You only have %s of your disk space remaining. Please free up disk space or your website may stop serving requests. You'll find this icon throughout the plugin. Clicking it will show you the options and features for each section of Wordfence. From the dashboard, you can find the <strong>Global Options</strong> for Wordfence such as alerts, automatic updates, and managing your site's Premium Licence. You've chosen to block the network that <span style="color: #F00;">%s</span> is part of. We've marked the networks we found that this IP address belongs to in red below. Make sure you read all the WHOIS information so that you see all networks this IP belongs to. We recommend blocking the network with the lowest number of addresses. You may find this is listed at the end as part of the 'rWHOIS' query which contacts the local WHOIS server that is run by the network administrator. Your 'How does Wordfence get IPs' setting is misconfigured. Your .htaccess has been updated successfully. Please verify your site is functioning normally. Your IP with this setting: Your Premium Wordfence Licence expires in 1 day. Your Premium Wordfence Licence expires in 2 days. Your Premium Wordfence Licence expires in less than 2 weeks. Your Premium Wordfence Licence expires in less than a week. Your Premium Wordfence Licence is set to auto-renew in 10 days. Your WordPress version is out of date Your Wordfence Licence Your Wordfence Premium Licence has Expired! Your Wordfence activity log was sent to %s Your Wordfence installation has been upgraded to version %s Your access to this service has been limited. (HTTP response code 503) Your access to this service has been temporarily limited. Please try again in a few minutes. (HTTP response code 503) Your access to this site has been limited Your access to this site has been limited by the site owner Your access to this site has been temporarily limited by the site owner Your browser sent an invalid security token to Wordfence. Please try reloading this page or signing out and in again. Your browser sent an invalid security token. Please try reloading this page. Your computer's time: Your computer's time: Your options have been saved, but you left your licence key blank, so we tried to get you a free licence key from the Wordfence servers. There was a problem fetching the free key: Your options have been saved. However we noticed you changed your licence key, and we tried to verify it with the Wordfence servers but received an error: Your options have been saved. However we tried to verify your licence key with the Wordfence servers and received an error: Your request was received Your rules have been updated successfully. Your rules have been updated successfully. You are currently using the free version of Wordfence. Upgrade to Wordfence premium to have your rules updated automatically as new threats emerge. <a href="https://www.wordfence.com/wafUpdateRules1/wordfence-signup/">Click here to purchase a premium licence</a>. <em>Note: Your rules will still update every 30 days as a free user.</em> Your site is listed on Google's Safe Browsing malware list. Your site is listed on Google's Safe Browsing phishing list. Your site is listed on a domain blocklist. Your site is listed on the Wordfence domain blocklist. Your site is now using the legacy two-factor authentication system. Your site is now using the new login security module and two-factor authentication. Before logging out, we recommend testing your login in a different browser or a private/incognito window. If any plugins or your theme cause conflicts with logging in, you can revert to the old 2FA method. Your site is using a PHP version (%1$s) that is no longer supported by Wordfence and needs to be updated. We recommend using the newest version of PHP available but will currently support PHP versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. Your site is using a PHP version (%1$s) that will no longer be supported by Wordfence in an upcoming release and needs to be updated. We recommend using the newest version of PHP available but will currently support PHP versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. Your site is using a WordPress version (%1$s) that is no longer supported by Wordfence and needs to be updated. We recommend using the newest version of WordPress but will currently support WordPress versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. Your site is using a WordPress version (%1$s) that will no longer be supported by Wordfence in an upcoming release and needs to be updated. We recommend using the newest version of WordPress but will currently support WordPress versions as old as %2$s. Version checks are run regularly, so if you have successfully updated, you can dismiss this notice or check that the update has taken effect later. Your test email was sent to the requested email address. The result we received from the WordPress wp_mail() function was: %s<br /><br />A 'True' result means WordPress thinks the mail was sent without errors. A 'False' result means that WordPress encountered an error sending your mail. Note that it's possible to get a 'True' response with an error elsewhere in your mail system that may cause emails to not be delivered. Zambia Zimbabwe [invalid] [none] `runInstall` called with previous version = %s a moment ago allowlisted and and %d additional attacks and %d more and set a cookie that will bypass all country blocking. block it blocked access via country blocking blocked access via country blocking and redirected to URL (%s) blocked by firewall blocked by firewall for %s blocked by real-time IP blocklist blocked by the Wordfence Security Network blocked for %s cURL Features Code cURL Host cURL SSL Version cURL Support Protocols cURL libz Version click here for help day days e.g., *.amazonaws.com or *.linode.com e.g., *badRobot*, *MSIE*, or *browserSuffix e.g., *badwebsite.example.com* e.g., 192.168.200.200 - 192.168.200.220 or 192.168.200.0/24 getHits got invalid hitType: %s getMaxExecutionTime() returning config value: %s getMaxExecutionTime() returning default of: 15 getMaxExecutionTime() returning half ini value: %d hour hours http://www.wordfence.com/ https://www.wordfence.com/help/dashboard/#dashboard-status https://www.wordfence.com/help/firewall/#firewall-status https://www.wordfence.com/help/scan/#scan-status in %d days in 1 day ini value of %1$d is higher than value for WORDFENCE_SCAN_MAX_INI_EXECUTION_TIME (%2$d), reducing less than 1 second less than a minute locked out from logging in lowercase minute minutes month months more than %s or reCAPTCHA Score History reCAPTCHA human/bot threshold score reCAPTCHA test mode is enabled. While enabled, login and registration requests will be checked for their score but will not be blocked if the score is below the minimum score. <a href="%s">Manage Settings</a> reCAPTCHA v3 Secret reCAPTCHA v3 Site Key reCAPTCHA v3 does not make users solve puzzles or click a checkbox like previous versions. The only visible part is the reCAPTCHA logo. If a visitor's browser fails the CAPTCHA, Wordfence will send an email to the user's address with a link they can click to verify that they are a user of your site. You can read further details <a href="%s" target="_blank" rel="noopener noreferrer">in our documentation</a>. redirected to bypass URL regular case second seconds then then redirect that user to then set a cookie that will bypass country blocking in future in case that user hits the site from a blocked country. throttle it to manually update it. today tomorrow visit the options page wfConfig::set() got an array as second param with key: %1$s and value: %2$s wordfence-waf.php path wp_mail from address is incomplete, attempting to fix wp_remote_post() test back to this server failed! Response was: wp_remote_post() test to noc1.wordfence.com failed! Response was: year years