How to Fix WordPress Loading Issues in Plesk Caused by ModSecurity

Step-by-Step Guide to Fix WordPress Issues in Plesk Caused by ModSecurity:

If you're facing issues with WordPress not loading, images not showing, or being unable to access the admin panel in Plesk, the problem could lie with the ModSecurity settings under the Web Application Firewall. Here’s a simple guide to fix it:

Step 1: Log into Plesk

1. Open your web browser and go to your Plesk login page (usually https://yourdomain.com:8443).
2. Enter your Plesk administrator credentials to access the control panel.

Step 2: Navigate to Tools & Settings

1. Once logged into Plesk, find the Tools & Settings option in the left-hand sidebar.
2. Click on Tools & Settings to open the settings page.

Step 3: Access the Web Application Firewall Settings

1. Under Tools & Resources, locate and click on Web Application Firewall (ModSecurity).
2. This will open the ModSecurity settings page.

Step 4: Change the ModSecurity Configuration

1. On the ModSecurity settings page, click the Settings button to modify the firewall rules.

Step 5: Switch Apache to Nginx Mode

1. You will see an option under Run Rules On. It might currently be set to Apache (ModSecurity 2.9).
2. Change this to Nginx (ModSecurity 3.0) by selecting it from the dropdown.

Step 6: Update the Rule Set

1. Under Rule Set, you may see Comodo (Free) selected. This is the rule set that could be causing issues.
2. Select OWASP (Free) instead of Comodo.

Step 7: Apply the Changes

1. After switching both Run Rules On to Nginx (ModSecurity 3.0) and the Rule Set to OWASP (Free), click the OK or Apply button to save the changes.

Step 8: Clear Cache and Refresh

1. Clear your browser cache and refresh the page.
2. Try loading your WordPress site again and see if the issue has been resolved.

Step 9: Test the Website

1. Visit your WordPress site to ensure it is loading properly, including images and the admin panel.
2. Log into the WordPress admin area (yourdomain.com/wp-admin) and verify that you can access it without issues.

Step 10: Experiment if Necessary

• If this setup works, great! If not, you may need to experiment with different ModSecurity configurations or rule sets that work better for your environment.
• Try switching between the available rule sets (e.g., OWASP, Comodo, etc.) or adjust the Run Rules On settings (Apache or Nginx) if you continue to face issues.

By switching to Nginx with OWASP rules, you should be able to fix the WordPress loading issues in Plesk caused by ModSecurity settings. If problems persist, consult with your hosting provider or adjust settings until you find the configuration that works for your setup.