URGENT: Site Kit causing 403 on home page

Thanks for reaching out @thilo72. By what you’re describing, I suspect that one either one of the tags added to your site via the connect Tag Manager Container, or a plugin configuration conflict, impacted your sites rendering. From reviewing your site now it looks like you thankfully had the technical know-how to get your site restored.

If you wish to use Site Kit once more, please do so after backing up your site first. From reviewing your sites source code I can see various accelerator references and I can see a 403 error without Site Kit active. I’d be happy to work with you once more if you run into any issues.

Let me know if you have any questions with the above. Thank you.

James, thank you for taking the time to dig into it. Unfortunately, your hints don’t help me to solve the problem at hand. The 403 error is only on the home page and it appears very clearly only and really ONLY when the Google Site Kit plugin is enabled. I just need to disable it and all runs fine again. So, the 403 error you found is not the one I am talking about. The accelerator references are coming from a caching plugin called Seraphanite Accelerator. I usually swith this plugin off when I am testing stuff and then I turn it on again. It doesn’t matter in what state this third party plugin is – the problem I am describing here is not influenced by it. So ,what do you suggest, how can we debug this 403 error on the home page?

Note: As long as I have no solution I keep the Site Kit plugin disabled to make sure the website functions free of such errors.

Thanks for the update @thilo72. To troubleshoot this further, please perform the following steps:

1. Login to your live site from a Chrome browser incognito window.
2. Install and activate the Health Check & Troubleshooting plugin.
3. Navigate to “Plugins > Health Check & Troubleshooting > Troubleshoot”.
4. From the same screen click on the “Available Plugins” tab at the top right and then click on the “Enable” option next to “Site Kit by Google“. You’ll need to activate Site Kit first, given the plugin remained deactivated.
5. Check for the same error once more when visiting your site. Note that while in troubleshooting mode, a different theme will be in use for you only, as a logged in administrator. Regular visitors won’t be impacted.

If your homepage is accessible, please enable your other plugins while in troubleshooting mode (step 4 above). Do this one by one, checking your site for the issue each time. If the issue does re-occur, let me know what plugin you last activated, while also sharing your Site Health information.

If your homepage remains with a 403 error while in troubleshooting mode, please share your Site Health information and let me know does the same occur if you deactivate the Tag Manager module within Site Kit.

Let me know if you have any questions with the above.

Hi! My apologies for the late reply. I was on a business trip. I checked all plugins and the one it seems to have a conflict with is the “Real Cookie Banner Pro” by devowl.io However, when I deactive Tag Manager Code Snippet insertion (“Let Site Kit place code on your site”) in the Site Kit options under Tag Manager the conflict does resolve, too. So for now I will keep it like that. Btw I have also the GTM Manager plugin running which obviously ensures the tag manager code to be displayed, so the tag works anyway (I tested that in the Tag Manager test tool).

Here is the site health info when Site Kit displays the tag manager code and the error occurs:

` wp-core

version: 6.6.1
site_language: de_DE
user_language: en_US
timezone: Europe/Berlin
permalink: /%postname%/
https_status: true
multisite: false
user_registration: 1
blog_public: 1
default_comment_status: open
environment_type: production
user_count: 3
dotorg_communication: true wp-paths-sizes

wordpress_path: /var/[hidden]
wordpress_size: loading…
uploads_path: /var/[hidden]/wp-content/uploads
uploads_size: loading…
themes_path: /var/[hidden]/wp-content/themes
themes_size: loading…
plugins_path: /var/[hidden]/wp-content/plugins
plugins_size: loading…
fonts_path: /var/[hidden]/wp-content/uploads/fonts
fonts_size: loading…
database_size: loading…
total_size: loading… wp-dropins (3)

advanced-cache.php: true
maintenance.php: true
object-cache.php: true wp-active-theme

name: Storefront (storefront)
version: 4.6.0
author: Automattic
author_website: https://woocommerce.com/
parent_theme: none
theme_features: core-block-patterns, widgets-block-editor, post-thumbnails, automatic-feed-links, custom-logo, menus, html5, custom-background, custom-header, title-tag, customize-selective-refresh-widgets, wp-block-styles, align-wide, editor-styles, editor-font-sizes, editor-style, responsive-embeds, appearance-tools, amp, woocommerce, wc-product-gallery-zoom, wc-product-gallery-lightbox, wc-product-gallery-slider, starter-content, widgets
theme_path: /var/www/vhosts/lander-borg.de/httpdocs/wp-content/themes/storefront
auto_update: Disabled wp-plugins-active (49)

Add coupon by link / URL coupons for Woocommerce: version: 1.1.47, author: PI Websolution, Auto-updates enabled
Admin and Site Enhancements (ASE): version: 7.3.2, author: wpase.com, Auto-updates enabled
All In One WP Security: version: 5.3.2, author: All In One WP Security & Firewall Team, Auto-updates enabled
CartFlows: version: 2.0.10, author: CartFlows Inc, Auto-updates enabled
Cloudflare: version: 4.12.8, author: Cloudflare, Inc., Auto-updates enabled
Code Snippets: version: 3.6.5.1, author: Code Snippets Pro, Auto-updates enabled
Contact Form 7: version: 5.9.8, author: Takayuki Miyoshi, Auto-updates enabled
Custom Fonts: version: 2.1.6, author: Brainstorm Force, Auto-updates enabled
Customize My Account for WooCommerce: version: 2.3.4, author: SysBasics, Auto-updates enabled
Disable & Remove Google Fonts: version: 1.6.4, author: Fonts Plugin, Auto-updates enabled
Elementor: version: 3.23.4, author: Elementor.com, Auto-updates enabled
Elementor Header & Footer Builder: version: 1.6.40, author: Brainstorm Force, Nikhil Chavan, Auto-updates enabled
Essential Addons for Elementor: version: 6.0.2, author: WPDeveloper, Auto-updates enabled
Essential Blocks: version: 4.9.0, author: WPDeveloper, Auto-updates enabled
Flamingo: version: 2.5, author: Takayuki Miyoshi, Auto-updates enabled
Germanized for WooCommerce: version: 3.17.4, author: vendidero, Auto-updates enabled
GTM Kit: version: 1.23.3, author: GTM Kit, Auto-updates enabled
Hide My WP Ghost Lite: version: 5.2.04, author: WPPlugins, Auto-updates enabled
Limit Login Attempts Reloaded: version: 2.26.13, author: Limit Login Attempts Reloaded, Auto-updates enabled
Loco Translate: version: 2.6.11, author: Tim Whitlock, Auto-updates enabled
Logged In As: version: 1.1.0, author: Jerry Stewart, Auto-updates enabled
MailPoet: version: 5.0.2, author: MailPoet, Auto-updates enabled
Maintenance: version: 4.12, author: WebFactory Ltd, Auto-updates enabled
Maintenance mode for WooCommerce: version: 1.2, author: netfett, Auto-updates enabled
One Stop Shop for WooCommerce: version: 1.6.2, author: vendidero, Auto-updates enabled
Performance Lab: version: 3.4.0, author: WordPress Performance Team, Auto-updates enabled
Performant Translations: version: 1.2.0, author: WordPress Performance Team, Auto-updates enabled
Pre-Orders for WooCommerce: version: 2.0.1, author: Bright Plugins, Auto-updates enabled
Product Feed Manager for WooCommerce: version: 7.4.17, author: RexTheme, Auto-updates enabled
Product Stock Waitlist Manager for WooCommerce: version: 2.5.8, author: MultiVendorX, Auto-updates enabled
Real Cookie Banner: version: 4.7.15, author: devowl.io, Auto-updates enabled
Security Ninja: version: 5.207, author: WP Security Ninja, Auto-updates enabled
Sequential Order Numbers for WooCommerce: version: 1.6.5, author: WebToffee, Auto-updates enabled
Seraphinite Accelerator (Extended, limited): version: 2.22.4, author: Seraphinite Solutions, Auto-updates enabled
Site Kit by Google: version: 1.134.0, author: Google, Auto-updates enabled
SliceWP: version: 1.1.20, author: SliceWP, Auto-updates enabled
SMTP2GO - Email Made Easy: version: 1.9.0, author: SMTP2GO, Auto-updates enabled
TrustedSite: version: 1.2.0, author: TrustedSite, Auto-updates enabled
Ultimate Addons for Contact Form 7: version: 3.4.3, author: Themefic, Auto-updates enabled
UpdraftPlus - Backup/Restore: version: 1.24.4, author: UpdraftPlus.Com, DavidAnderson, Auto-updates enabled
WooCommerce: version: 9.2.3, author: Automattic, Auto-updates enabled
WooCommerce Cart Abandonment Recovery: version: 1.3.0, author: CartFlows Inc, Auto-updates enabled
WooCommerce PayPal Payments: version: 2.8.3, author: WooCommerce, Auto-updates enabled
WP Armour - Honeypot Anti Spam: version: 2.2.02, author: Dnesscarkey, Auto-updates enabled
WP Consent API: version: 1.0.7, author: RogierLankhorst, Auto-updates enabled
WP Statistics: version: 14.10, author: VeronaLabs, Auto-updates enabled
Yoast SEO: version: 23.3, author: Team Yoast, Auto-updates enabled
Yoast SEO: WooCommerce: version: 16.2, author: Team Yoast, Auto-updates enabled
Yoast SEO Premium: version: 23.3, author: Team Yoast, Auto-updates enabled code-snippets (5)

snippet-9: name: Disable Dashicons, scope: front-end, modified: 2022-03-20 23:47:22
snippet-12: name: Redirect to Checkout on Add to Cart, scope: front-end, modified: 2022-10-16 15:04:41
snippet-14: name: Hide other shipping options when free shipping available, scope: front-end, modified: 2024-02-01 20:32:23
snippet-19: name: Adapting Storefront Theme Copyright Notice, scope: front-end, modified: 2024-03-19 15:04:58
snippet-22: name: CSS Style for Responsive Forms (used for designing Contact Form 7 tables), scope: front-end, modified: 2024-08-25 11:02:14, tags: [css] wp-media

image_editor: WP_Image_Editor_Imagick
imagick_module_version: 1693
imagemagick_version: ImageMagick 6.9.13-10 Q16 x86_64 18376 https://legacy.imagemagick.org
imagick_version: 3.7.0
file_uploads: 1
post_max_size: 32M
upload_max_filesize: 16M
max_effective_size: 16 MB
max_file_uploads: 20
imagick_limits:
imagick::RESOURCETYPE_AREA: 124 GB
imagick::RESOURCETYPE_DISK: 9.2233720368548E+18
imagick::RESOURCETYPE_FILE: 6144
imagick::RESOURCETYPE_MAP: 62 GB
imagick::RESOURCETYPE_MEMORY: 31 GB
imagick::RESOURCETYPE_THREAD: 1
imagick::RESOURCETYPE_TIME: 0
imagemagick_file_formats: 3FR, 3G2, 3GP, A, AAI, AI, APNG, ART, ARW, AVI, AVS, B, BGR, BGRA, BGRO, BIE, BMP, BMP2, BMP3, BRF, C, CAL, CALS, CANVAS, CAPTION, CIN, CIP, CLIP, CMYK, CMYKA, CR2, CR3, CRW, CUR, CUT, DATA, DCM, DCR, DCX, DDS, DFONT, DNG, DPX, DXT1, DXT5, EPDF, EPI, EPS, EPS2, EPS3, EPSF, EPSI, EPT, EPT2, EPT3, ERF, EXR, FAX, FILE, FITS, FLV, FRACTAL, FTP, FTS, G, G3, G4, GIF, GIF87, GRADIENT, GRAY, GRAYA, GROUP4, H, HALD, HDR, HISTOGRAM, HRZ, HTM, HTML, HTTP, HTTPS, ICB, ICO, ICON, IIQ, INFO, INLINE, IPL, ISOBRL, ISOBRL6, J2C, J2K, JBG, JBIG, JNG, JNX, JP2, JPC, JPE, JPEG, JPG, JPM, JPS, JPT, JSON, K, K25, KDC, LABEL, M, M2V, M4V, MAC, MAGICK, MAP, MASK, MAT, MATTE, MEF, MIFF, MKV, MNG, MONO, MOV, MP4, MPC, MPEG, MPG, MRW, MSL, MSVG, MTV, MVG, NEF, NRW, NULL, O, ORF, OTB, OTF, PAL, PALM, PAM, PANGO, PATTERN, PBM, PCD, PCDS, PCL, PCT, PCX, PDB, PDF, PDFA, PEF, PES, PFA, PFB, PFM, PGM, PGX, PICON, PICT, PIX, PJPEG, PLASMA, PNG, PNG00, PNG24, PNG32, PNG48, PNG64, PNG8, PNM, POCKETMOD, PPM, PS, PS2, PS3, PSB, PSD, PTIF, PWP, R, RADIAL-GRADIENT, RAF, RAS, RAW, RGB, RGBA, RGBO, RGF, RLA, RLE, RMF, RW2, SCR, SCREENSHOT, SCT, SFW, SGI, SHTML, SIX, SIXEL, SPARSE-COLOR, SR2, SRF, STEGANO, SUN, SVG, SVGZ, TEXT, TGA, THUMBNAIL, TIFF, TIFF64, TILE, TIM, TTC, TTF, TXT, UBRL, UBRL6, UIL, UYVY, VDA, VICAR, VID, VIDEO, VIFF, VIPS, VST, WBMP, WEBM, WEBP, WMF, WMV, WMZ, WPG, X, X3F, XBM, XC, XCF, XPM, XPS, XV, XWD, Y, YCbCr, YCbCrA, YUV
gd_version: bundled (2.1.0 compatible)
gd_formats: GIF, JPEG, PNG, WebP, BMP, XPM
ghostscript_version: not available wp-server

server_architecture: Linux 5.14.0-427.18.1.el9_4.x86_64 x86_64
httpd_software: Apache
php_version: 8.2.22 64bit
php_sapi: fpm-fcgi
max_input_variables: 1000
time_limit: 360
memory_limit: 2G
max_input_time: 360
upload_max_filesize: 16M
php_post_max_size: 32M
curl_version: 7.76.1 OpenSSL/3.0.7
suhosin: false
imagick_availability: true
pretty_permalinks: true
htaccess_extra_rules: true
current: 2024-08-31T18:00:20+00:00
utc-time: Saturday, 31-Aug-24 18:00:20 UTC
server-time: 2024-08-31T20:00:16+02:00 wp-database

extension: mysqli
server_version: 10.5.22-MariaDB
client_version: mysqlnd 8.2.22
max_allowed_packet: 536870912
max_connections: 500 wp-constants

WP_HOME: undefined
WP_SITEURL: undefined
WP_CONTENT_DIR: /var/[hidden]/wp-content
WP_PLUGIN_DIR: /var/[hidden]/wp-content/plugins
WP_MEMORY_LIMIT: 40M
WP_MAX_MEMORY_LIMIT: 2G
WP_DEBUG: false
WP_DEBUG_DISPLAY: true
WP_DEBUG_LOG: false
SCRIPT_DEBUG: false
WP_CACHE: true
CONCATENATE_SCRIPTS: false
COMPRESS_SCRIPTS: undefined
COMPRESS_CSS: undefined
WP_ENVIRONMENT_TYPE: Undefined
WP_DEVELOPMENT_MODE: undefined
DB_CHARSET: utf8
DB_COLLATE: undefined wp-filesystem

wordpress: writable
wp-content: writable
uploads: writable
plugins: writable
themes: writable
fonts: not writable
mu-plugins: writable wp_statistics

version: 14.10
detectActiveCachePlugin: Enabled (WordPress Object Cache)
activePostTypes: post, page, e-landing-page, elementor_library, product, product-feed, mailpoet_page, elementor-hf, cartflows_step
dailySaltDate: undefined
geoIpDatabaseExists: Yes
geoIpDatabaseLastUpdated: 2024-08-18 14:43:38
geoIpDatabaseSize: 49 MB
geoIpDatabaseType: GeoLite2-City
monitorOnlineVisitors: Enabled
trackLoggedInUserActivity: Disabled
storeEntireUserAgentString: Disabled
trackingMethod: Client Side Tracking
bypassAdBlockers: Disabled
anonymizeIpAddresses: Disabled
hashIpAddresses: Disabled
wpConsentLevelIntegration: Disabled
anonymousTracking: Disabled
doNotTrack: Disabled
viewStatsInEditor: Enable
viewsColumnInContentList: Enable
viewsColumnInUserList: Disabled
showStatsInAdminMenuBar: Enabled
wpStatisticsWidgets: Enable
disableInactiveFeatureNotices: Disabled
viewsInSingleContents: Disabled
reportFrequency: Disabled
userRoleExclusions: Administrator
ipExclusions: Not Set
excludedLoginPage: Enabled
excludedRssFeeds: Enabled
excluded404Page: Enabled
excludedURLs: Not Set
matomoReferrerSpamBlacklist: Disabled
logRecordExclusions: Disabled
minRoleToViewStats: manage_options
minRoleToManageSettings: manage_options
ipDetectionMethod: REMOTE_ADDR
geoIpDatabaseUpdateSource: js-deliver
automaticCleanup: Disabled
purgeDataOlderThan: 365
phpGmpExtension: Installed
phpBcmathExtension: Installed
phpGzopenFunction: Installed
phpPharDataClass: Installed google-site-kit

version: 1.134.0
php_version: 8.2.22
wp_version: 6.6.1
reference_url: https://www.lander-borg.de
amp_mode: no
site_status: connected-site
user_status: authenticated
verification_status: verified-non-site-kit
connected_user_count: 1
active_modules: site-verification, search-console, ads, analytics-4, pagespeed-insights, tagmanager
recoverable_modules: none
required_scopes:
openid: ?
https://www.googleapis.com/auth/userinfo.profile: ?
https://www.googleapis.com/auth/userinfo.email: ?
https://www.googleapis.com/auth/siteverification: ?
https://www.googleapis.com/auth/webmasters: ?
https://www.googleapis.com/auth/analytics.readonly: ?
https://www.googleapis.com/auth/tagmanager.readonly: ?
capabilities:
googlesitekit_authenticate: ?
googlesitekit_setup: ?
googlesitekit_view_posts_insights: ?
googlesitekit_view_dashboard: ?
googlesitekit_manage_options: ?
googlesitekit_update_plugins: ?
googlesitekit_view_splash: ?
googlesitekit_view_authenticated_dashboard: ?
googlesitekit_view_wp_dashboard_widget: ?
googlesitekit_view_admin_bar_menu: ?
googlesitekit_view_shared_dashboard: ?
googlesitekit_read_shared_module_data::["search-console"]: ?
googlesitekit_read_shared_module_data::["analytics-4"]: ?
googlesitekit_read_shared_module_data::["pagespeed-insights"]: ?
googlesitekit_manage_module_sharing_options::["search-console"]: ?
googlesitekit_manage_module_sharing_options::["analytics-4"]: ?
googlesitekit_manage_module_sharing_options::["pagespeed-insights"]: ?
googlesitekit_delegate_module_sharing_management::["search-console"]: ?
googlesitekit_delegate_module_sharing_management::["analytics-4"]: ?
googlesitekit_delegate_module_sharing_management::["pagespeed-insights"]: ?
enabled_features:
adsPax: ?
audienceSegmentation: ?
conversionInfra: ?
gm3Components: ?
privacySandboxModule: ?
rrmModule: ?
active_conversion_event_providers:
contact-form-7: contact
woocommerce: add_to_cart, purchase
consent_mode: enabled
consent_api: detected
search-console_shared_roles: none
search-console_management: owner
analytics-4_shared_roles: none
analytics-4_management: owner
pagespeed-insights_shared_roles: none
pagespeed-insights_management: all_admins
search_console_property: sc-domain:lander-borg.de
ads_conversion_tracking_id: AW-1??????????
analytics_4_account_id: 2247?????
analytics_4_property_id: 4286838??
analytics_4_web_data_stream_id: 7561??????
analytics_4_measurement_id: G-M9????????
analytics_4_use_snippet: yes
analytics_4_ads_conversion_id: none
analytics_4_available_custom_dimensions: none
analytics_4_ads_linked: true
analytics_4_ads_linked_last_synced_at: 1724433304
tagmanager_account_id: 6246??????
tagmanager_container_id: GTM-TVW?????
tagmanager_amp_container_id: none
tagmanager_use_snippet: yes

No problem with the late reply @thilo72, and nice troubleshooting with regarding finding the specific conflict. Does the 403 console error you encounter impact the Site Kit dashboard? If not, I would suggest reaching out to DevOwl and enquiring about this. They may be blocking Site Kit requests until a user consent for Analytics or Tag Manager requests, with your particular configuration.

Great that the issue doesn’t occur when you select the option for Site Kit to not place the snippet for you.

Let me know if you have any questions with the above.

As we didn’t receive a response I’ll mark this as resolved. Feel free to open a new support topic if you continue to encounter issues, or reopen this topic and we’d be happy to assist.

James, thank you again for leading the way to troubleshooting the problem. The workaround I found by disabling the tag display via Site Kit is fine for me. However, it is just a workaround not a propper fix in my point of view. I’m fine with closing this topic here.

No problem @thilo72, and sorry I couldn’t be of more assistance with this. Agreed also that not placing the tag via Site Kit isn’t a suitable solution. If you do find the time, you may wish to duplicate your site so you can test the same scenario on such a test site, ideally from the same hosting platform. By doing so it can help rule out any hosting or Real Cookie Banner Pro configuration that is impacting your site.

It would also be a good way to check whether the 403 errors you’re seeing in your console impact the Site Kit dashboard. I suspect these errors occur based on the Site Kit placed snippets being blocks based on your cookie banner configurations.