webauthorings on "[Plugin: All In One WP Security & Firewall] Update this morning, Captcha not working"

We just updated the new version (4.1.3) this moing onto our live site, and now the Captcha is not working. We are now having our IP locked out, but even when testing with "Hidemyass.com" or other proxy servers, we can't get past the Captcha. Please help asap!

https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/

The last update had a fix for a vulnerability in the captcha feature.

Now for your situation....
To get back into your site simply FTP to your server and traverse to the wp-contents/plugins folder and rename the following folder from:

all-in-one-wp-security-and-firewall

to

all-in-one-wp-security-and-firewall-temp

The above will deactivate this plugin and you will be able to login.
Once logged in to WordPress you can rename that folder back and then disable the captcha feature for now.

Another thing to do is to clear all page caches from your server if you are using a caching plugin.
If you are hosting with WPengine or similar hosts who cache the login page can you please ask them to refresh the cache for your login page.

Hi, thank you for the response and I had already figured out how to change the plug-in folder file name and luckily the site was able to function. Unfortunately when I change the name back, it keeps all the old data and immediately logs me out because it has been more than 60 minutes. Should i just reinstall the plug-in you think?

I think clearing the configuration should work for you.

Log into your DB using PHPMyAdmin and go to the wp_options table and look for the option_name called aio_wp_security_configs.

When you locate this, just delete the whole row entry.
Then deactivate and reactivate the AIOWPS plugin and it will automatically reset all the settings to default values.
(Note: you will need to then reconfigure your aiowps settings again to however you wish)

I'm having the same problem with capture (not recognizing the answers given as correct). I'm not exactly sure what you are saying--is there a problem/bug with the plugin since the update that is causing this?

Or are you saying that it is a caching problem and not a plugin problem? If so, why would that have become an issue with the update when it was no problem prior to the update?

I just want to be able to understand exactly what's going on here.

@jkisha,
The caching thing was just a hunch but because I have yet to physically see this problem occurring I can't be 100% sure why you are seeing this issue.
All my sites don't have the issue you are seeing.

I would like to see your login page using firebug - can you either post it here or contact me using my form?

OR, can you inspect the captcha field using firebug/developer tools and tell me whether or not you see a hidden input field with "name=aiowps-captcha-string-info"?

(we removed this field in the latest release)

having the same problem but I am not this savy....aie

We run 120+ websites all with the same issue. Started this moing.