thank you for your reply, but unfortunately i still get 403 error. Only when i disable the hardening for the wp-content it works properly.
Hello
first of thank you for your answer, secondly you are right, if i allow the complete directory it beats the purpose of hardening.
The plugin i am having problem with is the wordpress-social-login. It makes a query like
domain.com/wp-content/plugins/wordpress-social-login/hybridauth/?hauth.start=Google&hauth.time=1533365513
how could i only allow this?