Since today i have the same issue! Yesterday i had no problems. I changed nothing. No updates. No new plugin.
Update and possibly the solution.
So, somehow the admin-ajax.php file permissions got changed to 0000, and should be 0644. I’m guessing that it happened because of something to do with 404 detections with iThemes Security. (this is my best guess).
So, all I did was just reinstalled wordpress through Dashboard > Updates > Reinstall WordPress.
Check your file permissions on the admin-ajax.php file in you WP-ADMIN folder and change to 0644.
Let us know if that works for you.
Hi,
here is my feedback:
Log File:
Error 403 POST /wp-admin/admin-ajax.php HTTP/1.0
Permisson on httpdocs / wp-admin / admin-ajax.php is already 644.
Detailed Log:
[client 92.79.52.133] ModSecurity: Access denied with code 403 (phase 2). Match of “rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)?(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)” against “ARGS:actions” required. [file “/etc/apache2/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf”] [line “258”] [id “33350147”] [rev “143”] [msg “Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potentially Untrusted Web Content Detected”] [data “”] [severity “CRITICAL”] [hostname “www.weltenbummler-unterwegs.de”] [uri “/wp-admin/admin-ajax.php”] [unique_id “W9hpyj5sIHoAAD1iRrYAAAAL”], referer: https://www.weltenbummler-unterwegs.de/wp-admin/post.php?post=3771&action=elementor
The same
Permisson on httpdocs / wp-admin / admin-ajax.php is already 644.
Doesnt work.
@nativemood
Did you saw this help article https://docs.elementor.com/article/185-the-update-button-does-not-work
BTW do you use any Firewall plugins?
try disable it, sometimes, the Wordfence or AlInOneFirewall can give this issue.
@chrisk87 You error source is your server’s Web Application Firewall (ModSecurity).
Maybe it’s the problem of all of you.
The rule with the id: 33350147 takes effect (false positive).
Maybe your server’s security lists have been updated unbeknown to you.
When your server is running Plesk you can disable the rule using the id on every single domain or globally.
When you are not hosting your website by your own you have to contact your server administrator.
-
This reply was modified 7 years, 3 months ago by
Lukas Kränkl.
-
This reply was modified 7 years, 3 months ago by Lukas Kränkl.
