Benjamin Graham Oats

The 403 on /wp-admin combined with a blank /wp-login.php points to one of two things: a corrupted or modified .htaccess file, or a security plugin (Wordfence, iThemes Security, All-In-One WP Security) that’s either blocked your IP or written bad rules into .htaccess.

The blank login page is the telling detail — a pure server 403 would show on both URLs. Something is loading PHP on /wp-login.php but killing output before it renders, which is more typical of a plugin conflict or a PHP error with display turned off than a straight permissions issue.

Without FTP, your best route is back to your hosting provider with specific requests rather than a general “please check”:

Ask them to rename the .htaccess file in your root directory to .htaccess.bak temporarily — this rules out a corrupted or over-restrictive .htaccess in about 30 seconds. Also ask them to check if any server-level firewall or ModSecurity rule is blocking /wp-admin for your IP specifically.

If they can give you phpMyAdmin access even without full cPanel, you can deactivate all plugins at once by renaming the wp_options row where active_plugins is stored — or more simply, ask hosting to rename your /wp-content/plugins/ folder to /wp-content/plugins-disabled/ which deactivates everything without deleting anything.

Start with the .htaccess rename — it’s the quickest thing to rule out and hosting can do it in under a minute.

try this
`#flaggenmast ul {
display:-moz-inline-box;
height:28px;
width: 90px;
margin: 0;
padding: 0;
float: left;
clear: left;
list-style:none;
}