[Sandra]

everything was fine for a few years and today massive attack from bots on the wp-cron.php and I had to enable “under attack” mode in Cloudflare to avoid CPU spikes, any ideas to improve this if I can’t block every bot IP.

[Justin]

https://wordpress.stackexchange.com/questions/391506/frequently-getting-attacks-on-admin-ajax-php-wp-cron-php-xmlrpc-php-and-wp-log

other people also mention similar attacks, no solution.

[Brittany]

what about his solution?

# WordPress wp-cron.php file
<Files "wp-cron.php">
  Require ip 1.2.3.4
</Files>

https://wordpress.stackexchange.com/questions/176514/is-there-a-known-vulnerability-for-wp-cron-php

[Richard]

That snippet is for .htaccess files on Apache servers only.

[Jack]

Take a look

https://medium.com/@thecpanelguy/the-nightmare-that-is-wpcron-php-ae31c1d3ae30

[Author]

Posts