hi,
ok found the root of the problem – as it was done quietly to solve my issue by the hosting last time without – letting me know what was the deal – now i manage to get a formal answer from them so – all in here or myself can reference when we are working on a new website or upgrade.
Replied officially from my hosting tech guy
—————————————————————-
You’re getting a 403 Forbidden error when editing your WordPress site because ModSecurity (modsec), the web application firewall (WAF) in cPanel, is blocking your request. When you disable ModSecurity, the request goes through normally — confirming that ModSecurity rules are the cause.
The modsec might blocked AJAX Requests, wordPress uses admin-ajax.php, and ModSecurity may treat certain AJAX actions as suspicious.
I just disable it and it should be fine now
—————————————————————
thanks for your help and reminder