{"id":359,"date":"2025-12-28T08:28:51","date_gmt":"2025-12-28T07:28:51","guid":{"rendered":"https:\/\/mybox.com\/help\/?post_type=manual_kb&#038;p=359"},"modified":"2026-06-02T03:55:00","modified_gmt":"2026-06-02T01:55:00","slug":"how-do-i-fix-a-403-forbidden-error-in-wordpress","status":"publish","type":"manual_kb","link":"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-do-i-fix-a-403-forbidden-error-in-wordpress\/","title":{"rendered":"How do I fix a 403 Forbidden error in WordPress?"},"content":{"rendered":"\n<div class=\"translation-block translation-block-merged\">\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_86 ez-toc-wrap-left counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-do-i-fix-a-403-forbidden-error-in-wordpress\/#Context\" >Context<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-do-i-fix-a-403-forbidden-error-in-wordpress\/#What_the_error_means\" >What the error means<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-do-i-fix-a-403-forbidden-error-in-wordpress\/#Most_common_causes\" >Most common causes<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-do-i-fix-a-403-forbidden-error-in-wordpress\/#1_Incorrect_file_or_folder_permissions\" >1. Incorrect file or folder permissions<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-do-i-fix-a-403-forbidden-error-in-wordpress\/#2_Corrupted_or_restrictive_htaccess_rules\" >2. Corrupted or restrictive .htaccess rules<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-do-i-fix-a-403-forbidden-error-in-wordpress\/#3_Security_rules_or_firewall_blocking_access\" >3. Security rules or firewall blocking access<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-do-i-fix-a-403-forbidden-error-in-wordpress\/#4_WordPress_security_plugins\" >4. WordPress security plugins<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-do-i-fix-a-403-forbidden-error-in-wordpress\/#5_DNS_or_hosting-level_restrictions\" >5. DNS or hosting-level restrictions<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-do-i-fix-a-403-forbidden-error-in-wordpress\/#How_to_diagnose_the_issue\" >How to diagnose the issue<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-do-i-fix-a-403-forbidden-error-in-wordpress\/#1_Check_if_the_error_is_consistent\" >1. Check if the error is consistent<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-do-i-fix-a-403-forbidden-error-in-wordpress\/#2_Check_server_logs_or_hosting_panel\" >2. Check server logs or hosting panel<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-do-i-fix-a-403-forbidden-error-in-wordpress\/#3_Test_without_htaccess_rules\" >3. Test without .htaccess rules<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-do-i-fix-a-403-forbidden-error-in-wordpress\/#4_Disable_security_plugins_if_accessible\" >4. Disable security plugins (if accessible)<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-do-i-fix-a-403-forbidden-error-in-wordpress\/#Practical_implications\" >Practical implications<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-do-i-fix-a-403-forbidden-error-in-wordpress\/#Summary\" >Summary<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Context\"><\/span>Context<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A 403 Forbidden error in WordPress means the server understood the request but refuses to grant access. The issue is not caused by WordPress itself, but by server-level restrictions, security rules, file permissions, or firewall configurations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In mybox, this type of error often appears when access to a page, file, or admin area is blocked by security settings or incorrect server configuration.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"What_the_error_means\"><\/span>What the error means<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<\/div>\n\n<div id=\"mybox-4008986600\" class=\"mybox-content mybox-entity-placement\"><div class=\"early-access-banner-inpost\">\r\n  <div class=\"banner-left-inpost\">\r\n    <div class=\"icon-box-inpost\">\r\n      <img decoding=\"async\" src=\"https:\/\/mybox.com\/help\/wp-content\/uploads\/2026\/02\/square-info-icon.svg\" alt=\"Info\">\r\n    <\/div>\r\n    <div class=\"text-box-inpost\">\r\n      <span class=\"label-inpost\"><span class=\"translation-block translation-block-banner-text\">Early access<\/span><\/span>\r\n      <h4><span class=\"translation-block translation-block-banner-text\">Still need help?<\/span><\/h4>\r\n      <p><span class=\"translation-block translation-block-banner-text\">Contact our customer service team.<\/span><\/p>\r\n    <\/div>\r\n  <\/div>\r\n\r\n  <div class=\"banner-right-inpost\">\r\n    <a href=\"https:\/\/panel.mybox.com\/helpdesk2\/v\/list\/\" class=\"banner-button-inpost\"><span class=\"translation-block translation-block-banner-text\">Message us<\/span><\/a>\r\n  <\/div>\r\n<\/div><\/div>\n\n<div class=\"translation-block translation-block-merged\"><p class=\"wp-block-paragraph\">A 403 error indicates that access to the requested resource is denied. This can happen on:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>website pages<\/li>\n\n\n\n<li>wp-admin login<\/li>\n\n\n\n<li>specific files or directories<\/li>\n\n\n\n<li>REST API or AJAX requests<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The website may still be online, but certain parts are blocked.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Most_common_causes\"><\/span>Most common causes<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"1_Incorrect_file_or_folder_permissions\"><\/span>1. Incorrect file or folder permissions<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Files and directories must have correct permissions:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>folders: 755<\/li>\n\n\n\n<li>files: 644<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Incorrect permissions can prevent the server from reading website files.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"2_Corrupted_or_restrictive_htaccess_rules\"><\/span>2. Corrupted or restrictive .htaccess rules<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The <code>.htaccess<\/code> file controls access rules on Apache\/LiteSpeed servers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A misconfiguration can:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>block access to the entire site<\/li>\n\n\n\n<li>restrict specific directories<\/li>\n\n\n\n<li>trigger a 403 error unexpectedly<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"3_Security_rules_or_firewall_blocking_access\"><\/span>3. Security rules or firewall blocking access<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A 403 can be triggered by server-level protection systems such as:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>brute-force protection on login pages<\/li>\n\n\n\n<li>WAF (Web Application Firewall) rules<\/li>\n\n\n\n<li>IP or country-based restrictions<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">For example, repeated failed login attempts can temporarily block access to wp-admin.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"4_WordPress_security_plugins\"><\/span>4. WordPress security plugins<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Security plugins may block:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>suspicious requests<\/li>\n\n\n\n<li>repeated login attempts<\/li>\n\n\n\n<li>specific IP addresses or bots<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This can result in a 403 error even when the site is functioning normally.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"5_DNS_or_hosting-level_restrictions\"><\/span>5. DNS or hosting-level restrictions<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">In some cases, the hosting environment may block access due to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>misconfigured DNS<\/li>\n\n\n\n<li>suspended hosting services<\/li>\n\n\n\n<li>external firewall rules<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_to_diagnose_the_issue\"><\/span>How to diagnose the issue<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"1_Check_if_the_error_is_consistent\"><\/span>1. Check if the error is consistent<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Try opening:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>homepage<\/li>\n\n\n\n<li>wp-admin<\/li>\n\n\n\n<li>a specific page<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This helps determine if the block is global or partial.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"2_Check_server_logs_or_hosting_panel\"><\/span>2. Check server logs or hosting panel<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Logs usually indicate:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>blocked IP address<\/li>\n\n\n\n<li>denied file access<\/li>\n\n\n\n<li>security rule triggering the block<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"3_Test_without_htaccess_rules\"><\/span>3. Test without .htaccess rules<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Temporarily renaming <code>.htaccess<\/code> can help identify if it is causing the issue.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"4_Disable_security_plugins_if_accessible\"><\/span>4. Disable security plugins (if accessible)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If the admin panel is reachable, disabling security plugins may help isolate the cause.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Practical_implications\"><\/span>Practical implications<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A 403 error is a server-side block, not a browser issue<\/li>\n\n\n\n<li>The website may appear online but be partially inaccessible<\/li>\n\n\n\n<li>The cause is usually configuration or security-related, not WordPress core<\/li>\n\n\n\n<li>Fixing it typically requires file permission, firewall, or rule adjustments<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Summary\"><\/span>Summary<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A WordPress 403 error occurs when the server denies access to a resource due to permissions or security rules. The most common causes are incorrect file permissions, .htaccess configuration issues, or security\/firewall restrictions. Once the blocking rule is identified and corrected, access is restored.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n<\/div>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"template":"","format":"standard","manualknowledgebasecat":[25,58],"manual_kb_tag":[3485,3486,3487,190,441,718,1162,1342,2486,2682,3483,3484],"class_list":["post-359","manual_kb","type-manual_kb","status-publish","format-standard","hentry","manualknowledgebasecat-hosting","manualknowledgebasecat-web-applications-cms","manual_kb_tag-brute-force-attack","manual_kb_tag-htaccess-rule","manual_kb_tag-security-hold","manual_kb_tag-wordpress","manual_kb_tag-brute-force-protection","manual_kb_tag-htaccess-file","manual_kb_tag-litespeed-server","manual_kb_tag-brute-force-attacks","manual_kb_tag-server-level-protection","manual_kb_tag-wordpress-login","manual_kb_tag-login-lockout","manual_kb_tag-failed-login-attempts"],"_links":{"self":[{"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manual_kb\/359","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manual_kb"}],"about":[{"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/types\/manual_kb"}],"author":[{"embeddable":true,"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/users\/1"}],"version-history":[{"count":1,"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manual_kb\/359\/revisions"}],"predecessor-version":[{"id":9323,"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manual_kb\/359\/revisions\/9323"}],"wp:attachment":[{"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/media?parent=359"}],"wp:term":[{"taxonomy":"manualknowledgebasecat","embeddable":true,"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manualknowledgebasecat?post=359"},{"taxonomy":"manual_kb_tag","embeddable":true,"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manual_kb_tag?post=359"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}