This message is from Cloudflare, not WordPress. It means Cloudflare temporarily blocked that visitor’s IP address because it detected too many requests in a short window. The visitor’s account and password are completely unaffected. The visitor can usually get access again by: turning off any VPN they are using and reloading, switching to a different network such as mobile data, or simply waiting 5 to 15 minutes for the block to expire on its own. If the problem recurs, the rate-limit settings in the site’s Cloudflare account may be too aggressive and can be adjusted to avoid catching normal visitors. We will need to look at the Cloudflare security logs using the Ray ID shown on the error page to identify which rule triggered it.