Closed paulschreiber closed 10 months ago
@paulschreiber Thanks for reporting this. Unfortunately, we do not support any WordPress plugin and have not decided yet if we are going to do it in the future.
Do you need help with writing your own exclusion rule for this specific case?
This isn't a plugin — it's a theme.
If you can help me right an exclusion rule, that'd be great.
The same goes also for themes, i'm sorry.
Can you provide me with a full audit log?
Here is the audit log:
--01f57a56-A--
[15/Oct/2023:11:15:41.646872 --0400] ZSwCHVXBaCfK8T-1Jp1ISgAARCM 70.19.54.122 57021 204.15.194.116 443
--01f57a56-B--
POST /wp-json/semplice/v1/editor/save HTTP/2.0
Content-Length: 18184
Sec-Ch-Ua: "Chromium";v="118", "Google Chrome";v="118", "Not=A?Brand";v="99"
Sec-Ch-Ua-Mobile: ?0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Accept: */*
X-Requested-With: XMLHttpRequest
X-Wp-Nonce: 55598df93b
Sec-Ch-Ua-Platform: "macOS"
Origin: https://xxxxx.com
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://xxxxx.com/wp-admin/admin.php?page=semplice-admin&ref=wp-admin
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: wordpress_test_cookie=xxxxxxxxx
Host: xxxxx.com
--01f57a56-C--
post_revision%5Bactive%5D=latest_version&post_revision%5Bpublished%5D=latest_version&content=%7B%22order%22%3A%7B%22cover%22%3A%7B%22row_cover%22%3A%7B%22columns%22%3A%7B%7D%7D%7D%2C%22section_4oyl7zz8h%22%3A%7B%22row_ar3ffrmrd%22%3A%7B%22columns%22%3A%7B%22column_bx3ggw0k7%22%3A%5B%5D%7D%7D%7D%2C%22section_u6pjka8tj%22%3A%7B%22row_2ivolrelu%22%3A%7B%22columns%22%3A%7B%22column_r2a1mwhz0%22%3A%5B%22content_yob9mq8jz%22%2C%22content_w2xg6epaa%22%5D%7D%7D%7D%2C%22section_8hbip9nk7%22%3A%7B%22row_2rxwoi2lm%22%3A%7B%22columns%22%3A%7B%22column_9x87max31%22%3A%5B%22content_aoyy83i4o%22%5D%7D%7D%2C%22row_8qsrgd2nf%22%3A%7B%22columns%22%3A%7B%22column_iflz4npe7%22%3A%5B%22content_fuf3hh9ve%22%5D%7D%7D%7D%2C%22section_9tu2ore4g%22%3A%7B%22row_j5fi586vl%22%3A%7B%22columns%22%3A%7B%22column_dy5xntu1m%22%3A%5B%22content_svw2lvlfg%22%5D%7D%7D%7D%2C%22section_lae76fcs3%22%3A%7B%22row_jf50e7ygp%22%3A%7B%22columns%22%3A%7B%22column_zwa5xlh6r%22%3A%5B%22content_qek6g3kba%22%5D%7D%7D%2C%22row_dxbnhi5f6%22%3A%7B%22columns%22%3A%7B%22column_3tfj74559%22%3A%5B%22content_qodwabe68%22%2C%22content_ynk2qojvc%22%5D%7D%7D%2C%22row_sja0aj78e%22%3A%7B%22columns%22%3A%7B%22column_zsj59du3r%22%3A%5B%22content_yfk2o38c2%22%2C%22content_yi0qvic1x%22%5D%7D%7D%2C%22row_lk89gz32e%22%3A%7B%22columns%22%3A%7B%22column_6u3uonl7f%22%3A%5B%22content_riz0k7pzm%22%2C%22content_u7rkl5ryv%22%5D%7D%7D%2C%22row_yewly3yjf%22%3A%7B%22columns%22%3A%7B%22column_o6v6b3get%22%3A%5B%22content_i5wj9vccd%22%2C%22content_zsb6gsw1r%22%5D%7D%7D%7D%2C%22section_u93u5ndin%22%3A%7B%22row_ikhurmxhp%22%3A%7B%22columns%22%3A%7B%22column_oxx99i9xm%22%3A%5B%22content_4t85wphhs%22%5D%7D%7D%7D%7D%2C%22images%22%3A%7B%22206%22%3A%7B%22url%22%3A%22https%3A%2F%2Fxxxxx.com%2Fwp-content%2Fuploads%2F2016%2F03%2Fwork.jpg%22%2C%22width%22%3A2400%2C%22height%22%3A1278%7D%2C%22306%22%3A%7B%22url%22%3A%22https%3A%2F%2Fxxxxx.com%2Fwp-content%2Fuploads%2F2020%2F11%2Fpaul-watabe.jpg%22%2C%22width%22%3A1200%2C%22height%22%3A1200%7D%7D%2C%22branding%22%3A%7B%7D%2C%22content_yob9mq8jz%22%3A%7B%22content%22%3A%7B%22xl%22%3A%22%3Ch1+data-mce-style%3D%5C%22line-height%3A+2.667rem%3B+font-size%3A+1.778rem%3B%5C%22+style%3D%5C%22line-height%3A+2.667rem%3B+font-size%3A+1.778rem%3B%5C%22+data-line-height-xl%3D%5C%223.333rem%5C%22+data-font-size-xl%3D%5C%222.556rem%5C%22+data-font-size-xs%3D%5C%221.333rem%5C%22+data-line-height-xs%3D%5C%222.000rem%5C%22+data-font-size-sm%3D%5C%221.778rem%5C%22+data-line-height-sm%3D%5C%222.667rem%5C%22%3E%3Cspan+style%3D%5C%22color%3A+rgb(26%2C+27%2C+29)%3B+letter-spacing%3A+0.022rem%3B%5C%22+data-mce-style%3D%5C%22color%3A+%231a1b1d%3B+letter-spacing%3A+0.022rem%3B%5C%22+data-letter-spacing-xs%3D%5C%220.044rem%5C%22+data-letter-spacing-sm%3D%5C%220.022rem%5C%22%3E%3Cstrong%3EI'm+Paul%2C+a+Canadian+digital+product+designer+currently+designing+from+Ho+Chi+Minh+City%2C+Vietnam.+%3C%2Fstrong%3E%3C%2Fspan%3E%3C%2Fh1%3E%3Ch1+data-mce-style%3D%5C%22line-height%3A+2.667rem%3B+font-size%3A+1.778rem%3B%5C%22+style%3D%5C%22line-height%3A+2.667rem%3B+font-size%3A+1.778rem%3B%5C%22+data-line-height-xl%3D%5C%223.333rem%5C%22+data-font-size-xl%3D%5C%222.556rem%5C%22+data-font-size-xs%3D%5C%221.333rem%5C%22+data-line-height-xs%3D%5C%222.000rem%5C%22+data-font-size-sm%3D%5C%221.778rem%5C%22+data-line-height-sm%3D%5C%222.667rem%5C%22%3E%3Cspan+style%3D%5C%22color%3A+rgb(26%2C+27%2C+29)%3B+letter-spacing%3A+0.022rem%3B%5C%22+data-mce-style%3D%5C%22color%3A+%231a1b1d%3B+letter-spacing%3A+0.022rem%3B%5C%22+data-letter-spacing-xs%3D%5C%220.044rem%5C%22+data-letter-spacing-sm%3D%5C%220.022rem%5C%22%3E%3Cstrong%3EFormally+at+%3Cspan+style%3D%5C%22color%3A+rgb(102%2C+102%2C+102)%3B%5C%22+data-mce-style%3D%5C%22color%3A+%23666666%3B%5C%22%3EFE+CREDIT%3C%2Fspan%3E+and%26nbsp%3B%3Ca+data-mce-href%3D%5C%22https%3A%2F%2Fblockchainlabs.asia%2F%5C%22+href%3D%5C%22https%3A%2F%2Fblockchainlabs.asia%2F%5C%22+style%3D%5C%22color%3A+rgb(26%2C+27%2C+29)%3B%5C%22+data-mce-style%3D%5C%22color%3A+rgb(26%2C+27%2C+29)%3B%5C%22%3E%3Cspan+style%3D%5C%22color%3A+rgb(102%2C+102%2C+102)%3B%5C%22+data-mce-style%3D%5C%22color%3A+%23666666%3B%5C%22%3EInfinity+Blockchain+Labs%3C%2Fspan%3E.%EF%BB%BF%3C%2Fa%3E%3C%2Fstrong%3E%3C%2Fspan%3E%3C%2Fh1%3E%22%7D%2C%22module%22%3A%22text%22%2C%22options%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%22padding-bottom%22%3A%221.1111111111111112rem%22%2C%22padding-top%22%3A%220rem%22%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22column_r2a1mwhz0%22%3A%7B%22width%22%3A%7B%22xl%22%3A%2210%22%7D%2C%22options%22%3A%7B%7D%2C%22layout%22%3A%7B%22data-valign%22%3A%22center%22%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22unpublished_changes%22%3Atrue%2C%22content_fuf3hh9ve%22%3A%7B%22content%22%3A%7B%22xl%22%3A%22%22%7D%2C%22module%22%3A%22portfoliogrid%22%2C%22options%22%3A%7B%22title_position%22%3A%22below-left%22%2C%22categories%22%3A%7B%7D%2C%22title_font%22%3A%22font_lla206nf0%22%2C%22category_font%22%3A%22font_lla206nf0%22%2C%22title_fontsize%22%3A%221.1111111111111112rem%22%2C%22category_fontsize%22%3A%220.8888888888888888rem%22%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22section_8hbip9nk7%22%3A%7B%22options%22%3A%7B%7D%2C%22layout%22%3A%7B%22data-column-mode-sm%22%3A%22single%22%2C%22data-column-mode-xs%22%3A%22single%22%2C%22data-layout%22%3A%22fluid%22%7D%2C%22customHeight%22%3A%7B%22xl%22%3A%7B%22height%22%3A%2215rem%22%7D%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%22padding-top%22%3A%222.2222222222222223rem%22%2C%22padding-bottom%22%3A%224.444444444444445rem%22%7D%2C%22xs%22%3A%7B%22padding-bottom%22%3A%222.2222222222222223rem%22%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22content_w2xg6epaa%22%3A%7B%22content%22%3A%7B%22xl%22%3A%22%3Ch4+style%3D%5C%22line-height%3A+1.556rem%3B+font-size%3A+1rem%3B%5C%22+data-mce-style%3D%5C%22line-height%3A+1.556rem%3B+font-size%3A+1rem%3B%5C%22+data-line-height-xl%3D%5C%222.222rem%5C%22+data-font-size-xs%3D%5C%221.000rem%5C%22+data-line-height-xs%3D%5C%221.556rem%5C%22%3E%3Cspan+style%3D%5C%22color%3A+rgb(0%2C+0%2C+0)%3B+letter-spacing%3A+0.022rem%3B%5C%22+data-mce-style%3D%5C%22color%3A+%23000000%3B+letter-spacing%3A+0.022rem%3B%5C%22+data-letter-spacing-xs%3D%5C%220.022rem%5C%22%3ECurrently%2C+available+for+new+opportunities.%3C%2Fspan%3E%3C%2Fh4%3E%22%7D%2C%22module%22%3A%22text%22%2C%22options%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22section_lae76fcs3%22%3A%7B%22options%22%3A%7B%7D%2C%22layout%22%3A%7B%22data-column-mode-sm%22%3A%22single%22%2C%22data-column-mode-xs%22%3A%22single%22%2C%22data-layout%22%3A%22fluid%22%7D%2C%22customHeight%22%3A%7B%22xl%22%3A%7B%22height%22%3A%2215rem%22%7D%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%22padding-top%22%3A%224.444444444444445rem%22%2C%22padding-bottom%22%3A%224.444444444444445rem%22%7D%2C%22xs%22%3A%7B%22padding-top%22%3A%222.2222222222222223rem%22%2C%22padding-bottom%22%3A%222.2222222222222223rem%22%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22column_zsj59du3r%22%3A%7B%22width%22%3A%7B%22xl%22%3A%2212%22%7D%2C%22options%22%3A%7B%7D%2C%22layout%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%22padding-bottom%22%3A%221.7777777777777777rem%22%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22column_6u3uonl7f%22%3A%7B%22width%22%3A%7B%22xl%22%3A%2212%22%7D%2C%22options%22%3A%7B%7D%2C%22layout%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%22padding-bottom%22%3A%221.7777777777777777rem%22%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22content_yi0qvic1x%22%3A%7B%22content%22%3A%7B%22xl%22%3A%22%3Cp+class%3D%5C%22custom_dtlqjd1c1+font_lla206nf0%5C%22%3E%3Cspan+style%3D%5C%22color%3A+rgb(136%2C+136%2C+136)%3B%5C%22+data-mce-style%3D%5C%22color%3A+rgb(136%2C+136%2C+136)%3B%5C%22%3ERPM+(Remote+Patient+Monitoring)+platform%3C%2Fspan%3E%3Cspan+style%3D%5C%22color%3A+rgb(136%2C+136%2C+136)%3B%5C%22+data-mce-style%3D%5C%22color%3A+rgb(136%2C+136%2C+136)%3B%5C%22%3E+for+Health+Care+Providers%3C%2Fspan%3E%3C%2Fp%3E%22%7D%2C%22module%22%3A%22text%22%2C%22options%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22content_riz0k7pzm%22%3A%7B%22content%22%3A%7B%22xl%22%3A%22%3Cp+style%3D%5C%22line-height%3A+1.333rem%3B%5C%22+data-mce-style%3D%5C%22line-height%3A+1.333rem%3B%5C%22+data-line-height-xl%3D%5C%221.333rem%5C%22%3EDr.+Kumo+%5BMobile+app%5D%3Cbr%3E%3C%2Fp%3E%22%7D%2C%22module%22%3A%22text%22%2C%22options%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%22padding-bottom%22%3A%220rem%22%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22content_u7rkl5ryv%22%3A%7B%22content%22%3A%7B%22xl%22%3A%22%3Cp+class%3D%5C%22custom_dtlqjd1c1+font_lla206nf0%5C%22%3E%3Cspan+style%3D%5C%22color%3A+rgb(136%2C+136%2C+136)%3B%5C%22+data-mce-style%3D%5C%22color%3A+rgb(136%2C+136%2C+136)%3B%5C%22%3EPatient+monitoring+Mobile+app+for+Patients%3C%2Fspan%3E%3C%2Fp%3E%22%7D%2C%22module%22%3A%22text%22%2C%22options%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%22padding-bottom%22%3A%220rem%22%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22content_i5wj9vccd%22%3A%7B%22content%22%3A%7B%22xl%22%3A%22%3Cp+style%3D%5C%22line-height%3A+1.333rem%3B%5C%22+data-mce-style%3D%5C%22line-height%3A+1.333rem%3B%5C%22+data-line-height-xl%3D%5C%221.333rem%5C%22%3EDr.+Kumo+%5BWatch+app%5D%3Cbr%3E%3C%2Fp%3E%22%7D%2C%22module%22%3A%22text%22%2C%22options%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22column_o6v6b3get%22%3A%7B%22width%22%3A%7B%22xl%22%3A%2212%22%7D%2C%22options%22%3A%7B%7D%2C%22layout%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%22padding-bottom%22%3A%221.7777777777777777rem%22%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22content_zsb6gsw1r%22%3A%7B%22content%22%3A%7B%22xl%22%3A%22%3Cp+class%3D%5C%22custom_dtlqjd1c1+font_lla206nf0%5C%22%3E%3Cspan+style%3D%5C%22color%3A+rgb(136%2C+136%2C+136)%3B%5C%22+data-mce-style%3D%5C%22color%3A+%23888888%3B%5C%22%3EPatient+monitoring+Samsung+Galaxy+Watch+app+for+Patients%3C%2Fspan%3E%3C%2Fp%3E%22%7D%2C%22module%22%3A%22text%22%2C%22options%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22content_qek6g3kba%22%3A%7B%22content%22%3A%7B%22xl%22%3A%22%3Cp+class%3D%5C%22custom_zwl0qo0jc+font_nbavm6yiz%5C%22%3ECURRENT+SIDE+PROJECTS%3C%2Fp%3E%22%7D%2C%22module%22%3A%22text%22%2C%22options%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%22padding-bottom%22%3A%221.1111111111111112rem%22%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22column_zwa5xlh6r%22%3A%7B%22width%22%3A%7B%22xl%22%3A%2212%22%7D%2C%22options%22%3A%7B%7D%2C%22layout%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22content_yfk2o38c2%22%3A%7B%22content%22%3A%7B%22xl%22%3A%22%3Cp+style%3D%5C%22line-height%3A+1.333rem%3B+font-size%3A+1.111rem%3B%5C%22+data-mce-style%3D%5C%22line-height%3A+1.333rem%3B+font-size%3A+1.111rem%3B%5C%22+data-line-height-xl%3D%5C%221.333rem%5C%22+data-font-size-xl%3D%5C%221.111rem%5C%22%3E%3Cspan+class%3D%5C%22font_lla206nf0%5C%22%3EDr.+Kumo+%5BWebsite%5D%3C%2Fspan%3E%3Cbr%3E%3C%2Fp%3E%22%7D%2C%22module%22%3A%22text%22%2C%22options%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%22padding-bottom%22%3A%220rem%22%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22content_qodwabe68%22%3A%7B%22content%22%3A%7B%22xl%22%3A%22%3Cp+style%3D%5C%22line-height%3A+1.333rem%3B%5C%22+data-mce-style%3D%5C%22line-height%3A+1.333rem%3B%5C%22+data-line-height-xl%3D%5C%221.333rem%5C%22%3EBillease+%5BMobile+app%5D%3C%2Fp%3E%22%7D%2C%22module%22%3A%22text%22%2C%22options%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22column_3tfj74559%22%3A%7B%22width%22%3A%7B%22xl%22%3A%2212%22%7D%2C%22options%22%3A%7B%7D%2C%22layout%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%22padding-bottom%22%3A%221.7777777777777777rem%22%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22content_ynk2qojvc%22%3A%7B%22content%22%3A%7B%22xl%22%3A%22%3Cp+class%3D%5C%22custom_dtlqjd1c1+font_lla206nf0%5C%22%3E%3Cspan+style%3D%5C%22color%3A+rgb(136%2C+136%2C+136)%3B%5C%22+data-mce-style%3D%5C%22color%3A+%23888888%3B%5C%22%3EConsumer+loan+Mobile+app%3C%2Fspan%3E%3C%2Fp%3E%22%7D%2C%22module%22%3A%22text%22%2C%22options%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%22padding-bottom%22%3A%220rem%22%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22section_u6pjka8tj%22%3A%7B%22options%22%3A%7B%7D%2C%22layout%22%3A%7B%22data-column-mode-sm%22%3A%22single%22%2C%22data-column-mode-xs%22%3A%22single%22%2C%22data-layout%22%3A%22fluid%22%7D%2C%22customHeight%22%3A%7B%22xl%22%3A%7B%22height%22%3A%2215rem%22%7D%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%22padding-top%22%3A%220rem%22%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22section_4oyl7zz8h%22%3A%7B%22options%22%3A%7B%7D%2C%22layout%22%3A%7B%22data-column-mode-sm%22%3A%22single%22%2C%22data-column-mode-xs%22%3A%22single%22%7D%2C%22customHeight%22%3A%7B%22xl%22%3A%7B%22height%22%3A%2215rem%22%7D%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22column_bx3ggw0k7%22%3A%7B%22width%22%3A%7B%22xl%22%3A12%7D%2C%22options%22%3A%7B%7D%2C%22layout%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%22padding-top%22%3A%224.444444444444445rem%22%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%2C%22type%22%3A%22spacer%22%7D%2C%22content_aoyy83i4o%22%3A%7B%22content%22%3A%7B%22xl%22%3A%22%22%7D%2C%22module%22%3A%22spacer%22%2C%22options%22%3A%7B%22height%22%3A%220.05555555555555555rem%22%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22column_9x87max31%22%3A%7B%22width%22%3A%7B%22xl%22%3A%2212%22%7D%2C%22options%22%3A%7B%7D%2C%22layout%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22content_svw2lvlfg%22%3A%7B%22content%22%3A%7B%22xl%22%3A%22%22%7D%2C%22module%22%3A%22spacer%22%2C%22options%22%3A%7B%22height%22%3A%220.05555555555555555rem%22%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22section_9tu2ore4g%22%3A%7B%22options%22%3A%7B%7D%2C%22layout%22%3A%7B%22data-column-mode-sm%22%3A%22single%22%2C%22data-column-mode-xs%22%3A%22single%22%2C%22data-layout%22%3A%22fluid%22%7D%2C%22customHeight%22%3A%7B%22xl%22%3A%7B%22height%22%3A%2215rem%22%7D%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22column_dy5xntu1m%22%3A%7B%22width%22%3A%7B%22xl%22%3A12%7D%2C%22options%22%3A%7B%7D%2C%22layout%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22content_4t85wphhs%22%3A%7B%22content%22%3A%7B%22xl%22%3A%22%22%7D%2C%22module%22%3A%22spacer%22%2C%22options%22%3A%7B%22height%22%3A%220.05555555555555555rem%22%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22section_u93u5ndin%22%3A%7B%22options%22%3A%7B%7D%2C%22layout%22%3A%7B%22data-column-mode-sm%22%3A%22single%22%2C%22data-column-mode-xs%22%3A%22single%22%2C%22data-layout%22%3A%22fluid%22%7D%2C%22customHeight%22%3A%7B%22xl%22%3A%7B%22height%22%3A%2215rem%22%7D%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22column_oxx99i9xm%22%3A%7B%22width%22%3A%7B%22xl%22%3A12%7D%2C%22options%22%3A%7B%7D%2C%22layout%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%2C%22column_iflz4npe7%22%3A%7B%22width%22%3A%7B%22xl%22%3A12%7D%2C%22options%22%3A%7B%7D%2C%22layout%22%3A%7B%7D%2C%22styles%22%3A%7B%22xl%22%3A%7B%7D%7D%2C%22motions%22%3A%7B%22active%22%3A%7B%7D%2C%22start%22%3A%7B%7D%2C%22end%22%3A%7B%7D%7D%7D%7D&post_id=106&post_settings=%7B%22thumbnail%22%3A%7B%22image%22%3A%22%22%2C%22width%22%3A%224%22%2C%22hover_visibility%22%3A%22disabled%22%7D%2C%22meta%22%3A%7B%22post_title%22%3A%22Work%22%2C%22permalink%22%3A%22work%22%2C%22navbar_visibility%22%3A%22true%22%2C%22navbar%22%3A%22nav_9ynafsmff%22%2C%22footer%22%3A%220%22%2C%22rt_image_size%22%3A%22original%22%7D%2C%22seo%22%3A%7B%7D%7D&post_type=page&save_mode=draft&change_status=no&post_password=&custom_colors=%5B%22%23000000%22%2C%22%23ff0000%22%2C%22%23111111%22%2C%22%231a1b1d%22%5D&images=%7B%22383%22%3A%7B%22url%22%3A%22https%3A%2F%2Fxxxxx.com%2Fwp-content%2Fuploads%2F2023%2F07%2Ffavicon.png%22%2C%22width%22%3A34%2C%22height%22%3A34%7D%7D&editor_notices=%7B%22section_module%22%3A%22unread%22%2C%22text_module%22%3A%22read%22%2C%22motions%22%3A%22read%22%7D&masterblocks=%7B%7D&presets=false
--01f57a56-F--
HTTP/1.1 403 Forbidden
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Content-Length: 280
Connection: close
Content-Type: text/html; charset=iso-8859-1
Date: Sun, 15 Oct 2023 15:15:41 GMT
Server: Apache/2.4.55 (Ubuntu)
--01f57a56-E--
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access this resource.</p>
<hr>
<address>Apache/2.4.55 (Ubuntu) Server at xxxxx.com Port 443</address>
</body></html>
--01f57a56-H--
Message: Warning. detected XSS using libinjection. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "56"] [id "941100"] [msg "XSS Attack Detected via libinjection"] [data "Matched Data: XSS data found within ARGS:content: {\x22order\x22:{\x22cover\x22:{\x22row_cover\x22:{\x22columns\x22:{}}},\x22section_4oyl7zz8h\x22:{\x22row_ar3ffrmrd\x22:{\x22columns\x22:{\x22column_bx3ggw0k7\x22:[]}}},\x22section_u6pjka8tj\x22:{\x22row_2ivolrelu\x22:{\x22columns\x22:{\x22column_r2a1mwhz0\x22:[\x22content_yob9mq8jz\x22,\x22content_w2xg6epaa\x22]}}},\x22section_8hbip9nk7\x22:{\x22row_2rxwoi2lm\x22:{\x22columns\x22:{\x22column_9x87max31\x22:[\x22content_aoyy83i4o\x22]}},\x22row_8qsrgd2nf\x..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/242"]
Message: Warning. Pattern match "(?i:(?:<\\w[\\s\\S]*[\\s\\/]|['\"](?:[\\s\\S]*[\\s\\/])?)(?:on(?:d(?:e(?:vice(?:(?:orienta|mo)tion|proximity|found|light)|livery(?:success|error)|activate)|r(?:ag(?:e(?:n(?:ter|d)|xit)|(?:gestur|leav)e|start|drop|over)|op)|i(?:s(?:c(?:hargingtimechange ..." at ARGS:content. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "200"] [id "941160"] [msg "NoScript XSS InjectionChecker: HTML Injection"] [data "Matched Data: \x22order\x22:{\x22cover\x22:{\x22row_cover\x22:{\x22columns\x22:{}}},\x22section_4oyl7zz8h\x22:{\x22row_ar3ffrmrd\x22:{\x22columns\x22:{\x22column_bx3ggw0k7\x22:[]}}},\x22section_u6pjka8tj\x22:{\x22row_2ivolrelu\x22:{\x22columns\x22:{\x22column_r2a1mwhz0\x22:[\x22content_yob9mq8jz\x22,\x22content_w2xg6epaa\x22]}}},\x22section_8hbip9nk7\x22:{\x22row_2rxwoi2lm\x22:{\x22columns\x22:{\x22column_9x87max31\x22:[\x22content_aoyy83i4o\x22]}},\x22row_8qsrgd2nf\x22:{\x22columns\x22:{\x22column_iflz4..."] [severity "CRITICAL"] [ver "OWASP_CRS/3
Message: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"]
Message: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "92"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=10,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [ver "OWASP_CRS/3.3.4"] [tag "event-correlation"]
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 70.19.54.122] ModSecurity: Warning. detected XSS using libinjection. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "56"] [id "941100"] [msg "XSS Attack Detected via libinjection"] [data "Matched Data: XSS data found within ARGS:content: {\\\\x22order\\\\x22:{\\\\x22cover\\\\x22:{\\\\x22row_cover\\\\x22:{\\\\x22columns\\\\x22:{}}},\\\\x22section_4oyl7zz8h\\\\x22:{\\\\x22row_ar3ffrmrd\\\\x22:{\\\\x22columns\\\\x22:{\\\\x22column_bx3ggw0k7\\\\x22:[]}}},\\\\x22section_u6pjka8tj\\\\x22:{\\\\x22row_2ivolrelu\\\\x22:{\\\\x22columns\\\\x22:{\\\\x22column_r2a1mwhz0\\\\x22:[\\\\x22content_yob9mq8jz\\\\x22,\\\\x22content_w2xg6epaa\\\\x22]}}},\\\\x22section_8hbip9nk7\\\\x22:{\\\\x22row_2rxwoi2lm\\\\x22:{\\\\x22columns\\\\x22:{\\\\x22column_9x87max31\\\\x22:[\\\\x22content_aoyy83i4o\\\\x22]}},\\\\x22row_8qsrgd2nf\\\\x..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/242"] [hostname "xxxxx.com"] [uri "/wp-json/semplice/v1/editor/save"] [unique_id "ZSwCHVXBaCfK8T-1Jp1ISgAARCM"]
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 70.19.54.122] ModSecurity: Warning. Pattern match "(?i:(?:<\\\\\\\\w[\\\\\\\\s\\\\\\\\S]*[\\\\\\\\s\\\\\\\\/]|['\\\\"](?:[\\\\\\\\s\\\\\\\\S]*[\\\\\\\\s\\\\\\\\/])?)(?:on(?:d(?:e(?:vice(?:(?:orienta|mo)tion|proximity|found|light)|livery(?:success|error)|activate)|r(?:ag(?:e(?:n(?:ter|d)|xit)|(?:gestur|leav)e|start|drop|over)|op)|i(?:s(?:c(?:hargingtimechange ..." at ARGS:content. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "200"] [id "941160"] [msg "NoScript XSS InjectionChecker: HTML Injection"] [data "Matched Data: \\\\x22order\\\\x22:{\\\\x22cover\\\\x22:{\\\\x22row_cover\\\\x22:{\\\\x22columns\\\\x22:{}}},\\\\x22section_4oyl7zz8h\\\\x22:{\\\\x22row_ar3ffrmrd\\\\x22:{\\\\x22columns\\\\x22:{\\\\x22column_bx3ggw0k7\\\\x22:[]}}},\\\\x22section_u6pjka8tj\\\\x22:{\\\\x22row_2ivolrelu\\\\x22:{\\\\x22columns\\\\x22:{\\\\x22column_r2a1mwhz0\\\\x22:[\\\\x22content_yob9mq8jz\\\\x22,\\\\x22content_w2xg6epaa\\\\x22]}}},\\\\x22section_8hbip9nk7\\\\x22:{\\\\x22row_2rxwoi2lm\\\\x22:{\\\\x22columns\\\\x22:{\\\\x22column_9x87max31\\\\x22:[\\\\x22content_aoyy83i4o\\\\x22]}},\\\\x22row_8qsrgd2nf\\\\x22:{\\\\x22columns\\\\x22:{\\\\x22column_iflz4..."] [severity "CRITICAL"] [ver "OWASP_CRS/3 [hostname "xxxxx.com"] [uri "/wp-json/semplice/v1/editor/save"] [unique_id "ZSwCHVXBaCfK8T-1Jp1ISgAARCM"]
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 70.19.54.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "xxxxx.com"] [uri "/wp-json/semplice/v1/editor/save"] [unique_id "ZSwCHVXBaCfK8T-1Jp1ISgAARCM"]
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 70.19.54.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "92"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=10,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [ver "OWASP_CRS/3.3.4"] [tag "event-correlation"] [hostname "xxxxx.com"] [uri "/wp-json/semplice/v1/editor/save"] [unique_id "ZSwCHVXBaCfK8T-1Jp1ISgAARCM"]
Action: Intercepted (phase 2)
Stopwatch: 1697382941587693 60723 (- - -)
Stopwatch2: 1697382941587693 60723; combined=31249, p1=1082, p2=29731, p3=0, p4=0, p5=435, sr=185, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.7 (http://www.modsecurity.org/); OWASP_CRS/3.3.4.
Server: Apache/2.4.55 (Ubuntu)
Engine-Mode: "ENABLED"
--01f57a56-Z--
Try this:
SecRule REQUEST_FILENAME "@endsWith /wp-json/semplice/v1/editor/save" \
"id:9990115,\
phase:1,\
pass,\
t:none,\
nolog,\
ctl:ruleRemoveTargetById=941100;ARGS:content,\
ctl:ruleRemoveTargetById=941160;ARGS:content"
That works. Thanks!
@paulschreiber Cool, feel free to close this issue if everything is ok. Thank you.
Summary
When attempting to save edits using the Semplice theme (
/wp-admin/admin.php?page=semplice-admin&ref=edit.php%3Fpost_type%3Dpage#edit/106
), 12 errors are displayed:Eight errors like this:
One like this:
One like this:
One like this:
One like this:
Full log
HTTP Payload
Copy as cURL
Config