OnlyTheOnline
Log in
Get Help Now
errorWordfence•errorerrorinfoajaxsecurityfirewallwarningvalidation•labelCommon•warningModerate

Wordfence error: Invalid nonce

Wordfence validates the nonce that WordPress creates for each request. When the token is older than the allowed window the validation fails and Wordfence returns an error.

The failure occurs because the nonce no longer matches the current user session or because the request is blocked before it reaches WordPress.

Symptoms

[dashicons-warning]
Red error banner
The page shows “Wordfence error: Invalid nonce”.
[dashicons-admin-site]
Form submission stops
Submitting a form reloads the page with the error message.
[dashicons-admin-generic]
AJAX request fails
Network tab shows a 403 response with {"error":"Invalid nonce"}.

Common Causes

Expired nonce
Nonce lives for 24 hours. After that WordPress rejects it.
Page caching
Full‑page cache serves an old HTML page that still contains the stale nonce.
Multiple open tabs
Each tab creates its own nonce. Submitting from an older tab sends an out‑of‑date token.
Server time drift
Clock off by more than two hours breaks the nonce timestamp check.
Firewall blocking admin‑ajax.php
Wordfence firewall blocks the request that carries the nonce.
Need this fixed right now?

Don't waste your day debugging. Our experts can Fix your issues in under 2 hours.*

Get this issue fixed

Success Rate

100% Guaranteed

Starting from

$35 /hour
99+

Trusted by Business Owners

“I spent 3 days trying to fix the Elementor loading loop. These guys fixed it in 20 minutes. Lifesavers!”

— Sarah J., Web Designer

Related Issues

contact_mail
Contact Form 7: REST API request failed: 503 Service Unavailable
A 503 Service Unavailable response stops Contact Form 7 from sending data...
apiREST APIerror503descriptioncontact-form-7
contact_mail
Contact Form 7: REST API request failed: 429 Too Many Requests

The form tries to send data through the WordPress REST API. The...

apiREST APIerrorerrorsecurityfirewalldescriptioncontact-form-7settingsserver_configuration
contact_mail
Contact Form 7: REST API request failed: 401 Unauthorized

The form tries to send data via the WordPress REST API. The...

apiREST APIadmin_panel_settingspermissionsdescriptioncontact-form-7lock401
contact_mail
Contact Form 7: File upload error: temporary directory missing

The error appears when Contact Form 7 cannot locate a writable temporary...

codePHPcloud_offupload erroradmin_panel_settingspermissionsdescriptiontemporary filedescriptioncontact-form-7
contact_mail
Contact Form 7: Mail (2) sending failed: PHP mail() function disabled

Contact Form 7 reports a failure for Mail (2) when the PHP...

codePHPerrorerrordescriptioncontact-form-7mailMailsettingsserver_configuration
contact_mail
Contact Form 7: Mail (2) sending failed: SSL certificate verification failed

Contact Form 7 reports a failure when trying to send the secondary...

errorerrorlocksslcodecURLdescriptioncontact-form-7