BulletProof Security Forum

VisitorLens and VisitorLens Pro are WordPress visitor analytics plugins. Etsy Shop is a WordPress plugin. Both plugins are used in eCommerce site types.

Etsy does not use VisitorLens, nor does VisitorLens integrate with Etsy shops. VisitorLens is a third-party visitor analytics and tracking tool built specifically for self-hosted websites and…[Read more]

I don’t think BPS Pro is blocking EMCP, but to eliminate BPS Pro do the troubleshooting steps below. If the troubleshooting steps below work then let me know that. If the troubleshooting steps make no difference then most likely something is not configured correctly or something else the site has installed is causing the problem. Delete all cache:…[Read more]

Many thanks. 👍🏻

Done. I sent you an email.

Yeah BPS Pro has been dependable and reliable for over a decade on all of my sites and other people’s sites. I still regularly keep an eye on security threats going on in the world. BPS Pro is completed in my opinion, but if any new security threats pop up or new Dev work is needed in BPS Pro for changes in PHP, Apache, etc. then I will do that…[Read more]

Yeah, I looked up the guy and saw on his LinkedIn page that he is definitely trying to make a name for himself.

I am sorry about all the troubles and I really hope you don’t discontinue work on BPS Pro, but I understand the reasoning. I have been using it for many years and have only good things to say about it.

Keep up the great work.

Scott

Yeah the “security vulnerability” stuff with WP is annoying. Dealt with it for years and a couple of the security vulnerabilities over the last 15+ years that were reported to me were legit. The rest were ridiculous claims. The guy who reported this to WP is trying to make a name for himself and WP handles anything that is labeled as a security…[Read more]

OK, thanks.

Hopefully something can be worked out with all involved to get the vuln downgraded so everyone running Jetpack doesn’t have an eye-catching “Threat Found!” pinned to the top of their Admin Dashboard.

People have been posting their BPS Security Log entries on this forum site and WordPress.org for years to get help. The only thing that I can think of that you would not want to display is a visitor’s IP address if you are worried about GDPR compliance.

You don’t have these Apache modules loaded, which is odd:  mod_access_compat, mod_authz_core and mod_authz_host. Do you have your own VPS server? Honestly there is nothing in the BPS Security Log that exposes anything important. You can turn on the GDPR Compliance option setting on the Setup Wizard Options page if you are worried about GDPR…[Read more]

Server Type: Apache/2.4.66 (Ubuntu)
Operating System: Linux
WP Filesystem API Method: direct
Server API: fpm-fcgi CGI Host Server Type
Apache Modules|Directives|Backward Compatibility(Yes|No)|IfModule(Yes|No):
200: mod_access_compat is not Loaded|IfModule: Yes
200: mod_authz_core is not Loaded|IfModule: Yes
200: mod_authz_host is not…[Read more]

Check the BPS System Info page and post this info about your server:

Server Type: Apache
Operating System: Linux
WP Filesystem API Method: direct
Server API: litespeed CGI Host Server Type
Apache Modules|Directives|Backward Compatibility(Yes|No)|IfModule(Yes|No):
403: mod_access_compat is Loaded|Order, Allow, Deny directives are…[Read more]

Thanks for the response.

However, I use Apache and I can see the error log text at <mydomain>/wp-content/bps-backup/logs/http_error_log.txt

Is there something I can do besides simply turning off threat info that I find useful?

The security vulnerability that was reported to me claimed that the BPS Security Log text file here > /wp-content/bps-backup/logs/http_error_log.txt > could be viewed using a Browser, which could be true if you have NGINX setup as a reverse proxy in front of Apache.

Check your website using your full domain URL and add this path >…[Read more]

Plugin conflicts are often caused by two plugins modifying the same files, rules, or WordPress functions. I’d start by checking the BPS Security Log to identify exactly what is being blocked or quarantined. If the files belong to a legitimate plugin such as Wordfence, verify them before restoring them and add the appropriate exclusion rule where…[Read more]

When a form plugin freezes and breaks the page layout, the cause is usually a JavaScript conflict rather than the form plugin itself. A few things worth checking, in order:

1. Temporarily switch to a default WordPress theme (e.g. Twenty Twenty-Four). Page-builder themes are a common cause of misplaced form boxes.
2. Deactivate all other plugins,…[Read more]