403 Forbidden Loopback/REST API Error with Bluehost-managed Cloudflare CDN

  • sparklebp1

    (@sparklebp1)


    5 days, 5 hours ago

    Hello Wordfence Support,

    I am experiencing a 403 Forbidden error in the Wordfence Diagnostics page for the loopback/REST API test.

    Environment:

    • WordPress: Latest version
    • Wordfence: Latest version
    • Hosting Provider: Bluehost (Pro 150 Hosting)
    • CDN: Bluehost-managed Free Cloudflare CDN (I do not have a separate Cloudflare account.)

    Issue:
    When the Bluehost-managed Cloudflare CDN is enabled, Wordfence Diagnostics reports:

    “wp_remote_post() test back to this server failed! Response was: 403 Forbidden”

    Bluehost has thoroughly investigated the issue and confirmed the following:

    • No server-side ModSecurity rules are blocking the requests.
    • No firewall or hosting configuration issues were found.
    • The issue is specific to my website and is not affecting all Bluehost websites using the Bluehost-managed Cloudflare CDN.
    • They believe the issue may be related to the interaction between Wordfence and Cloudflare, but they cannot identify which requests are being blocked because Wordfence is a third-party plugin.

    I need to keep both Wordfence and the Bluehost-managed Cloudflare CDN enabled. Disabling Cloudflare is not an acceptable solution.

    Could you please help me identify:

    1. Which Wordfence request is receiving the 403 response?
    2. Is this a known compatibility issue with Bluehost-managed Cloudflare?
    3. Are there any Wordfence settings or configuration changes that will allow both Cloudflare and Wordfence to work together without disabling Cloudflare?

    Thank you.

Viewing 1 replies (of 1 total)
  • Plugin Support wfphil

    (@wfphil)

    4 days, 2 hours ago

    Hi @sparklebp1

    Please send your Wordfence diagnostics report.

    Update to the latest version of Wordfence if you haven’t already done so.

    Go to the top of the “Diagnostics” tab on the Wordfence “Tools” page. There will be a “SEND REPORT BY EMAIL” button to send the diagnostics report. Enter wftest [at] wordfence [dot] com as the email and sparklebp1 as the forum username please.

    Once you have emailed me the diagnostics report can you reply here to let me know that it has been sent. This is important in the unlikely event that your installation of WordPress is having an issue with sending mail

Viewing 1 replies (of 1 total)

You must be logged in to reply to this topic.