In our posts, we have discussed many of the common WordPress errors before. One of the nightmares of WordPress developers is the “403 Forbidden” error you might encounter when you visit a website or try to edit it. This guide will help you understand what this error is, why you’re seeing it, and how you can fix it.

The 400 code errors usually indicate client-side errors, meaning there’s a problem with the request made by the client (usually a web browser or application) to the server.

What is the 403 Forbidden error?

A 403 Forbidden error occurs when the server understands your request but refuses to fulfil it. It’s essentially saying, “You don’t have permission to access this page.” This error can appear in several forms, depending on your browser and how you set up your website. In a WordPress environment, this error can prevent you, your visitors, or both from accessing specific pages on your website.

Why do you get the 403 error in WordPress?

There are multiple reasons you may experience this error. Here are the most common causes:

1. File permissions issue

Each file or folder on your website has permission settings that control who can read, write, or execute those files. If these permissions are incorrectly set, WordPress may block access to certain pages or files, leading to the 403 Forbidden error.

2. Corrupt .htaccess file

The .htaccess file is a critical configuration file in WordPress that helps control how your website behaves. If this file becomes corrupted, it can trigger a 403 error by incorrectly restricting access to certain parts of your website.

3. Plugin Conflicts

Sometimes, a security or caching plugin may misconfigure access rules, restricting access to certain pages or files. This is especially common if you recently installed a new plugin or updated an existing one.

4. IP Blocking

Some security plugins or your web hosting provider may block specific IP addresses to protect your site from attacks. If your IP is mistakenly blacklisted, you could end up seeing the 403 error.

5. Hotlink Protection

Hotlink protection is a security feature that prevents other websites from using your images or other files without permission. However, if it’s not set up properly, it can block legitimate users from accessing your files, leading to a 403 error.

6. Incorrect Index Page

WordPress websites rely on an index page to serve as the homepage. The server may deny access if the index page is missing or incorrectly set up, resulting in the 403 error.

Resolve the 403 Forbidden Error in WordPress

Now that we know what caused this error let’s dive into how you can fix it. Try these different solutions:

1. Check File Permissions

As we mentioned above, one of the reasons that you might see the 403 error on your website is the incorrect file permissions. WordPress files and directories need specific permissions to function properly. These specific values of the file permissions are:

  • Directories: Should have permissions set to 755.
  • Files: Should have permissions set to 644.

To change permissions, you must use an FTP client (like FileZilla) or access your hosting control panel. Simply right-click on the file or folder, select File Permissions, and ensure the settings are correct.

2. Fix or replace the .htaccess file

If your .htaccess file is corrupted, you can quickly fix the issue by creating a fresh one. Follow these steps:

  1. Access your website through FTP or your hosting account control panel.
  2. Find the .htaccess file in your root folder (often located in /public_html/).
  3. Download a backup of this file to your computer, just in case.
  4. Delete the .htaccess file from your server.
  5. Now that you removed the old file, you just need to click the Save Changes button under Settings > Permalinks in your WordPress dashboard. In this way, you can regenerate a new .htaccess file.


This should resolve the issue if the corrupted file was causing the 403 error.

3. Deactivate All Plugins

If you suspect a plugin conflict is triggering the error, deactivate all your plugins to see if the problem disappears. Here’s how:

  1. Go to your WordPress dashboard.
  2. Navigate to Plugins > Installed Plugins.
  3. Select all plugins and deactivate them from the dropdown options.


Once all plugins are deactivated, check if the error is gone. If it is, you can reactivate them one by one to identify the culprit. Once you’ve identified the problematic plugin, you can update, replace, or contact the plugin’s support team for help.

4. Check Hotlink Protection

If hotlink protection is causing the 403 error, you can either disable it or adjust its settings to ensure it doesn’t block legitimate access. You can typically find this setting in your hosting control panel (e.g., cPanel).

  1. Log into your hosting account.
  2. Navigate to Security > Hotlink Protection.
  3. Ensure that your website’s URL is included in the list of allowed sites, and adjust the settings accordingly.

5. Contact Your Hosting Provider

Last, if you’ve tried all the steps above and the 403 error persists, it might be an issue with your web hosting provider. Sometimes, hosting companies block access to specific files or directories for security reasons. Contact your provider’s support team and ask if they’ve made any changes that could be causing the error. They can also help you check for server-level issues that might be outside of your control.

Final Thoughts

The 403 Forbidden error in WordPress can be alarming, but it’s usually easy to fix once you identify the cause. Whether it’s a simple file permission issue, a corrupted .htaccess file, or a plugin conflict, following the steps outlined above should help you resolve the error and get your website back up and running.

Always back up your website before making any changes, and if you’re not comfortable performing these fixes yourself, don’t hesitate to seek help from a professional or your hosting provider.

By understanding what causes this error and knowing how to fix it, you could confront it the next time you encounter the 403 Forbidden error in WordPress.

Subscribe to
our Newsletter

Newsletter Form