aventuraid

Subject: Bug: 403 Forbidden on finish_onboarding – WordPress plugin v2.0.1

Hi Jarno,

Thank you for your previous message. Following your instructions, I opened the browser console (Chrome) and tried to connect via the Metricool plugin. Here is a full report of what happened and everything I tried.

SITE INFORMATION

• URL: [mon-site].com
• WordPress version: 7.0
• Metricool plugin version: 2.0.1 (by Really Simple Plugins)

ACTIVE PLUGINS
Elementor, Elementor Pro, Essential Addons for Elementor, Essential Addons Pro, Meta Pixel for WordPress, Yoast SEO, Really Simple Security, Redirection, Site Kit by Google, Zoho Forms, Complianz, LiteSpeed Cache, Redis Object Cache (currently disabled)

ERRORS FOUND IN CONSOLE

Step 1 – When trying to load the brand list:
GET https://[mon-site].com/wp-json/metricool/v1/connected_brands 500 (Internal Server Error)
→ This error appeared up to 8 times. The plugin could not fetch the connected brands.

Step 2 – After selecting the brand and clicking Finish:
POST https://[mon-site].com/wp-json/metricool/v1/onboarding/finish_onboarding 403 (Forbidden)
→ DataError: Something went wrong.

TROUBLESHOOTING STEPS ALREADY TRIED

1. Disabled Redis Object Cache → Brand now appears correctly in the dropdown ✅ (this fixed the 500 error)
2. Disabled WP-Optimize → No change on the 403 error
3. Regenerated permalinks (Settings → Permalinks → Save) → No change
4. Checked Really Simple Security hardening settings → Advanced REST API options require Pro version; basic settings don’t include REST API blocking
5. Fully disabled Really Simple Security → No change, 403 error persists

CURRENT SITUATION
The brand appears correctly in the dropdown, but clicking Finish always returns a 403 Forbidden error on the finish_onboarding endpoint, regardless of which plugins are active or disabled.

Could this be a nonce verification issue on your end, or a known conflict with the finish_onboarding endpoint?

Thank you for your help.

Best regards,
Benjamin

• This reply was modified 15 hours, 58 minutes ago by aventuraid.