Many thanks @sureshramasamy many thanks!
Option 3 below has done the trick for me. I have no need to enable the option anyway, surely it should be disabled by default?
What action should I take?
- Plesk already has a help article targeting this issue, identifying Comodo rule with
ID 218500
being false-positively triggered when Woocommerce 8.5 is in use. They recommend disabling the rule following the steps on their page.
- Check with your host to see if ModSecurity is enabled. If that is the case, you may ask your host to adjust the firewall rules to allow the cookies set by Woo’s Order Attribution feature. You can find more information about the cookies used by this feature in our documentation.
- If the above doesn’t work for you, disable the Order Attribution feature to prevent future users from seeing the 403 errors by going to WooCommerce > Settings > Advanced > Features and toggling the Order Attribution feature off.