HTTP response headers
X-Content-Type-Options = yes
X-Frame-Options = sameorigin
X-Frame-Options = 1;mode=block
SameSite = SameSite=Strict
HttpOnly flag = yes
Strict-Transport-Security = 1year+subdomains
Referrer-Policy = no-referrer
And in the logs I see a too many
[404] [POST] [/wp-admin/admin-ajax.php] [Blocked access to admin-ajax.php]
Also i notice sometimes if I add the first product and then visit the cart page in the next attempt to add a second product the menu cart starting to work.