Hi @didier59450,
Thanks for reporting this. This is related to:
What’s going on: after the wp2shell issue involving the core REST batch endpoint, some hosts/WAFs (Imunify360 included) added emergency rules that block /wp-json/batch/v1. Kadence Security’s settings screens use that core batch endpoint to save, so when the WAF returns a 403 or HTML block page instead of JSON, WordPress shows that error.
We’ve already escalated a resilience improvement to our developers for hosts that keep a hard block on batch/v1. In the meantime, the workaround is asking your host to allow authenticated admin requests to /wp-json/batch/v1 (or relax the emergency batch rule) once WordPress is on a patched release (7.0.2+, 6.9.5+, or 6.8.6+).
I’ll circle back here when I have more news on the escalation.
Thanks again!
Hi,
Up to now, no improvement on this point.
Ionos hosting ackowledge having restrictions on WAF / ModSecurity authentified requests through API REST WordPress, in order to secure Ionos customers!
Any changes on your side, or shall we wait till WP 7.1?
Best regards
Didier
same problem with the pro version – its been very awkward to setup up new clients is impossible right now – do you actually test your stuff before putting it out to the world? dashboard is unreachable.
ithemes and even solidsecurity worked great and without issues!
Hi @telemarker,
As a workaround you may find the topic below interesting:
option to export JSON for configuration settings?
@shanedelierrr,
Is the Import and Export feature also affected by a block of the WordPress core REST batch endpoint?
We are experiencing this issue still over a number of our sites. Are there any updates on when this will fixed or any workarounds that don’t mean compromising the site security as we use it for log ins and lock outs. All of our sites are all running either WP 7.0.2 or 7.1. TIA
Hi everyone, thanks for raising this!
A plugin-side fix for the “not a valid JSON response” save/setup error (when /wp-json/batch/v1 is blocked) has been tested and is scheduled for the next Kadence Security release, expected next week.
Thanks for your patience, and I’ll update here again once it’s out.
yes i talked last week intensily to the pro support that are taking things obviously more serious than the free version team… i hope the release comes soon!
