Why do I get a 403 error while accessing a wap django application with csrf middleware enabled?

Any ideas? When accessing from desktop browser it's all ok.

Perhaps your WAP browser does not support cookies? Cookies are required for CSRF middleware to work. If you intend to primarily target browsers like that, you might consider either using @csrf_exempt for WAP-accessible views or disabling the middleware.