Plugin blocking REST API calls

I was getting an error when trying to obtain the domain key for LiteSpped Cache plugin. I disabled all the plugins and then was able to obtain it. What do I do now? Do I reactivate all the plugins or do I need to figure out which one is causing the issue? Below is the list of plugins I’m using.

LitesSpeed Cache
Rank Math SEO
Rank Math SEO Pro
Starter Templates
UpdraftPlus - Back/Restore
WPForms Lite


Thank you for asking.

Before doing this, may I ask you to check if you see some events in Firewall Events log at Cloudflare dashboard for your domain name?

Have you tried writing a ticket to

There seems to be issues as well for other users:

May I ask have you implemented as follows below to return the IP visitor on your origin host / server? (already mentioned in my first post at this topic):

Therefore, should bring up endpoints at least (just change to your actual domain name).

Suggestion 1

I’d suggest you to:

  • Use the “Pause Cloudflare on Site” option from the Overview tab for your domain at .
  • The link is in the lower right corner of that page.
  • Give it five minutes to take effect, then make sure site is working as expected with HTTPS.
  • Do what it’s needed
  • Upon success and obtained key, un-pause

Suggestion 2

I’d suggest you to allowlist your origin host / server / hosting IP address by navigating to the Security → WAF → Tools → IP Access Rules with the action “allow” for your Website and try again.

It happens due to the WordPress using HTTP/1.0 and empty user-agent, therefore while executing WP-Cron or some other related JSON/REST API request.

More helpful information:

Nevertheless, you could search for their IPs and allow them temporarily if so. Here are the IPs which I would allow/bypass (allowlist at Cloudflare):

Otherwise, maybe it’s blocked by some security plugin for WordPress if you using it like Wordfence, All in One Security, etc. or via functions.php of the theme you’re using?

Suggestion 3

Similar topic with some helpful information here:

I don’t think your recommendations below are relevant anymore. As I mentioned, I was able to get the domain key after I disabled all the plugins. I know need to know what to do. Do I reactivate the plugins or do I need to figure out which one was causing the issue? If so, how do I figure that out?

As you say, if it is not related to the Cloudflare, I’d suggest you to try troubleshooting and debugging WordPress and checking log files for any clue :thinking:

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.