Issues with the REST API in WordPress may set off alarms for your Web Application Firewall (WAF) such as the one in the Cloudfare Pro plan.
See how to find and whitelist your IP address as a temporary fix to solve Update Failed and plugins trying to save.
What’s the Problem?
The REST API was rolled into the core of WordPress a couple of years ago.
Since then, Gutenberg and cutting edge plugins have been using it to securely connect outside services and apps to your site.
That’s when the issues started appearing and are becoming more numerous as more folks using WAFs to protect their sites begin to use Gutenberg and these advanced plugins.
Troubleshooting is still ongoing for this issue and it may be a while before we have a clear understanding of all that’s involved.
READ: WordPress REST API and Cloudflare WAF Issues for more details.
For now, all plugin and services devs that need to connect with your site are seeking their own temporary solutions.
And they vary greatly.
Check with your plugin/service provider for their recommendations for whitelisting.
And be insanely careful about any suggestion to put in page rules that knock out your entire WAF!
The only relatively safe ways to whitelist is your own IP address, the IP of the service, and extra firewall rules that are specific to the plugin/service.
Make these changes at your own discretion, as there are risks to whitelisting anything.
See a quick video walkthrough of how to find and whitelist your IP address in Cloudflare.
Below the video is a written how-to transcript.
Did this tip help you?
Subscribe to the BlogAid YouTube Channel for more tips
Follow these steps to find your IP address and then whitelist it in Cloudflare.
Find Your IP Addresses
You likely have 2 IP addresses:
- IPv4, which looks like this: 18.104.22.168
- IPv6, which looks like this: 2600:1005:b062:61e4:74d7:f292:802c:fbfd
If you simply Google “what’s my IP” it will likely return your IPv4, but could return your IPv6 instead.
And you may only need to whitelist whichever one it shows.
If you need your IPv6, go to this site https://www.whatismyip.com/
Both IPs will be listed at the top, or it will tell you that an IPv6 was not detected.
Whitelist in Cloudflare
Log into your Cloudflare account.
Click the Firewall icon at the top.
Click the Tools sub-link.
Input your IP.
In the next drop-down, select Whitelist.
In the Notes section, input something like My home IP address, so you’ll know what it is in the list.
Click the Add button.
Give it a few minutes to take effect. For some folks it may even be a few hours before it kicks in.
Test whatever was causing the issue and see if that fixed it.
Be sure to subscribe to BlogAid News so you’ll receive the Tips Tuesday weekly roundup and latest news posts.