Having same issue except, I’ve found two .htaccess: ._.htaccess and .htaccess
The code in the .htaccess is as follows:
Order Deny,Allow
Deny from all
<FilesMatch “^(form|akismet)\.(css|js)$”>
Allow from all
</FilesMatch>
#allow access to any image
<FilesMatch “^(.+)\.(png|gif)$”>
Allow from all
</FilesMatch>
Not at all what’s shown in the link from an earlier post.