Hi
You have several options to disable it:
1. You can temporarily rename NinjaFirewall’s folder:
/wp-content/plugins/ninjafirewall/ to /wp-content/plugins/ninjafirewall-back/.
2. You can temporarily rename the PHP INI file (php.ini or .user.ini) if running if “Full WAF” mode, or comment out the firewall directive in the wp-config.php if running in “WordPress WAF”.
3. You can temporarily create a .htninja file in the blog root folder with this content”
<?php
// Allow all requests:
return 'ALLOW';
I would recommend method #3, because that would disable it but you could still access and, if needed, change its options, while you won’t be able to do that with methods #1 and #2.
I cannot see what feature in the latest version could do this kind of loop.
If you want to downgrade to the previous version (3.7.1) you need to download it from https://downloads.wp.xz.cn/plugin/ninjafirewall.3.7.1.zip and overwrite the current files with it.