epss

Thanks for your help.

• I have verified that the correct domain is in the access-control-allow-origin
• I have added the Header set Access-Control-Allow-Methods “GET, POST, OPTIONS” to the .htaccess on the Slimstat site
• Via developer tools, I have confirmed that the headers on the admin-ajax.php contain these headers

In the network tab of developer tools the second call to admin-ajax.php is over http not https. I don’t know if that makes a difference or not.

The url of the single page that it is installed on is https://coutcomes.org/visual/demo

The error code in the console is

OPTIONS
https://coutcomes.net/wp-admin/admin-ajax.php

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://coutcomes.net/wp-admin/admin-ajax.php. (Reason: CORS preflight response did not succeed). Status code: 403.

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://coutcomes.net/wp-admin/admin-ajax.php. (Reason: CORS request did not succeed). Status code: (null).