---
title: "403 Forbidden in WordPress"
canonical: "https://lemwatch.com/http-status-codes/403/in-wordpress"
platform: "WordPress"
last_verified: "2026-08-11"
source: "https://lemwatch.com"
---

# HTTP 403 Forbidden in WordPress

**Platform** — WordPress — the world's most popular CMS.

**Where it surfaces** — WordPress admin, wp-cron output, or the site's frontend after a plugin/theme update.

## Cause on this platform

Wordfence, .htaccess rules, or the host's mod_security are blocking the request pattern.

## Fix on this platform

Whitelist your IP in Wordfence, temporarily rename .htaccess to isolate the rule, and inspect the host's WAF audit log.


## Generic reference

The server understood the request but refuses to fulfil it — different from 401 in that authentication won't help; you simply don't have permission.

_Canonical HTML page: https://lemwatch.com/http-status-codes/403/in-wordpress_