UPDATE: BPS Pro 13+ and BPS 2.0+ versions have a feature called: Setup Wizard AutoFix (AutoWhitelist|AutoSetup|AutoCleanup) that automatically creates plugin and theme whitelist rules and automatically sets up and cleans up caching plugins htaccess code.
Simple Lightbox plugin html files blocked by BPS Root htaccess file. Use the steps below to create a plugin skip/bypass rule for this problem.
1. Copy the Simple Lightbox plugin skip/bypass rule below to this BPS Root Custom Code text box: 10. CUSTOM CODE PLUGIN/THEME SKIP/BYPASS RULES
2. Click the Save Root Custom Code button.
3. Go to the Security Modes page and click the Root Folder BulletProof Mode Activate button.
# Simple Lightbox plugin skip/bypass rule
RewriteCond %{REQUEST_URI} ^/wp-content/plugins/simple-lightbox/ [NC]
RewriteRule . - [S=13]
Security Log 403 error
[403 GET Request: 26/03/2017 - 7:37 ]
BPS Pro: 12.8
WP: 4.7.3
Event Code: BFHS - Blocked/Forbidden Hacker or Spammer
Solution: N/A - Hacker/Spammer Blocked/Forbidden
REMOTE_ADDR: xxx.xxx.xxx.xxx
Host Name: xxx.xxx.xxx.xxx
SERVER_PROTOCOL: HTTP/1.1
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR:
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: GET
HTTP_REFERER: http://www.example.com/wp-content/plugins/simple-lightbox/themes/baseline/layout.html
REQUEST_URI: /wp-content/plugins/simple-lightbox/themes/baseline/layout.html
QUERY_STRING:
HTTP_USER_AGENT: WordPress/4.7.3; http://www.example.com