Brute Force Protection Not Working on Comment Forms

If reCAPTCHA doesn’t appear on your comment forms after enabling Brute Force Protection, the comment form may not be using WordPress’s standard comment hooks, or the settings aren’t fully configured. Verify both settings are enabled Go to WP Ghost > Brute Force > Settings and confirm that both Use Brute Force Protection (the main toggle) […]

Read More

Comments Not Being Posted or Processed

If visitors can’t submit comments after changing the comments path in WP Ghost, the comment form is still pointing to the old wp-comments-post.php path while the server expects the new one. Work through these checks. Clear all caches Cached pages still contain the old comment form action URL pointing to wp-comments-post.php. Clear your WordPress cache […]

Read More

Not Receiving the 2FA Email Code

There are several reasons why the 2FA email code may not arrive. Work through these checks in order. Check the email address Verify that the correct email address is set in the user’s WordPress profile. Go to Users > Profile and confirm the email. In WP Ghost’s 2FA settings, click Reset Email to resend the […]

Read More

Unable to Scan the QR Code

If your authenticator app can’t scan the 2FA QR code during setup (blurry screen, camera issues, or the code doesn’t register), use the manual entry method instead. Enter the secret key manually Below the QR code on the 2FA setup page, WP Ghost displays a text-based secret key. Open your authenticator app (Google Authenticator, Authy, […]

Read More

Authenticator App Not Generating Valid Codes for 2FA

If your authenticator app (Google Authenticator, Authy, Microsoft Authenticator, etc.) generates codes that WP Ghost rejects, work through these checks in order. Device time and date out of sync TOTP codes are time-based. If your phone’s clock is off by more than 30 seconds, codes won’t match. Go to your device’s Settings > Date & […]

Read More

Connection Issues With Third-Party Apps

Third-party apps (mobile apps, payment gateways, CRM integrations, email marketing tools, etc.) can lose connection to your site when WP Ghost changes the REST API path, modifies AJAX paths, or enforces security headers that block their requests. Work through these checks to identify which setting is causing the conflict. Check REST API path Most third-party […]

Read More

REST API Not Working After Custom Path Change

If you get errors accessing the REST API after changing the wp-json path in WP Ghost (404 errors, “rest_no_route” responses, or plugins that depend on the API stop working), the custom path isn’t resolving correctly on your server. Clear all caches Cached pages and API responses may still reference the old wp-json path. Clear your […]

Read More

After Changing the wp-includes Path Some Plugins are not Functioning Properly

If plugins break or display errors after changing the wp-includes path in WP Ghost, the plugins are loading scripts or stylesheets from /wp-includes/ and the server isn’t correctly rewriting the custom path back to the original location. Clear all caches Cached pages still reference the old /wp-includes/ path in script and stylesheet URLs. Clear your […]

Read More