Invalid response code 403 | WordPress.org

Hi Vadim,

Cloudflare considers Stock Sync for WooCommerce a bot (which it kind of is) and thus blocks it. Fortunately, Cloudflare offers a way to whitelist internal traffic.

1. First you will need to find the IP address of your web hosting. Usually this is displayed in your web hosting panel (cPanel or Plesk) or you can use tool like NSLookup.io to find it
2. Log in to Cloudflare
3. Go to Security > WAF and click Create rule
4. Under If incoming requests match…, enter IP Source Address – equals – [your web hosting IP address]
5. Under Then take action…, select Skip
6. Under WAF components to skip, check everything, also under More components to skip
7. Click Deploy

If your websites reside on different servers, you can use is in list instead of equals in the step 4 to allow multiple IP addresses.

After this Cloudflare should consider all internal traffic including stock syncing requests safe.

Closing this now but feel free to reopen if you need further help.