do_action('wordfence_security_event') is found 12 times:

• /lib/wfConfig.php line 1096

  				$cont = file_get_contents(WORDFENCE_FCPATH);
  				preg_match('/Version: (\d+\.\d+\.\d+)/', $cont, $matches);
  				$version = !empty($matches) ? $matches[1] : null;
  				$alertCallback = array(new wfAutoUpdatedAlert($version), 'send');
  				do_action('wordfence_security_event', 'autoUpdate', array(
  					'version' => $version,
  				), $alertCallback);
  
  				wfConfig::set('autoUpdateAttempts', 0);
  			}
  			$output = @ob_get_contents();
  

  Share this:

  • Tweet

  Like this:

  Like Loading...
• /lib/wfConfig.php line 1483

  						$currentUser = wp_get_current_user();
  						$username = $currentUser->user_login;
  
  						$alertCallback = array(new wfWafDeactivatedAlert($username, wfUtils::getIP()), 'send');
  						do_action('wordfence_security_event', 'wafDeactivated', array(
  							'username' => $username,
  							'ip' => wfUtils::getIP(),
  						), $alertCallback);
  					}
  
  					if ($before != $value) {
  

  Share this:

  • Tweet

  Like this:

  Like Loading...
• /lib/wfLog.php line 649

  				$this->tagRequestForBlock($reason);
  
  				$alertCallback = array(new wfBlockAlert($IP, $reason, $secsToGo), 'send');
  
  				do_action('wordfence_security_event', 'block', array(
  					'ip' => $IP,
  					'reason' => $reason,
  					'duration' => $secsToGo,
  				), $alertCallback);
  				wordfence::status(2, 'info', sprintf(/* translators: 1. IP address. 2. Description of firewall action. */ __('Blocking IP %1$s. %2$s', 'wordfence'), $IP, $reason));
  			}
  

  Share this:

  • Tweet

  Like this:

  Like Loading...
• /lib/wfLog.php line 661

  				$secsToGo = wfBlock::rateLimitThrottleDuration();
  				wfBlock::createRateThrottle($reason, $IP, $secsToGo);
  				wfActivityReport::logBlockedIP($IP, null, 'throttle');
  
  				do_action('wordfence_security_event', 'throttle', array(
  					'ip' => $IP,
  					'reason' => $reason,
  					'duration' => $secsToGo,
  				));
  				wordfence::status(2, 'info', sprintf(/* translators: 1. IP address. 2. Description of firewall action. */ __('Throttling IP %1$s. %2$s', 'wordfence'), $IP, $reason));
  				wfConfig::inc('totalIPsThrottled');
  

  Share this:

  • Tweet

  Like this:

  Like Loading...
• /lib/wfLog.php line 691

  	public function do503($secsToGo, $reason, $sendEventToCentral = true){
  		$this->initLogRequest();
  
  		if ($sendEventToCentral) {
  			do_action('wordfence_security_event', 'block', array(
  				'ip' => wfUtils::inet_ntop($this->currentRequest->IP),
  				'reason' => $this->currentRequest->actionDescription ? $this->currentRequest->actionDescription : $reason,
  				'duration' => $secsToGo,
  			));
  		}
  
  

  Share this:

  • Tweet

  Like this:

  Like Loading...
• /lib/wordfenceClass.php line 111

  		//Send admin alert
  		$currentUser = wp_get_current_user();
  		$username = $currentUser->user_login;
  		$alertCallback = array(new wfWordfenceDeactivatedAlert($username, wfUtils::getIP()), 'send');
  		do_action('wordfence_security_event', 'wordfenceDeactivated', array(
  			'username' => $username,
  			'ip' => wfUtils::getIP(),
  		), $alertCallback);
  
  		//Send all pending audit events (up to the limit but disallow sending any further to avoid timeouts/orphaned crons)
  		wfAuditLog::sendPendingAuditEvents(100, false);
  

  Share this:

  • Tweet

  Like this:

  Like Loading...
• /lib/wordfenceClass.php line 1851

  		}
  
  		if($user){
  			$alertCallback = array(new wfLostPasswdFormAlert($user, wfUtils::getIP()), 'send');
  			do_action('wordfence_security_event', 'lostPasswdForm', array(
  				'email' => $user->user_email,
  				'ip' => wfUtils::getIP(),
  			), $alertCallback);
  
  		}
  
  

  Share this:

  • Tweet

  Like this:

  Like Loading...
• /lib/wordfenceClass.php line 1886

  	public static function lockOutIP($IP, $reason) {
  		wfBlock::createLockout($reason, $IP, wfBlock::lockoutDuration(), time(), time(), 1);
  		self::getLog()->tagRequestForLockout($reason);
  		$alertCallback = array(new wfLoginLockoutAlert($IP, $reason), 'send');
  		do_action('wordfence_security_event', 'loginLockout', array(
  			'ip'       => $IP,
  			'reason'   => $reason,
  			'duration' => wfBlock::lockoutDuration(),
  		), $alertCallback);
  
  	}
  

  Share this:

  • Tweet

  Like this:

  Like Loading...
• /lib/wordfenceClass.php line 2595

  			$alertCallback = array(new wfNonAdminLoginAlert($cookieName, $cookieValue, $username, wfUtils::getIP()), 'send');
  		}
  		if($newDevice)
  			$securityEvent.='NewLocation';
  		do_action('wordfence_security_event', $securityEvent, array(
  			'username' => $username,
  			'ip' => wfUtils::getIP(),
  		), $alertCallback);
  
  		if (wfConfig::get(wfUtils::isAdmin($userID)?'alertOn_firstAdminLoginOnly':'alertOn_firstNonAdminLoginOnly')) {
  			//Purge legacy cookie if still present
  

  Share this:

  • Tweet

  Like this:

  Like Loading...
• /lib/wordfenceClass.php line 3115

  						$username = $authUser->user_login;
  						self::getLog()->logLogin('loginFailValidUsername', 1, $username);
  						$alertCallback = array(new wfBreachLoginAlert($username, wp_lostpassword_url(), wfSupportController::esc_supportURL(wfSupportController::ITEM_USING_BREACH_PASSWORD), wfUtils::getIP()), 'send');
  
  						do_action('wordfence_security_event', 'breachLogin', array(
  							'username' => $username,
  							'resetPasswordURL' => wp_lostpassword_url(),
  							'supportURL' => wfSupportController::esc_supportURL(wfSupportController::ITEM_USING_BREACH_PASSWORD),
  							'ip' => wfUtils::getIP(),
  						), $alertCallback);
  
  

  Share this:

  • Tweet

  Like this:

  Like Loading...
• /lib/wordfenceClass.php line 3151

  				$username = $authUser->user_login;
  				self::getLog()->logLogin('loginFailValidUsername', 1, $username);
  				$alertCallback = array(new wfBreachLoginAlert($username, wp_lostpassword_url(), wfSupportController::esc_supportURL(wfSupportController::ITEM_USING_BREACH_PASSWORD), wfUtils::getIP()), 'send');
  
  				do_action('wordfence_security_event', 'breachLogin', array(
  					'username' => $username,
  					'resetPasswordURL' => wp_lostpassword_url(),
  					'supportURL' => wfSupportController::esc_supportURL(wfSupportController::ITEM_USING_BREACH_PASSWORD),
  					'ip' => wfUtils::getIP(),
  				), $alertCallback);
  
  

  Share this:

  • Tweet

  Like this:

  Like Loading...
• /lib/wordfenceClass.php line 8680

  					$message .= "\n" . $date . $ip . $attackMessage;
  				}
  
  				$alertCallback = array(new wfIncreasedAttackRateAlert($message), 'send');
  				do_action('wordfence_security_event', 'increasedAttackRate', array(
  					'attackCount' => $attackCount,
  					'attackTable' => $attackTable,
  					'duration' => $alertInterval,
  					'ip' => wfUtils::getIP(),
  				), $alertCallback);
  
  

  Share this:

  • Tweet

  Like this:

  Like Loading...