Title: WF Blocking API upon activation
Last modified: November 13, 2024

---

# WF Blocking API upon activation

 *  [cryptocaddy](https://wordpress.org/support/users/cryptocaddy/)
 * (@cryptocaddy)
 * [1 year, 7 months ago](https://wordpress.org/support/topic/wf-blocking-api-upon-activation/)
 * Good morning, I am reaching out after 2 days of trial and error with 2 issues
   we are seeing. 
   1. Our portfolio tracker has become completely inoperable. Root
   cause shows wordfence plugin on a conflict test. I have tried to put it the firewall
   in learning mode and also disabled with the same result. I have attempted to 
   add allowed URLs to support the API data required with no result. Only way is
   disabling wordfence. A second issue we are having is with Ultimate member and
   and account creation. When a user creates an account and they receive the activate
   email, it is taking them to a password reset screen where the “Link has expired”.
   I determined wordfence is also causing this error as it goes away when disabling
   the plugin as well. Please help me understand what I am overlooking here. Thank
   you!
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fwf-blocking-api-upon-activation%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 2 replies - 1 through 2 (of 2 total)

 *  Plugin Support [wfpeter](https://wordpress.org/support/users/wfpeter/)
 * (@wfpeter)
 * [1 year, 7 months ago](https://wordpress.org/support/topic/wf-blocking-api-upon-activation/#post-18133284)
 * Hi [@cryptocaddy](https://wordpress.org/support/users/cryptocaddy/), thanks for
   getting in touch and sorry to see you’re having some problems.
 * What plugin are you using for your portfolio tracker? I can see if it appears
   on any of our known incompatibility lists, but it may also help to see why it
   is being blocked in the [Live Traffic](https://www.wordfence.com/help/tools/live-traffic/)
   page immediately after encountering a problem. Most recent events will be near
   the top and can be expanded by being clicked, or using the eye icon in the corner.
   The reason will be in red text.
 * The Ultimate Member issue sounds like the behavior when a user fails reCAPTCHA.
   The verification emails are sent to verify a failed reCAPTCHA score. Google reCAPTCHA
   v3 **only** provides a score and nothing else, it doesn’t fall back to picking
   bicycles/traffic lights/etc., so any fallback is left to the implementer. Wordfence’s
   Login Security features are only compatible with the default WordPress and WooCommerce
   login/registration forms. If you have a custom page or modal/popup that has a
   different login flow to what we’re expecting, that may be another reason for 
   the issue if you have those features enabled.
 * Many thanks,
   Peter.
 *  Thread Starter [cryptocaddy](https://wordpress.org/support/users/cryptocaddy/)
 * (@cryptocaddy)
 * [1 year, 7 months ago](https://wordpress.org/support/topic/wf-blocking-api-upon-activation/#post-18133904)
 * Thank you for the fast response, Peter. 
   The plugin for the portfolio tracker
   was a custom development from cool plugins to add onto their coins market cap
   plugin and is called Cryptocurrency Portfolio Tracker. I do have both plugin 
   zip files as well. As for the live traffic monitoring, I can see the actions 
   and they are showing successful on the live traffic. but the console is logging
   the 404 error to-
 * wp-json/wp/v2/crypto_portfolio?author=2&&status=private,publish:1
 *     ```wp-block-code
          Failed to load resource: the server responded with a status of 404 ()
       ```
   
 * If I disable just the firewall, I am still greeted with the same error. It only
   goes fully away when I disable Wordfence. 
   Thank you again for all the assists
   on this. Please let me know if you need screen shots or access to the plugin 
   zip file. Frank R.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘WF Blocking API upon activation’ is closed to new replies.

 * ![](https://ps.w.org/wordfence/assets/icon.svg?rev=2070865)
 * [Wordfence Security - Firewall, Malware Scan, and Login Security](https://wordpress.org/plugins/wordfence/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wordfence/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wordfence/)
 * [Active Topics](https://wordpress.org/support/plugin/wordfence/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wordfence/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wordfence/reviews/)

## Tags

 * [password link](https://wordpress.org/support/topic-tag/password-link/)

 * 2 replies
 * 2 participants
 * Last reply from: [cryptocaddy](https://wordpress.org/support/users/cryptocaddy/)
 * Last activity: [1 year, 7 months ago](https://wordpress.org/support/topic/wf-blocking-api-upon-activation/#post-18133904)
 * Status: not resolved