Wordfence is a security plugin for WordPress that helps you prevent attacks against your WordPress installation and may interfere with Cloudpress. This document will show you how to configure Wordfence to allow Cloudpress to work correctly.
Wordfence configuration settings
The configuration settings listed below can be accessed by selecting the All Options menu from the Wordfence navigation. After updating the Wordfence settings below, ensure that you save your changes.
1. Add Cloudpress IP addresses to your Wordfence allowlist
Scroll down to the Wordfence Firewall Options and open the Advanced Firewall Options section. Add the Cloudpress IP addresses to the Allowlisted IP addresses that bypass all rules textbox. These are the Cloudpress IP addresses you must add:
126.96.36.199 188.8.131.52 184.108.40.206 220.127.116.11 18.104.22.168 22.214.171.124 126.96.36.199 188.8.131.52 184.108.40.206 220.127.116.11 18.104.22.168 22.214.171.124 126.96.36.199 188.8.131.52 184.108.40.206 220.127.116.11 18.104.22.168 22.214.171.124 126.96.36.199 188.8.131.52 184.108.40.206 220.127.116.11 18.104.22.168 22.214.171.124 126.96.36.199
2. Enable application passwords
By default, Wordfence may disable WordPress application passwords - which Cloudpress uses to communicate with your WordPress server. Scroll down to the Brute Force Protection section. Under the Additional Options heading, uncheck the Disable WordPress application passwords checkbox.
3. Allow username discovery
Cloudpress allows you to update additional fields, such as the post author. This feature queries your WordPress server for the usernames. To ensure this feature works correctly, scroll down to the Brute Force Protection section. Under the Additional Options heading, uncheck the Prevent discovery of usernames through '/?author=N' scans, the oEmbed API, the WordPress REST API, and WordPress XML Sitemaps checkbox.