Wordfence attempts to contact its cloud API during a scan. If the request fails, Wordfence records a 500 response.
Common triggers include an outdated auto_prepend_file entry, low PHP memory limits, or a host firewall which blocks the API request. Corrupted plugin files or mismatched PHP version also produce fatal errors which result in the 500 code.