Cloudflare

Cloudflare

All of Cloudflare’s performance and security benefits in a simple one-click install.
Rating:
3.5
Active Installations:
200000+
Last Updated:
Apr 03, 2024
WordPress Version:
3.4 or higher
Tested up to:
6.2.5

Speed up WordPress

Boost your WordPress site's speed by up to 300% with Cloudflare's APO plugin.

Optimize with one plugin

Take your site's performance to the next level by switching to a single plugin for CDN, caching, and other optimizations.

Unlimited subdomains

Get unlimited subdomains and access to other Cloudflare benefits with APO for just $5.

Protect with WAF

Keep your WordPress site secure with Cloudflare's Web Application Firewall and built-in rulesets tailored for WordPress threats.

4.12.7 – 2024-04-02

  • Upgrade cloudflare-plugin-frontend to v3.10.0 (#542)

4.12.6 – 2024-03-04

  • Upgrade cloudflare-plugin-frontend to v3.9.0 (#537)

4.12.5 – 2024-03-04

  • Upgrade cloudflare-plugin-frontend to v3.8.0 (#535)
  • Retrieve the WordPress domain only from the active zone (#532)

4.12.4 – 2024-01-19

  • Fix “creation of dynamic property is deprecated” notice

4.12.3 – 2024-01-04

  • Prevent usage of cloudflare_proxy action on /admin-ajax endpoint for non-Administrator users

4.12.2 – 2023-07-18

  • Revert the incorrect fix to Cloudflare Partners endpoint

4.12.1 – 2023-07-18

  • Fix Cloudflare Partners endpoint

4.12.0 – 2023-06-01

  • Updated plugin to be tested on WordPress 6.2

4.11.0 – 2022-07-27

  • Restrict access to sensitive files using .htaccess configuration.
  • Added cloudflare_use_cache hook to determine when to cache.
  • Allow arrays with url keys to be passed into cache purge requests.
  • Handle getZoneSettings not returning a key and throwing an unset array key error.

4.10.1 – 2022-06-06

  • Fix logic for ignoring cache purge operations.

4.10.0 – 2022-06-03

  • Ignore feed URLs in cache purge operations unless a cache override is in place.

4.9.1 – 2022-05-04

  • Handle empty URL arrays for purging.
  • Swap publicly_queryable for is_post_type_viewable when determining if the post is public.
  • Update always_use_https check to work with the API lacking a “value” for the key.
  • purgeCacheByRelevantURLs now accepts either an array or single ID

4.8.3 – 2022-03-22

  • When a zone has “Always Use HTTPS” enabled, only send HTTPS based URLs. HTTP URLs will never be hit and never present in the cache.

4.8.2 – 2022-03-18

  • Retag 4.8.1 with correct version in user agent

4.8.1 – 2022-03-18

  • Loosen domain check for cache purge calls to allow subdomains

4.8.0 – 2022-03-15

  • Updated supported WordPress version to 5.9
  • Replace Guzzle with wp_remote_request for remote calls
  • Update cache purge logic to improve efficiency of what we send to the remote service

4.7.0 – 2021-10-28

  • Merge cloudflare-plugin-backend into Cloudflare-WordPress repository

4.6.0 – 2021-10-11

  • Make frontend use native await/async
  • Purge cache on mobile if APO Cache By Device Type

4.5.1 – 2021-06-03

  • Rewrite PHP 8 bootstrap files for symfony/polyfill to be PHP 7 compatible

4.5.0 – 2021-06-02

  • Document unintuitive transition_post_status WP hook behavior
  • Only purge public taxonomies while clearing any empty values from the list
  • Better handling of cases where wp_get_attachment_image_src is false and not a usable array
  • Support activation of IDN domains
  • Improve development experience by shipping a Docker Compose file with more tooling and documentation

4.4.0 – 2021-03-23

  • Purge posts when transitioning to or from the ‘published’ state
  • Remove conditional logic for subdomain, allow to activate APO feature on the subdomain
  • Further work to autocorrect APO settings

4.3.0 – 2021-03-19

  • Sanitise sensitive HTTP header logs
  • Stop sending cfCRSFToken to remote API
  • Add warnings for incorrectly configured Automatic Platform Optimization
  • Purge posts that go from public to private
  • Purge pagination for first 3 pages

4.2.2 – 2021-03-08

  • Fix warning for file_get_contents of composer.json

4.2.1 – 2021-03-05

  • Deprecate REST dashboard analytics

4.2.0 – 2021-03-02

  • Allow configuration of Cloudflare credentials via environment variables
  • Prevent purging of cache before comments have been moderated
  • Remove unnecessary symfony/yaml dependency

4.1.0 – 2021-02-11

  • Removed development dependencies from vendor directory
  • Update CLOUDFLARE_MIN_PHP_VERSION to match the plugin requirements

4.0.0 – 2021-02-09

  • Drop support for PHP 5.6, 7.0 and 7.1

3.8.10 – 2021-01-29

  • Add Jacob to maintainers list

3.8.9 – 2021-01-14

  • Revert Add pagination purging

3.8.8 – 2021-01-13

  • Add pagination purging

3.8.7 – 2020-12-07

  • Purge taxonomy feed URLs
  • Fix changing APO settings (cf, wordpress, plugin) when running on subdomain
  • Fix setting hostname override

3.8.6 – 2020-11-19

  • Add subdomain support for APO card

3.8.5 – 2020-10-15

  • Added automatic purge cache on new comment

3.8.4 – 2020-10-13

  • Added composer’s type=wordpress-plugin for Bedrock users
  • Fixed typo in readme.txt
  • Fix modify header exception thrown during wp-cron
  1. Cloudflare Plugin= 3.8.3 – 2020-10-05 =
  • Fixed setting all APO values properly for correct dashboard rendering

3.8.2 – 2020-10-02

  • re-relase broken version, no changes

3.8.1 – 2020-10-02

  • Fixed typo in config.js(on) that resulted in warning #292
  • Check for array indicies are set before using #278

3.8.0 – 2020-10-01

  • Added APO support
  • Renamed Automatic Cache Management card to Auto Purge Content On Update

3.7.0 – 2020-09-25

  • Bump cloudflare-plugin-backend v2.3.0 and cloudflare-plugin-frontend v3.1.0 #283

3.6.0 – 2020-09-17

  • Bump cloudflare-plugin-backend #276

3.5.1 – 2020-07-02

Fixed

  • Fixed Cache Purges failing #266

3.5.0 – 2020-06-26

Fixed

  • Disable HTTP/2 Push on wp-admin pages #214
  • Fix PHP 7.4 notice #256

Added

  • Purge attachment URLs #208
  • Purge URLs on page/post update #206
  • Turn on IPv6 by default #229
  • Add constants for better control HTTP/2 Server Push #213
  • Allow custom actions for purge url and purge everything actions #212

3.4.1 – 2019-08-29

Fixed

  • Updated list of contributors.
  • Updated tested WordPress version to latest (5.2.2).

3.4.0 – 2019-08-29

Added

  • Added support for API Token authentication.

3.3.2 – 2017-12-12

Fixed

  • Bug in cf-ip-rewrite

Added

  • Added a new filter cloudflare_purge_by_url allowing users to have better control on automatically purged urls.

3.3.1 – 2017-6-29

Fixed

  • Potential bug by using $_GET.

3.3.0 – 2017-6-29

Added

  • Added a new Splash Screen
  • Added userConfig.js file allowing custom configurations.
  • Added logs in debug mode for Automatic Cache Purge.
  • Added logs for oversized Server Push HTTP headers.

Changed

  • Automatic Cache Purge now purges Autoptimize by everything rather than by URL.
  • Updated IP Ranges

Fixed

  • Bug where domains which had capital letters not working.
  • Bug where Automatic Cache Purge couldn’t purge front page.
  • Bug related to work with IWP.
  • Bug where if PHP is compiled with ipv6-disable flag, it crashed the site.

3.2.1 – 2017-3-14

Fixed

  • Bug where accounts which had more than 20 zones would not show up correctly.

3.2.0 – 2017-3-1

Added

  • Bypass Cache By Cookie functionality.
  • HTTP/2 Server Push functionality (disabled by default).

Changed

  • Lowered the plugin size.
  • Automatic Cache Management feature includes purging taxonomies.
  • Automatic Cache Management feature supports sites which use both HTTP and HTTPS.

Fixed

  • Admin bar disappearing from the plugin.
  • Bug where spinner was loading forever.
  • Bug where the backend errors where not being shown in the frontend.
  • Issues where IE11 was not working properly.

3.1.1 – 2016-11-17

Changed

  • Moved Admin Bar behind Automatic Cache Purge toggle.

3.1.0 – 2016-11-17

Added

  • Added ability to automatically purge cache when a post is published, edited or deleted. (Thanks to brandomeniconi and mike503)
  • Added ability to work with WordPress MU Domain Mapping plugin. (Thanks to brandomeniconi)

Changed

  • Changed the UI to look more like cloudflare.com dashboard.
  • Changed plugin description.
  • Disabled showing WordPress Admin Bar and Edit Post Link to avoid caching problems for users using HTML Caching.

Fixed

  • Fixed bug where require vendor folders was not working.
  • Fixed bug where static files were cached which caused issues updating the plugin.
  • Fixed dependencies which caused issues with PHP Compatibility Checker plugin.

3.0.6 – 2016-10-6

Added

  • Added ability to toggle Development Mode.

Fixed

  • Fixed bug where active zone dropdown was not working properly.

Changed

  • Compressed resources to lower plugin size.
  • Updated Cloudflare logo.

3.0.5 – 2016-09-28

Fixed

  • Fixed bug where refactored Flexible SSL fix was causing the settings page hook not to load.

3.0.4 – 2016-09-27

Added

  • Ability for users to toggle Automatic HTTPS Rewrites (enabled by default, solves for most mixed content errors).

Fixed

  • Fixed an issue where low PHP version where getting syntax error.
  • Fixed issue where some users using Flexible SSL where not able to login to wp-admin .
  • Fixed a bug where the active zone selector was not paginating through the whole zone list.
  • Fixed an issue where the setting for Image Optimization was being displayed incorrectly.
  • Fixed a bug in Analytics where the  Uniques Visitors data was not displaying accurately.

Changed

  • Compressed assets to lower plugin size.
  • Hooks loading logic refactored to make it more simple and readable.

3.0.3 – 2016-09-21

Fixed

  • Fixed an issue where some domains were being incorrectly propagated to the domain selector dropdown
  • Fixed an issue where the Web Application Firewall was accidentally triggering RFI Attack Rules
  • Fixed an issue where image optimization was not being enabled for Pro and higher Cloudflare plans

3.0.2 – 2016-09-16

Fixed

  • Disabled HTTP/2 Server Push which was leading to 520 and 502 errors for some websites.

3.0.1 – 2016-09-16

Fixed

  • Fixed HTTP/2 Server Push exceeding the header limit Cloudflare has which caused 520 errors.
  • Fixed warning message in HTTP/2 Server Push.

3.0.0 – 2016-09-15

Added

  • Added one-click application oft WordPress specific recommended settings
  • Added ability to purge the Cloudflare cache
  • Integrated with WordPress cache management to automatically clear the Cloudflare cache on updating site appearance
  • Added ability to change Cloudflare settings (Always Online mode, I’m Under Attack, Image Optimization, Security Level, Web Application Firewall)
  • Added Analytics showing Cached Requests, bandwidth used, unique visitors, threats blocked
  • Added Header rewrite to prevent a redirect loop when Cloudflare’s Universal SSL is enabled
  • Added HTTP/2 Server Push support
  • Added Support for PHP 5.3+

Removed

  • Removed HTTPS Protocol Rewriting
  • Removed submission of spam comments
  • Removed ability to toggle Development Mode On/Off

Changed

  • Updated user interface
  • Started to support WordPress 3.4+ instead of 2.8+ because we depend on the WordPress Options API

SCAM company!!! avoid

By developer2023 on January 18, 2024

Terrible scam company with very unethical practices and a products that never works !! avoid!

This plugin with the APO subscription is great

By bloup on October 13, 2023

I have installed this plugin and then I subscribed to the Cloudflare APO offer. This saved me a lot of money and energy because normally without cloudflare APO, i would have been forced to move my website from germany to the USA.
So, now everything is working like a charm Javascript minification. I have only 1 JS file left for my entire wordpress installation.
The cookies are still there and it returns the right ones. I don't know how they succeed in this black magic.

this plugin is better than super cache for cloudflare because when you use super cache for cloudflare, cookies are stripped from http headers. Also, when you are logged in APO still caches it while super cache for cloudflare bypass it.

You don't need to use cloudflare rules along with this plugin. If you activate APO, cloudflare applies all the settings for you. you don't need touch anything.

so from what I understand, you must only use the features from cloudflare like minification and cache from cloudflare. Uninstall wp super cache or any other cache and uninstall autoptimize. Let cloudflare manage the minification and cache of your website.

'APO' CloudFlare SCAM

By FS (felipe.domcamus) on August 24, 2023

Customers on our Free plans can only submit tickets for billing, account, and registrar issues.Cloudflare support

If I paid for the ‘APO’, well, I’m not on the ‘Free plan’, do you agree?

Honestly, I feel completely offended.

I don’t recommend Cloudflare’s ‘APO’, you’re on your own.

The plugin is good

By nene (wpdreamer) on August 8, 2023

This plugin is fine, it does the job. Those that give low ratings have no idea what they are doing and of course they break their websites.

APO causing infinite loop error from non www to www.

By bhawnarwt21 on July 6, 2023

Activating the APO causing too many redirect infinite loop non www not resolving to www.

Using - Sg Optimizer+ Wp Rocket + Cloudflare

Unable to use APO on a subdomian

By aimanrazab on June 14, 2023

I tried million times to use their guide on how to run APO on my subdomain but still doesn't work. I tried to reach them on the support system but they have leave me hanging without clue and solution.

Plugin muito eficiente

By ajudasp on June 13, 2023

O plugin funciona muito bem, otimiza de forma simples e funcional. Recomendo bastante este plugin, utilizando unicamente como plugin de cache para não haver conflitos. O único trabalho que você terá é vincular sua conta da cloudflare com o plugin, colando a chave api.
Ele acelera sem corromper seu site. Acredito que estas avaliações negativas é porque possuiam mais de 1 plugin de cache ativo, algum plugin que entrou em conflito com o da clouflare, dentre outros fatores.
Recomendo fortemente este plugin e se quiser melhorar ainda mais seu desempenho, pague 5 dolares por mês e ative Automatic Platform Optimization. Vale a pena o investimento no clouflare.

light and as expected

By Mohamad Al Karbi (mohamadkarbi) on June 11, 2023

I have no issue with plugin yet. Work as expected and I needed it for APO only. Otherwise, I don't see a use considering every thing is managed from the CF dashboard. However, I wish they can option for CF Turnstile to add it on the forms (login) on the site...

Excellent plugin! Used for years on thousands of sites with no issues.

By Brian Jackson (brianleejackson) on June 9, 2023

The free Cloudflare plugin is great! It's an extremely fast and easy way to hook up their WordPress automatic cache management rules. This is essential if you're updating/publishing content. The manual "Purge Cache" option is also handy if you need to do a sitewide purge.

I've used this plugin for years on all of our sites along with APO. I also recommend it to all of our clients.

Ranking web turun

By deydi on June 7, 2023

seletalah pakai plugin ini, view per artikel naik tapi setiap bulan ranking website di similarweb terus menurun.

Try other plugins too!

Flexible SSL for CloudFlare

Fix For Redirect Loops on WordPress with CloudFlare's Flexible/Universal SSL.

Try Demo

Interlinks Manager

Interlinks Manager is an SEO WordPress plugin that gives you the ability to monitor and optimize your internal links.

Try Demo

Kraken.io Image Optimizer

This plugin allows you to optimize your WordPress images through the Kraken.io API, the world's most advanced image optimization and resizing API …

Try Demo
Screenshots

Try Cloudflare With InstaWP

Contact Sales

Reach out to us to explore how InstaWP can benefit your business.

Request demo

Wondering how to integrate InstaWP with your current workflow? Ask us for a demo.