COMODO WAF Vulnerability In PHP (CVE-2012-1823)

Hello Julaj-

Thanks for reaching out, I’m sorry to hear about the trouble with the Comodo WAF.

A WAF is a “web-application firewall,” and it’s meant to protect your website from potentially malicious actors.

This specific error has two possible ways you might be able to fix it.

First, I’d strongly recommend updating your WordPress hosting to a version of PHP 7.3 or higher.

If this error is correct, it looks like you may be using a PHP version lower than 5.4.2. PHP 5.4.X stopped receiving updates in late 2015, over 6 years ago.

Your hosting provider should be able to assist you with the upgrade, or you can consider switching to one of our WordPress Hosting partners, who all offer up-to-date versions of PHP.

The other possible way to fix this is through your theme, “icos.” I wasn’t able to locate the developers of this theme on WordPress.org or through a google search, but the root cause of this error is that something in your theme is calling the themify.woff font using a non-standard query string without an “=” equals sign. Instead, it’s using themify.woff?-fvbane, which looks like it might just be a simple typo using the “-” minus sign instead of the “=” equal sign.