Hi there, I have been using WP Cerber in conjunction with Gravity Forms for many years now and suddenly the latest update has started marking all form submissions as ‘spam’.
I have the following exceptions in the spam exclusions:
/?gf_page=
/?wc-api=wc_stripe
Why is Cerber all of a sudden doing this? Is there another exception I can add?
I don’t know your setup, but I think you have to permit access to the GF namespace as described here: https://wpcerber.com/restrict-access-to-wordpress-rest-api/
Hi Garry, sorry I don’t have the option ticked for “block access to Wordpress REST API” anyway.
This website was accepting contact forms successfully for the last few years and it has only started incorrectly blocking them all in the last week.
The only plugin I have set to auto-update is WP Cerber, so none of the others have changed.
Please check the Activity log and identify what URL is being blocked. This guide can help: https://wpcerber.com/firewall-http-requests-are-being-blocked/
The URL is only showing as / or /contact-us
Gravity forms can be present on multiple pages so it is not as easy as whitelisting a URL.
It is noteworthy that the home page URL / is not a valid URL for submitting forms. As far as I know, GF should be using REST API. Make sure that you’re using the latest version of GF.
The gravity forms all submit correctly when I switch off ‘Protect Other Forms’ in the WP Cerber Anti-Spam settings.
Either Gravity Forms have changed something or Cerber has, but there is clearly now a conflict.
Sadly it looks like my only options are to turn off ‘Protect Other Forms’ across 500+ websites or find a different security plugin.
What version are you using?
Cerber is 9.6.7.3
Gravity Forms is 2.9.4
Hi there, I am now seeing issues with Caldera Forms too. It seems the latest WP Cerber update has become way too strict and is blocking ALL contact forms!
