Topic: Lots of trouble with elementor | BulletProof Security Forum

Lots of trouble with elementor

This topic has 1 reply, 2 voices, and was last updated 2 weeks, 2 days ago by AITpro Admin.

Viewing 2 posts - 1 through 2 (of 2 total)

Author

Posts

April 1, 2025 at 7:22 am #44889

Participant

Hi I hate to keep asking for support but I use Elemntor and I love your plugin! A brand new site, I cannot edit in Elementor.

I just ran setup again in an attempt be be able to edit the site without removing BPS and this is what was created in Firewall. It just seems too complex to keep up with, and I have to use Elementor, any advice?

/elementor/assets/js/(.*).js(.*), /elementor-pro/assets/js/frontend.min.js, /elementor-pro/assets/js/webpack-pro.runtime.min.js, /wordpress-seo/js/dist/admin-global.js, /better-wp-security/dist/5896.js, /better-wp-security/dist/runtime.js, /better-wp-security/dist/vendors/routing.js, /better-wp-security/dist/3627.js, /better-wp-security/dist/6179.js, /better-wp-security/dist/976.js, /better-wp-security/dist/packages/data.js, /better-wp-security/dist/1511.js, /better-wp-security/dist/5307.js, /better-wp-security/dist/761.js, /better-wp-security/dist/567.js, /better-wp-security/dist/2939.js, /better-wp-security/dist/5257.js, /better-wp-security/dist/core/solid-welcome.js, /better-wp-security/dist/1930.js, /better-wp-security/dist/core/admin-notices-api.js, /better-wp-security/dist/core/admin-notices.js, /wordpress-seo/js/dist/externals/helpers.js, /envato-elements/assets/main.js, /elementor/assets/lib/dialog/dialog.min.js, /elementor-pro/assets/js/admin.min.js, /wordpress-seo/js/dist/externals/propTypes.js, /wp-super-cache/inc/delete-cache-button.js, /wordpress-seo/js/dist/externals/styledComponents.js, /wordpress-seo/js/dist/react-select.js, /elementor/assets/lib/backbone/backbone.radio.min.js, /elementor/assets/lib/backbone/backbone.marionette.min.js, /better-wp-security/vendor-prod/stellarwp/telemetry/src/resources/js/scripts.js, /wordpress-seo/js/dist/externals/componentsNew.js, /wordpress-seo/js/dist/wincher-dashboard-widget.js, /wordpress-seo/js/dist/externals/styleGuide.js, /envato-elements/assets/elements_deep.js, /wordpress-seo/js/dist/edit-page.js, /wordpress-seo/js/dist/externals/relatedKeyphraseSuggestions.js, /elementor-pro/assets/js/packages/editor-documents-extended/editor-documents-extended.min.js, /envato-elements/assets/elementor_modal.js, /elementor-pro/assets/js/editor.min.js, /elementor-pro/assets/js/notes/notes.min.js, /wordpress-seo/js/dist/externals/redux.js, /wordpress-seo/js/dist/externals/chart.js.js, /wordpress-seo/js/dist/externals/analysisReport.js, /wordpress-seo/js/dist/api-client.js, /wordpress-seo/js/dist/dashboard-widget.js, /wordpress-seo/js/dist/quick-edit-handler.js, /elementor-pro/assets/js/display-conditions.min.js, /elementor-pro/assets/js/packages/editor-notes/editor-notes.min.js, /wordpress-seo/js/dist/externals/reactHelmet.js, /wordpress-seo/js/dist/externals/replacementVariableEditor.js, /wordpress-seo/js/dist/externals-redux.js, /wordpress-seo/js/dist/externals/uiLibrary.js, /wordpress-seo/js/dist/externals/featureFlag.js, /elementor/assets/lib/nprogress/nprogress.min.js, /wordpress-seo/js/dist/externals/reduxJsToolkit.js, /wordpress-seo/js/dist/languages/en.js, /wordpress-seo/js/dist/externals-contexts.js, /elementor/assets/lib/jquery-hover-intent/jquery-hover-intent.min.js, /elementor-pro/assets/js/packages/editor-site-navigation-extended/editor-site-navigation-extended.min.js, /elementor-pro/assets/js/loop-filter-editor.67dfa5d044d7bd86bd6f.bundle.min.js

BPS PRO SECURITY LOG
=====================
=====================

[403 GET Request: March 28, 2025 2:34 am]
BPS Pro: 17.4
WP: 6.7.2
Event Code: PFWR-PSBR-HPRA
Solution: https://forum.ait-pro.com/forums/topic/security-log-event-codes/
REMOTE_ADDR: 172.70.43.49
Host Name: 172.70.43.49
SERVER_PROTOCOL: HTTP/2.0
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR: 5.161.44.164
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: GET
HTTP_REFERER: https://www.google.com/url/?sa=t
REQUEST_URI: /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.20.3
QUERY_STRING: ver=3.20.3
HTTP_USER_AGENT: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36

[403 POST Request: March 28, 2025 7:28 am]
BPS Pro: 17.4
WP: 6.7.2
Event Code: PFWR-PSBR-HPRA
Solution: https://forum.ait-pro.com/forums/topic/security-log-event-codes/
REMOTE_ADDR: 172.69.86.184
Host Name: 172.69.86.184
SERVER_PROTOCOL: HTTP/1.1
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR: 3.108.51.100
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: POST
HTTP_REFERER: https://www.google.com/
REQUEST_URI: //wp-content/plugins/cloudflare/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
QUERY_STRING:
HTTP_USER_AGENT: Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 6.1; .NET CLR 3.4.20137; WOW64)
REQUEST BODY: BPS Security Log option set to: Do Not Log POST Request Body Data

[403 POST Request: March 28, 2025 7:28 am]
BPS Pro: 17.4
WP: 6.7.2
Event Code: PFWR-PSBR-HPRA
Solution: https://forum.ait-pro.com/forums/topic/security-log-event-codes/
REMOTE_ADDR: 172.69.86.119
Host Name: 172.69.86.119
SERVER_PROTOCOL: HTTP/1.1
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR: 3.108.51.100
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: POST
HTTP_REFERER: https://www.google.com/
REQUEST_URI: //wp-content/plugins/dzs-videogallery/class_parts/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
QUERY_STRING:
HTTP_USER_AGENT: Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 6.1; .NET CLR 3.4.20137; WOW64)
REQUEST BODY: BPS Security Log option set to: Do Not Log POST Request Body Data

[403 POST Request: March 28, 2025 7:28 am]
BPS Pro: 17.4
WP: 6.7.2
Event Code: PFWR-PSBR-HPRA
Solution: https://forum.ait-pro.com/forums/topic/security-log-event-codes/
REMOTE_ADDR: 172.69.95.71
Host Name: 172.69.95.71
SERVER_PROTOCOL: HTTP/1.1
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR: 3.108.51.100
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: POST
HTTP_REFERER: https://www.google.com/
REQUEST_URI: //wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
QUERY_STRING:
HTTP_USER_AGENT: Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 6.1; .NET CLR 3.4.20137; WOW64)
REQUEST BODY: BPS Security Log option set to: Do Not Log POST Request Body Data



[Plugin Firewall AutoPilot Mode New Whitelist Rule(s) Created: March 28, 2025 - 11:39 am]
BPS Pro: 17.4
WP: 6.7.2
Whitelist Rule: /elementor-pro/assets/js/frontend.min.js
Whitelist Rule: /elementor-pro/assets/js/preloaded-elements-handlers.min.js
Whitelist Rule: /elementor-pro/assets/js/webpack-pro.runtime.min.js

[403 GET Request: March 28, 2025 3:03 pm]
BPS Pro: 17.4
WP: 6.7.2
Event Code: BFHS - Blocked/Forbidden Hacker or Spammer
Solution: N/A - Hacker/Spammer Blocked/Forbidden
REMOTE_ADDR: 172.71.150.90
Host Name: 172.71.150.90
SERVER_PROTOCOL: HTTP/2.0
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR: 34.169.4.52
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: GET
HTTP_REFERER:
REQUEST_URI: //wp-json/oembed/1.0/embed?url=https://a1handymanfl.com/
QUERY_STRING: url=https://a1handymanfl.com/
HTTP_USER_AGENT: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36

[403 GET Request: March 31, 2025 4:39 pm]
BPS Pro: 17.4
WP: 6.7.2
Event Code: PFWR-PSBR-HPRA
Solution: https://forum.ait-pro.com/forums/topic/security-log-event-codes/
REMOTE_ADDR: 172.68.12.137
Host Name: 172.68.12.137
SERVER_PROTOCOL: HTTP/2.0
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR: 108.188.57.145
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: GET
HTTP_REFERER: https://a1handymanfl.com/wp-admin/
REQUEST_URI: /wp-content/plugins/better-wp-security/dist/vendors/routing.js?ver=d2b0c3496891e982f1ea
QUERY_STRING: ver=d2b0c3496891e982f1ea
HTTP_USER_AGENT: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

[Plugin Firewall AutoPilot Mode New Whitelist Rule(s) Created: March 31, 2025 - 4:40 pm]
BPS Pro: 17.4
WP: 6.7.2
Whitelist Rule: /wordpress-seo/js/dist/admin-global.js
Whitelist Rule: /better-wp-security/dist/5896.js
Whitelist Rule: /better-wp-security/dist/runtime.js
Whitelist Rule: /better-wp-security/dist/vendors/routing.js
Whitelist Rule: /better-wp-security/dist/3627.js
Whitelist Rule: /better-wp-security/dist/6179.js
Whitelist Rule: /better-wp-security/dist/976.js
Whitelist Rule: /better-wp-security/dist/packages/data.js
Whitelist Rule: /better-wp-security/dist/1511.js
Whitelist Rule: /better-wp-security/dist/5307.js
Whitelist Rule: /better-wp-security/dist/761.js
Whitelist Rule: /better-wp-security/dist/567.js
Whitelist Rule: /better-wp-security/dist/2939.js
Whitelist Rule: /better-wp-security/dist/5257.js
Whitelist Rule: /better-wp-security/dist/core/solid-welcome.js
Whitelist Rule: /better-wp-security/dist/1930.js
Whitelist Rule: /better-wp-security/dist/core/admin-notices-api.js
Whitelist Rule: /better-wp-security/dist/core/admin-notices.js
Whitelist Rule: /wordpress-seo/js/dist/externals/helpers.js
Whitelist Rule: /envato-elements/assets/main.js
Whitelist Rule: /elementor/assets/lib/dialog/dialog.min.js
Whitelist Rule: /elementor-pro/assets/js/admin.min.js
Whitelist Rule: /wordpress-seo/js/dist/externals/propTypes.js
Whitelist Rule: /wp-super-cache/inc/delete-cache-button.js
Whitelist Rule: /wordpress-seo/js/dist/externals/styledComponents.js
Whitelist Rule: /wordpress-seo/js/dist/react-select.js
Whitelist Rule: /elementor/assets/lib/backbone/backbone.radio.min.js
Whitelist Rule: /elementor/assets/lib/backbone/backbone.marionette.min.js
Whitelist Rule: /better-wp-security/vendor-prod/stellarwp/telemetry/src/resources/js/scripts.js
Whitelist Rule: /wordpress-seo/js/dist/externals/componentsNew.js
Whitelist Rule: /wordpress-seo/js/dist/wincher-dashboard-widget.js
Whitelist Rule: /wordpress-seo/js/dist/externals/styleGuide.js
Whitelist Rule: /envato-elements/assets/elements_deep.js
Whitelist Rule: /wordpress-seo/js/dist/edit-page.js
Whitelist Rule: /wordpress-seo/js/dist/externals/relatedKeyphraseSuggestions.js
Whitelist Rule: /elementor-pro/assets/js/packages/editor-documents-extended/editor-documents-extended.min.js
Whitelist Rule: /envato-elements/assets/elementor_modal.js
Whitelist Rule: /elementor-pro/assets/js/editor.min.js
Whitelist Rule: /elementor-pro/assets/js/notes/notes.min.js
Whitelist Rule: /wordpress-seo/js/dist/externals/redux.js
Whitelist Rule: /wordpress-seo/js/dist/externals/chart.js.js

April 1, 2025 at 7:32 am #44893

AITpro Admin

Keymaster

There are a couple things going on. You will either need to manually create additional whitelist rules for the ver= Query Strings added to plugin URL’s or deactivate the Plugin Firewall.

To whitelist all Elementor Pro .js files add this whitelist rule: /elementor-pro/assets/js/(.*).js(.*)
For WP Better Security add this whitelist rule: /better-wp-security/dist/(.*).js(.*)

Author

Posts

Viewing 2 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic.

BulletProof Security Forum

Lots of trouble with elementor

Search Forums

Topic Tags