If reCAPTCHA doesn’t appear on your comment forms after enabling Brute Force Protection, the comment form may not be using WordPress’s standard comment hooks, or the settings aren’t fully configured. Verify both settings are enabled Go to WP Ghost > Brute Force > Settings and confirm that both Use Brute Force Protection (the main toggle) […]
Category: Troubleshooting
Find practical solutions for resolving compatibility errors and conflicts between Wp Ghost and other active WordPress plugins and themes. Ideal for site administrators and developers seeking quick and effective fixes.
Comments Not Being Posted or Processed
If visitors can’t submit comments after changing the comments path in WP Ghost, the comment form is still pointing to the old wp-comments-post.php path while the server expects the new one. Work through these checks. Clear all caches Cached pages still contain the old comment form action URL pointing to wp-comments-post.php. Clear your WordPress cache […]
Not Receiving the 2FA Email Code
There are several reasons why the 2FA email code may not arrive. Work through these checks in order. Check the email address Verify that the correct email address is set in the user’s WordPress profile. Go to Users > Profile and confirm the email. In WP Ghost’s 2FA settings, click Reset Email to resend the […]
Getting Locked Out After Exceeding Max Fail Attempts
If you see the message “Your IP has been flagged for potential security violations” after entering wrong credentials or 2FA codes, WP Ghost’s brute force protection has temporarily blocked your IP address. By default, 5 failed attempts triggers a lockout. Here are three ways to regain access. Wait for the ban to expire The default […]
Unable to Scan the QR Code
If your authenticator app can’t scan the 2FA QR code during setup (blurry screen, camera issues, or the code doesn’t register), use the manual entry method instead. Enter the secret key manually Below the QR code on the 2FA setup page, WP Ghost displays a text-based secret key. Open your authenticator app (Google Authenticator, Authy, […]
Authenticator App Not Generating Valid Codes for 2FA
If your authenticator app (Google Authenticator, Authy, Microsoft Authenticator, etc.) generates codes that WP Ghost rejects, work through these checks in order. Device time and date out of sync TOTP codes are time-based. If your phone’s clock is off by more than 30 seconds, codes won’t match. Go to your device’s Settings > Date & […]
Connection Issues With Third-Party Apps
Third-party apps (mobile apps, payment gateways, CRM integrations, email marketing tools, etc.) can lose connection to your site when WP Ghost changes the REST API path, modifies AJAX paths, or enforces security headers that block their requests. Work through these checks to identify which setting is causing the conflict. Check REST API path Most third-party […]
REST API Not Working After Custom Path Change
If you get errors accessing the REST API after changing the wp-json path in WP Ghost (404 errors, “rest_no_route” responses, or plugins that depend on the API stop working), the custom path isn’t resolving correctly on your server. Clear all caches Cached pages and API responses may still reference the old wp-json path. Clear your […]
After Changing the wp-includes Path Some Plugins are not Functioning Properly
If plugins break or display errors after changing the wp-includes path in WP Ghost, the plugins are loading scripts or stylesheets from /wp-includes/ and the server isn’t correctly rewriting the custom path back to the original location. Clear all caches Cached pages still reference the old /wp-includes/ path in script and stylesheet URLs. Clear your […]
JetPack Plugin Analytics not Working with Disabled XML-RPC Access
If disabling XML-RPC in WP Ghost causes JetPack analytics to stop working, a simpler solution is to whitelist JetPack’s IP addresses in WP Ghost’s firewall.