Thank you for contacting us and I'd be happy to assist.
For the automatic plugins update feature to work, it is important that the Toolset plugins have been registered on the website, with a valid "site key".
Note: In case, you've migrated the website from one address to another, you'll need to delete the old site key and generate a new one, using the new address and then register using that new key.
I hope this helps and please let me know how it goes.
From the backend, your website seems to be properly activated with a Toolset site key, but the issue seems to be communicating with the external server to update the plugins.
In "Site Health" section ( at WP Admin -> Tools -> Site Health ) there are two seperate issues logged related to "http_request_failed".
( screenshot: hidden link )
I'll recommend to turn on WordPress debugging ( ref: https://wordpress.org/support/article/debugging-in-wordpress/ ) and see if any error or warnings are logged in the server's error log when the update fails and the forbidden message is shown.
A few points that you'll need to confirm from your hosting provider are:
2. If there is some limitation/restriction imposed on the use of wp-cron or loopback?
3. If there are any a firewall or security modules ( e.g. mod_security ) involved that could block the outgoing cURL requests.
Note: The website seems to be using Cloudflare CDN too and so I'll also recommend testing the update process with CDN temporarily disconnected, to narrow down to a possible cause.
I hope these points will help and please let me know how it goes.
regards,
Waqar
This ticket is now closed. If you're a WPML client and need related help, please open a new support ticket.