I’m trying to connect a WordPress site to MainWP, but the connection fails with HTTP 403 Forbidden. Visiting https://mydomain.com/xmlrpc.php returns “You don’t have permission to access this file” instead of the expected “XML-RPC server accepts POST requests only.” I’ve disabled all security plugins, checked .htaccess (no XML-RPC blocking rules), verified xmlrpc.php is the default WordPress core file, and HostGator confirmed there are no server-side restrictions or ModSecurity blocks. Has anyone encountered this, or know what else could be causing XML-RPC to return a 403?
MainWP doesn’t use XML-RPC and I even have blocked it by default on all sites I manage.
You can find more information to research connection problems on:
Hey @Farahq
As @josklever pointed ut, we don’t use XML-RPC.
I am also getting 403 when doing a connection test for this site from my Dashboard.
It seems that the child site is protected with Cloudflare, so please review the security settings in Cloudflare’s Dashboard.
You may likely need to whitelist the Dashboard’s IP/URL: Troubleshoot connection problems - MainWP Documentation

