Cloudflare JavaScript Challenge Loop

Cloudflare Support identified that a bad release on their end may have triggered the JS Challenge Loops. They have fixed the issue and this appears to be resolved.

The Cloudflare JavaScript Challenge, which protects your WordPress login page from brute force attacks, seems to be going a bit wonky today. You usually only see this once per day while logging into WordPress. And it asks you to wait up to 5 seconds while it checks your browser.

It seems to be stuck in some sort of loop intermittently on some sites. We’ve contacted our Enterprise support team to investigate.

For now, we’ve disabled this feature for the login pages.

We still have rate-limited turned on to provide protection on these pages.

So, if you were having trouble logging into your site because the Cloudflare check page wouldn’t go away, you should be able to log in now.

We’ll enable this feature as soon as we’re able to.

We have re-enabled the Challenge JavaScript on login pages and the redirect loop no longer appears to be an issue. We’ll continue monitoring, and in the meantime, if you have any trouble logging in to your site please contact us.