AIOWPS blocks REST API requests by default through a confusingly-named setting. One change fixes it.
Disable XMLRPC services (this also unblocks REST)
- AIOWPS → Firewall → Basic Firewall Rules.
- Find “Disable PingBacks XMLRPC Services”. Set it to OFF.
The name implies it only affects XML-RPC, but in practice AIOWPS’ implementation also blocks REST API requests when this is on.
Login lockdown
AIOWPS’ Login Lockdown can lock you out if early /wp-setup attempts trigger it. Two options:
- AIOWPS → User Login → Login Lockdown → turn the lockout threshold down (more lenient), or
- Add your IP to the whitelist under the same page.
If you’re still locked out
Check the unlock email AIOWPS sends to the admin address. The lockout duration is typically 60 minutes; you can wait it out.