After the last update, I started to notice a slowness in the server and after consulting the logs, I check several connections with the error:
Error 401 POST /wp-json/tdw/save_css HTTP/1.0 Apache SSL/TLS access
I don’t know what to do, I’m full of these errors in apache on all sites.
Hi,
Please block /wp-json/tdw/save_css
If an attacker wants to target this URL /wp-json/tdw/save_css they can do so. Even if the website uses a different theme, the attacker can still try that URL. We could add an option to be able to enable/disable the Live CSS, it will be considered. But for now in order to remove it this can only be done with a modification to the composer plugin. I think that all that removing it requires is to comment this line of code – https://prnt.sc/RtwvL5Nc4ikR -> https://prnt.sc/ymZmhdUfp57U But as I mentioned, the attacker can still try to access the URL.
Thank you!
Hi,
Thanks for information, I’m going to proceed to that and add a firewall lock on the cloduflare.
