Cannot upload plugins even without WAF purchased and active

[fitnessunion2023]

What is the name of the domain?

fuactivewear(dot)com

What is the error message?

Sorry, you have been blocked You are unable to access …

What is the issue you’re encountering

Can’t upload any plugin within the Wordpress back-end. I’ve done a lot of reading here on the community, and the only issue I see is WAF as the main reason why. Problem is, I don’t have WAF installed/active on my site. So what is the issue then if this is not as all other issues discussed within the community?

What steps have you taken to resolve the issue?

I have tried a lot, but with all research it mainly shows as WAF being the culprit, and I don’t have it as active on my site. So what else can I do?

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full

What are the steps to reproduce the issue?

Just by trying to upload new plugin zip file

[Laudian]

You can find a list of security events if you follow this link and select your domain: https://dash.cloudflare.com/?to=/:account/:zone/security/events

This site would tell you why a request was blocked. If you share that reason with us, we can offer recommendations on how to proceed.

[fitnessunion2023]

Hi @Laudian - sorry to say but I’m on a low level of intelligence when it comes to all this. I really don’t know what exactly to check for and what to provide you. The main issue is that I can’t upload any updates or new plugin.zip files. It immediately gives me the error page that I am blocked. I did follow the recommended upload/installation via the sFTP (FileZilla) which worked, but just wondering what I need to add/ or change etc. to make it stable again and able to install via the WordPress back-end.

[Laudian]

Click on the link I shared, select your domain and then search the events for the RayID - you can find the RayID on the bottom of the block page.

After you have found that, you could share a screenshot of that event here - hide personal data like your IP address from it first.

[fitnessunion2023]

Hi @Laudian
As requested, here is the screenshot:

[Laudian]

You shared the Request Details section. I’m afraid the relevant information will be found in the Matched service section above that.

[fitnessunion2023]

Hi Laudian

Thanks for all your help, and hopefully staying calm working with me

As requested:

[fitnessunion2023]

Hi Laudian

Any feedback yet?

[Laudian]

Sorry, I must have missed your previous reply.

In your screenshot, you can see which Rule caused the block (5969e60b).

So you can head to your WAF settings and disable it:

[fitnessunion2023]

Hi Laudian
Thanks for checking and the reply. As I warned you previously, I’m not great at this.
I checked and clicked on ALL links and tabs and everything. I couldn’t find the page you showed in your screenshot. I can’t search for the blocked (5969e60b ) and then edit the Action as your screenshot suggests. Sorry about this, please help.

[Laudian]

Click on this link and select your domain: https://dash.cloudflare.com/?to=/:account/:zone/security/waf/managed-rules/ruleset/efb7b8c949ac4650a09736fc376e9aee/rules

Then use the search function to find 5969e60b.

[fitnessunion2023]

Hi Laudian

GOT IT!! Thanks! Fixed it!

Thanks for all your help.