[ad_1]
After upgrading the to the latest version, the site does not allow people to login, it will simply redirect back to login page. I was able to log in after disable Wordfence (by changing the wordfence folder name using file manager, as I cannot deactivate Wordfence under Plugins for some reason).
With the users who already logged in, they will not able to make any changes to the site. WordPress shows the link is expired error.
Console log shows 403 error.
I suspect the latest update on nonce is at fault.
Rolling back to 7.1.7 solves the problem.