Practical guide

n8n webhook works in test mode but fails from your WordPress form

Trace a WordPress form request through n8n's production webhook. Check the saved URL, publishing state, request method and execution evidence.

Blue Ethernet cables connected to a network switch
Illustrative photograph: Scott Rodgerson / Unsplash.

If your WordPress form reaches n8n while you are listening for a test event but stops working later, begin with the destination saved in the form integration. A successful editor test does not prove that the website is using a registered production endpoint.

This guide provides a diagnostic worksheet, not a report of a customer installation. The example identifiers are synthetic. Check the controls available in your installed n8n and form-plugin versions before making changes.

Separate the test listener from the production workflow

n8n supplies separate test and production webhook URLs. The test listener is temporary; production requires the workflow to be saved and published. Current documentation uses “Publish”; older interfaces may use an activation control. Production requests are investigated through execution history rather than expecting their data to appear in the editor canvas. See n8n’s workflow-development documentation.

Copy the production URL shown by the actual node. Do not construct it from memory or simply remove a word from the test URL. A custom path, reverse proxy or instance address can make an assumed URL wrong.

Write down the request contract before testing

Use this worksheet for one form and one workflow. Keep credentials and full private endpoint addresses out of shared notes.

  • Form and page: a named test form on an isolated page.
  • Destination: the production URL copied from the intended node.
  • Method: the method the form integration actually sends.
  • Body: expected field names, content type and required values.
  • Authentication: the configured scheme and where the sender provides it.
  • Expected result: one accepted execution and one synthetic destination record.

For the worked example, use submission ID demo-20261023-01, name Example Tester and address tester@example.com. Route any notifications to a controlled test destination. A recognisable marker lets you distinguish this request from old runs and unrelated traffic.

Twisted network cables against a dark background
Illustrative stock photograph, not a WordPress or n8n screenshot. Steve A Johnson / Unsplash. Photographer and source.

Follow the request across three boundaries

  1. The form sends. Submit the test form once. Inspect the integration’s available request log. A browser network panel alone may not show a webhook sent by the WordPress server.
  2. n8n receives. Look for the marker in the correct workflow’s executions. If saved-execution settings omit the relevant runs, record that evidence gap instead of treating an empty list as proof that nothing arrived.
  3. The destination saves. Find the marker in the test destination and retain its record ID. An HTTP success response is evidence of acknowledgement, not necessarily completion of every later action.

The first missing boundary narrows the investigation. No sender evidence means you first inspect the form action and plugin logs. Sender evidence without a matching execution points toward the endpoint, workflow state, method, access control or network route. A received execution without the expected record points toward the workflow’s later nodes.

Use the response as a clue, not a complete diagnosis

  • 404: compare the saved endpoint with the node’s production URL and verify the workflow is published. A proxy can also produce a 404, so identify which layer returned it.
  • 401 or 403: compare the sender’s authentication with the node and any upstream access rules. Do not remove protection to make the status turn green.
  • Method mismatch: opening a URL in a browser usually sends GET, which does not reproduce a form integration sending POST.
  • Timeout: inspect execution and destination evidence before retrying. The business action may already have happened.
  • Success with no destination record: inspect filters, field mapping and failed downstream nodes.

n8n documents webhook method handling, path conflicts and other failure cases. Use the section matching the observed symptom rather than changing every setting together. Webhook common issues.

Change one variable and repeat the same small test

Suppose the saved form action points to the test URL and the listener is no longer running. Replace that destination with the copied production URL, save the form configuration and verify the workflow’s published state. Submit a new marker, demo-20261023-02. This is an illustrative recovery sequence, not a measured result from our infrastructure.

Record what changed and compare the two markers. If the second request still fails, keep the corrected URL and investigate the next missing boundary. Repeatedly turning unrelated settings on and off destroys the evidence needed to explain the failure.

Keep a short handover note

Record the form, workflow owner, method, field contract, authentication requirement and destination used for verification. Include where execution evidence is retained and who handles failures. Repeat the test after a form-plugin update or workflow change that affects this contract.

For recovery after uncertain writes, read our guide to retries and duplicate records. That is a separate problem: a request can reach the correct endpoint and still create duplicate effects if recovery is poorly designed.

For a site-specific implementation, describe the form, tools and required outcome when enquiring about custom development. Compatibility and scope need to be checked for the actual installation.

Sources and preparation

Prepared with AI assistance using official documentation consulted on 23 October 2026. Examples are illustrative; no customer test or human approval is claimed. For corrections, use the author’s profile.

Illustrative cover photograph: Scott Rodgerson / Unsplash.

Quick answers

Frequently asked questions

Do I need to keep the n8n editor open?

A saved and published production webhook is designed to run when called by an external service. The temporary test listener is a separate development mechanism.

Why does opening the webhook URL in a browser fail?

The browser request may use GET while the form integration sends POST. Test the configured method, body and authentication together.

Does a success response prove that the lead was saved?

No. Check the workflow execution and the destination record. Acknowledgement and completion can be different stages.

Martin Iliev, founder of Set It Once

About the author

Martin builds Set It Once to help people spend less time on repeated work. His guides explain what you can try, how to check the result and where the limits are.

More about Martin

All articles

Privacy & cookie notice

Privacy & cookies

Updated 5 October 2026. This notice covers the public Set It Once marketing website and its enquiry form.

Who is responsible?

Martin Iliev operates Set It Once and is responsible for the personal data collected through this website. For privacy questions or to exercise your rights, email miliev@setitonce.com or use the contact form. You do not need to provide a website address for a privacy request.

What we collect and why

When you send an enquiry, we receive your name, email address, optional website address and message. We use these to respond and take steps towards a possible service agreement at your request (GDPR Article 6(1)(b)). Security and abuse prevention rely on our legitimate interest in protecting the website (Article 6(1)(f)). The form temporarily uses a keyed hash of your IP address to limit repeated submissions for 60 seconds. Hosting infrastructure processes connection information such as IP addresses and requested URLs to deliver and protect the site.

There is no marketing subscription, sale of enquiry data or automated decision-making about you. Do not send passwords, API keys or sensitive client information.

Who can access the information?

Enquiries are stored in the private WordPress administration area and accessed by authorised administrators. Namecheap provides our website and email hosting and processes data to operate these services. Email addressed to miliev@setitonce.com is also forwarded to a Gmail account operated by Google so Martin can receive and handle correspondence. Their privacy notices explain their processing: Namecheap and Google. External links such as LinkedIn load only when you follow them; those websites have their own privacy notices.

International processing

Namecheap and Google may process information outside your country, including in the United States. Namecheap describes the contractual safeguards for covered services in its Data Processing Addendum. Google describes processing locations and safeguards in its Privacy Policy. Contact us if you need details about the processing of your enquiry.

How long we keep information

We retain enquiries while handling the request and necessary follow-up. We review enquiries after six months and remove closed enquiries that are no longer needed. Records required for an active service, a legal obligation or a legal claim may be retained for that purpose. This review covers WordPress records and related email copies; it is a manual review, not automatic deletion. Hosting logs and backups have separate retention arrangements with the provider. You can ask us for information about your particular record or request deletion.

Your rights

You may request access, correction, erasure, restriction, objection and portability where applicable. You may withdraw optional browser-storage consent through Privacy settings without affecting earlier lawful processing. We normally respond to rights requests within one month; legal exceptions may apply. You may complain to your local supervisory authority, including the Bulgarian Commission for Personal Data Protection.

Cookies and browser storage

Google Analytics 4 is optional and loads only after your explicit consent. It measures page visits and basic engagement, using browser/device information and an online identifier. Google processes the network address to provide the service; GA4 does not log or store individual IP addresses. We do not enable advertising features, Google Signals or automatic form tracking. Page URLs and referrers sent by this website exclude query strings and fragments; form contents are not sent. No third-party geolocation service is used. Fonts and images are hosted on this website. Necessary WordPress authentication and security cookies may be used when you sign in. These are separate from optional analytics and currency memory.

LocalStorage is browser storage rather than a cookie; the same preference controls cover it. Automatic currency suggestion uses your browser time zone locally. It is approximate and is not sent to a geolocation provider. If browser storage is unavailable, your choices apply only to the current page.

Online payment processing is not active on this page. Payment-provider information and purchase terms will be added before checkout is enabled.