I have this exact problem! I can post a plain text post but as soon as I try to post something with an image, it will direct me to a 404 error(luckily the post saves as a draft)
When I went to my host, HostPapa, they stated that they did disable ModSecurity and since that isn’t working they need my wp-admin credentials to try and replicate the issue…. this implies they want to post to my blog.
This is weird right? I have refused to provide my username and password to my blog but they have insisted again they need to replicate the issue. Am I right in refusing this? Is it actually that sketchy?
This is a brand new blog without any posts or followers so it technically wouldnt matter all the much for them to post (i could always change passwords after).. I’m refusing on principle but here asking if maybe I am wrong?