I am working on a site that is consistently throwing a 403 error when I try to access the dashboard.
I have tried resetting the .htacess file, resetting the permissions on directories to 755 and on files to 644, checked the wp-config for any issues or anomalies, spot checked a few files via FTP (functions.php in themes, looked for strange nameed files in plugins, themes, folders etc.) for any signs of malicious code, disabled all plugins, disabled all themes except for a default 2019 theme.
I also used a function in a theme to create a brand new admin user and logged in with that and still get the "Sorry, you are not allowed to access this page" message
The only thing that is available is the Gravity Forms backend... which sticks out as very strange to me...
I've also observed that only the homepage loads/is available, attempting to navigate to any page in the nav leads to a 404... which makes me think it's almost certainly been compromised... I just haven't been to locate the source...
I was also looking into running a wordfence scan via the CLI but it looks like that isn't possible plus the plugin isn't installed/activated on the site anyway...
Any suggestions on how to resolve this?