ModSecurity is a web application firewall that blocks suspicious requests. When it triggers, you may see a 403 Forbidden or 406 Not Acceptable error — usually a false positive caused by a plugin, form submission, or unusual upload.
- Note the exact URL and what you were doing when the error appeared.
- Try the action again; sometimes a single bad pattern in your data triggers a rule.
- Check that your CMS, theme, and plugins are updated, as old code often trips rules.
You generally shouldn't disable ModSecurity entirely, since it protects you from attacks. Instead, open a ticket with the URL, time, and your IP address. We can review the firewall log, identify the rule, and whitelist it safely so your legitimate request goes through.
