If you use Cloudflare for your WordPress website, proceed to your dashboard of Cloudflare and Pause it in the Advanced Options. Then proceed to update your files. Reason why this is blocked is to prevent malicious injections, even when an administrator is compromised, requiring malicious actors to also need access to the domain controls, such as Cloudflare.
