I got a 'Forbidden' message when trying to use a Wordfence feature. What should I do?
If you scan your site, get the scan results and then try to view a file’s contents or see file differences using Wordfence, you may see a "Forbidden" message. This is often caused by other plugins that try to protect your site by creating complex .htaccess files. Often these plugins accidentally block legitimate WordPress applications or site visitors, which is why we don’t like to protect sites with very complex .htaccess files.
If you see this message, look for an .htaccess file in your WordPress root directory that was created by another plugin and contains many complex rules. Either modify the plugin to prevent it from blocking legitimate WordPress applications, or stick with a simple .htaccess file and use another method to protect your site.
Issues that may cause similar issues are also listed here: A feature in Wordfence isn't working. What could be causing that?