Hey guys, we are seeing a big increase of user complains where wordfence is blocking ajax blocking requests (error 400 forbidden) This affects visual editors, our plugin WP Staging and probably other plugins as well.

All of the suer were using the wordfence plugin but at the time point of the tests the wordfence plugin was disabled at all. So I wonder how that can be?

Is wordfence any code installing which is not entirely deactivated when the plugin itself is off?

Could it be the hosting provider who is using external caching methods?

We are experiencing the issue on a lot of godaddy hostings but this could be coincidence because they are widely used.

Thanks