Cloudflare

Wordpress Plugin
Download latest - 4.11.0

Developers

manatarms
epatryk
deuill
zackproser
furkan811

Download Stats

Today 415
Yesterday 766
Last Week 5,062
All Time 1,577,061
Banner 772x250

What this plugin can do for you

https://www.youtube.com/watch?v=DWANhxoDxFI?feature=youtu.be

Automatic Platform Optimization (APO)

Speed up your WordPress site by up to 300% with Cloudflares Automatic Platform Optimization (APO) plugin. APO allows Cloudflare to serve your entire WordPress site from our edge network of over 250+ data centers worldwide ensuring fast & reliable performance for your visitors no matter where they are.

Optimizing your WordPress site with multiple plugins can be overwhelming. Take your WordPress sites performance to the next level by switching to a single plugin for CDN, intelligent caching, and other key WordPress optimizations with Cloudflare (APO). Visit our announcement blog to learn more about APO.

What makes APO different from other caching plugins?

The key differentiating factor between Cloudflare APO and other traditional page caching and CDN solutions is its ability to directly cache static HTML at Cloudflares edge. Every other plugin and CDN will cache your static assets (images, javascript, CSS), but none help you cache the actual content on your site (the HTML) using a massive edge network like Cloudflares.

APO intelligently caches your HTML pages and will automatically purge content from the cache that you update, so users will always see the latest content without compromising the performance of pages that haven't been recently updated

What you get with Cloudflare APO

APO is a $5 add-on with Cloudflares free plan and comes with an unlimited amount of subdomains. With APO you also get to leverage many of the other benefits of Cloudflare such as Free DNS, Free Automated SSL Certificates, Free DDoS Mitigation, and more. APO is free for all paid plan users so if you have Cloudflare Pro or Business already you can just turn it on. You can compare all our plans here.

Protect your WordPress site with Cloudflares Web Application Firewall (WAF)

Cloudflares WAF is available on all our paid plans and comes with built-in rulesets, specifically tailored to mitigate WordPress threats and vulnerabilities. These security rules are regularly updated by our team of experts. At the flip of a switch, youll have your WAF up and running without any difficult adjustments to your site. With over 26 million internet properties under our protection, you can sleep easy knowing Cloudflare has your back.

Additional features

  • Header rewrite to prevent a redirect loop when Cloudflares Universal SSL is enabled

  • Change Cloudflare settings from within the plugin itself without needing to navigate to the cloudflare.com dashboard. You can change settings for cache purge, security level, Always Online, and image optimization

  • View analytics such as total visitors, bandwidth saved, and threats blocked

  • Support for HTTP2/Server Push


Releases (78 )

Version Release Date Change Log
4.11.0 2022-07-27

  • 2022-07-27 =

  • Restrict access to sensitive files using .htaccess configuration.

  • Added cloudflare_use_cache hook to determine when to cache.

  • Allow arrays with url keys to be passed into cache purge requests.

  • Handle getZoneSettings not returning a key and throwing an unset array key error.
4.10.1 2022-06-05

  • 2022-06-06 =

  • Fix logic for ignoring cache purge operations.
4.10.0 2022-06-03

  • 2022-06-03 =

  • Ignore feed URLs in cache purge operations unless a cache override is in place.
4.9.1 2022-05-04

  • 2022-05-04 =

  • Handle empty URL arrays for purging.

  • Swap publicly_queryable for is_post_type_viewable when determining if the post is public.

  • Update always_use_https check to work with the API lacking a "value" for the key.

  • purgeCacheByRelevantURLs now accepts either an array or single ID
4.9.0 2022-05-03
4.8.3 2022-03-21

  • 2022-03-22 =

  • When a zone has "Always Use HTTPS" enabled, only send HTTPS based URLs. HTTP URLs will never be hit and never present in the cache.
4.8.2 2022-03-18

  • 2022-03-18 =

  • Retag 4.8.1 with correct version in user agent
4.8.1 2022-03-17

  • 2022-03-18 =

  • Loosen domain check for cache purge calls to allow subdomains
4.8.0 2022-03-15

  • 2022-03-15 =

  • Updated supported WordPress version to 5.9

  • Replace Guzzle with wp_remote_request for remote calls

  • Update cache purge logic to improve efficiency of what we send to the remote service
4.7.0 2021-10-27

  • 2021-10-28 =

  • Merge cloudflare-plugin-backend into Cloudflare-WordPress repository
4.6.0 2021-10-12

  • 2021-10-11 =

  • Make frontend use native await/async

  • Purge cache on mobile if APO Cache By Device Type
4.5.1 2021-06-03

  • 2021-06-03 =

  • Rewrite PHP 8 bootstrap files for symfony/polyfill to be PHP 7 compatible
4.5.0 2021-06-01

  • 2021-06-02 =

  • Document unintuitive transition_post_status WP hook behavior

  • Only purge public taxonomies while clearing any empty values from the list

  • Better handling of cases where wp_get_attachment_image_src is false and not a usable array

  • Support activation of IDN domains

  • Improve development experience by shipping a Docker Compose file with more tooling and documentation
4.4.0 2021-03-22

  • 2021-03-23 =

  • Purge posts when transitioning to or from the 'published' state

  • Remove conditional logic for subdomain, allow to activate APO feature on the subdomain

  • Further work to autocorrect APO settings
4.3.0 2021-03-18

  • 2021-03-19 =

  • Sanitise sensitive HTTP header logs

  • Stop sending cfCRSFToken to remote API

  • Add warnings for incorrectly configured Automatic Platform Optimization

  • Purge posts that go from public to private

  • Purge pagination for first 3 pages
4.2.2 2021-03-09

  • 2021-03-08 =

  • Fix warning for file_get_contents of composer.json
4.2.1 2021-03-05

  • 2021-03-05 =

  • Deprecate REST dashboard analytics
4.2.0 2021-03-02

  • 2021-03-02 =

  • Allow configuration of Cloudflare credentials via environment variables

  • Prevent purging of cache before comments have been moderated

  • Remove unnecessary symfony/yaml dependency
4.1.0 2021-02-10

  • 2021-02-11 =

  • Removed development dependencies from vendor directory

  • Update CLOUDFLARE_MIN_PHP_VERSION to match the plugin requirements
4.0.0 2021-02-09

  • 2021-02-09 =

  • Drop support for PHP 5.6, 7.0 and 7.1
3.8.9 2021-01-14

  • 2021-01-14 =

  • Revert Add pagination purging
3.8.8 2021-01-13

  • 2021-01-13 =

  • Add pagination purging
3.8.7 2020-12-08

  • 2020-12-07 =

  • Purge taxonomy feed URLs

  • Fix changing APO settings (cf, wordpress, plugin) when running on subdomain

  • Fix setting hostname override
3.8.6 2020-11-23

  • 2020-11-19 =

  • Add subdomain support for APO card
3.8.5 2020-10-15

  • 2020-10-15 =

  • Added automatic purge cache on new comment
3.8.4 2020-10-13

  • 2020-10-13 =

  • Added composer's type=wordpress-plugin for Bedrock users

  • Fixed typo in readme.txt

  • Fix modify header exception thrown during wp-cron

  1. Cloudflare Plugin

=
3.8.3 2020-10-05

  • 2020-10-05 =

  • Fixed setting all APO values properly for correct dashboard rendering
3.8.2 2020-10-02

  • 2020-10-02 =

  • re-relase broken version, no changes
3.8.1 2020-10-02

  • 2020-10-02 =

  • Fixed typo in config.js(on) that resulted in warning #292

  • Check for array indicies are set before using #278
3.8.0 2020-10-02

  • 2020-10-01 =

  • Added APO support

  • Renamed Automatic Cache Management card to Auto Purge Content On Update
3.7.0 2020-09-26

  • 2020-09-25 =

  • Bump cloudflare-plugin-backend v2.3.0 and cloudflare-plugin-frontend v3.1.0 #283
3.6.0 2020-09-17

  • 2020-09-17 =

  • Bump cloudflare-plugin-backend #276
3.5.1 2020-07-02
  • 2020-07-02 =

Fixed

  • Fixed Cache Purges failing #266
3.5.0 2020-06-29
  • 2020-06-26 =

Fixed

  • Disable HTTP/2 Push on wp-admin pages #214
  • Fix PHP 7.4 notice #256

Added

  • Purge attachment URLs #208
  • Purge URLs on page/post update #206
  • Turn on IPv6 by default #229
  • Add constants for better control HTTP/2 Server Push #213
  • Allow custom actions for purge url and purge everything actions #212
3.4.0 2019-08-30
  • 2019-08-29 =

Added

  • Added support for API Token authentication.
3.4.1 2019-08-30
  • 2019-08-29 =

Fixed

  • Updated list of contributors.
  • Updated tested Wordpress version to latest (5.2.2).
3.3.3 2019-03-06
  • 2019-3-6 =

Fixed

  • Bug in Hooks.php causing errors in PHP 7+
  • Bug preventing Autoptimize plugin's optimized asset urls from being used when present and when Cloudflare HTTP/2 Push was enabled
3.3.2 2017-12-12
  • 2017-12-12 =

Fixed

  • Bug in cf-ip-rewrite

Added

  • Added a new filter cloudflare_purge_by_url allowing users to have better control on automatically purged urls.
3.3.1 2017-06-29
  • 2017-6-29 =

Fixed

  • Potential bug with using by unchecked $_GET.
3.3.0 2017-06-29
  • 2017-6-29 =

Added

  • Added a new Splash Screen
  • Added userConfig.js file allowing custom configurations.
  • Added logs in debug mode for Automatic Cache Purge.
  • Added logs for oversized Server Push HTTP headers.

Changed

  • Automatic Cache Purge now purges Autoptimize by everything rather than by URL.
  • Updated IP Ranges

Fixed

  • Bug where domains which had capital letters not working.
  • Bug where Automatic Cache Purge couldn't purge front page.
  • Bug related to work with IWP.
  • Bug where if PHP is compiled with ipv6-disable flag, it crashed the site.
3.2.1 2017-03-15
  • 2017-3-14 =

Fixed

  • Bug where accounts which had more than 20 zones would not show up correctly.
3.2.0 2017-03-01
  • 2017-3-1 =

Added

  • Bypass Cache By Cookie functionality.
  • HTTP/2 Server Push functionality (disabled by default).

Changed

  • Lowered the plugin size.
  • Automatic Cache Management feature includes purging taxonomies.
  • Automatic Cache Management feature supports sites which use both HTTP and HTTPS.

Fixed

  • Admin bar disappearing from the plugin.
  • Bug where spinner was loading forever.
  • Bug where the backend errors where not being shown in the frontend.
  • Issues where IE11 was not working properly.
3.1.1 2016-11-17
  • 2016-11-17 =

Changed

  • Moved Admin Bar behind Automatic Cache Purge toggle.
3.1.0 2016-11-17
  • 2016-11-17 =

Added

  • Added ability to automatically purge cache when a post is published, edited or deleted. (Thanks to brandomeniconi and mike503)
  • Added ability to work with Wordpress MU Domain Mapping plugin. (Thanks to brandomeniconi)

Changed

  • Changed the UI to look more like cloudflare.com dashboard.
  • Changed plugin description.
  • Disabled showing WordPress Admin Bar and Edit Post Link to avoid caching problems for users using HTML Caching.

Fixed

  • Fixed bug where require vendor folders was not working.
  • Fixed bug where static files were cached which caused issues updating the plugin.
  • Fixed dependencies which caused issues with PHP Compatibility Checker plugin.
3.0.6 2016-10-06
  • 2016-10-6 =

Added

  • Added ability to toggle Development Mode.

Fixed

  • Fixed bug where active zone dropdown was not working properly.

Changed

  • Compressed resources to lower plugin size.
  • Updated Cloudflare logo.
3.0.5 2016-09-28
  • 2016-09-28 =

Fixed

  • Fixed bug where refactored Flexible SSL fix was causing the settings page hook not to load.
3.0.4 2016-09-27
  • 2016-09-27 =

Added

  • Ability for users to toggle Automatic HTTPS Rewrites (enabled by default, solves for most mixed content errors).

Fixed

  • Fixed an issue where low PHP version where getting syntax error.
  • Fixed issue where some users using Flexible SSL where not able to login to wp-admin .
  • Fixed a bug where the active zone selector was not paginating through the whole zone list.
  • Fixed an issue where the setting for Image Optimization was being displayed incorrectly.
  • Fixed a bug in Analytics where theUniques Visitors data was not displaying accurately.

Changed

  • Compressed assets to lower plugin size.
  • Hooks loading logic refactored to make it more simple and readable.
3.0.3 2016-09-21
  • 2016-09-21 =

Fixed

  • Fixed an issue where some domains were being incorrectly propagated to the domain selector dropdown
  • Fixed an issue where the Web Application Firewall was accidentally triggering RFI Attack Rules
  • Fixed an issue where image optimization was not being enabled for Pro and higher CloudFlare plans
3.0.2 2016-09-16
  • 2016-09-16 =

Fixed

  • Disabled HTTP/2 Server Push which was leading to 520 and 502 errors for some websites.
3.0.1 2016-09-16
  • 2016-09-16 =

Fixed

  • Fixed HTTP/2 Server Push exceeding the header limit Cloudflare has which caused 520 errors.
  • Fixed warning message in HTTP/2 Server Push.
1.2.5.Beta 2016-09-15
  • BETA RELEASE: IPv6 support - Pull the IPv6 range from https://www.cloudflare.com/ips-v6. Added Development Mode option to wordpress plugin settings page.
1.2.6.Beta 2016-09-15
1.3.10 2016-09-15
  • Added IP ranges.
1.3.11 2016-09-15
  • Adjusted a line syntax to account for differing PHP configurations.
1.3.12 2016-09-15
  • Removed use of php short-code in a couple of places
  • Added some cURL / json_decode error handling to output to the screen any failures
  • Reformatted error / notice display slightly
1.3.13 2016-09-15
  • Clarified error messaging in the plugin further
  • Added cURL error detection to explain issues with server installed cert bundles
1.3.14 2016-09-15
  • Improved logic to detect the customer domain, with added option for a manual override
  • Standardised error display
  • Updated CloudFlare IP Ranges
1.3.15 2016-09-15
  • Plugin settings are now found under Settings -> CloudFlare
  • Plugin is now using the WordPress HTTP_API - this will give better support to those in hosting environments without cURL or an up to date CA cert bundle
  • Fixes to squash some PHP Warnings. Relocated error logging to only happen in WP_DEBUG mode
  • Added Protocol Rewriting option to support Flexible SSL
1.3.16 2016-09-15
  • Update regex to not alter the canonical url
1.3.17 2016-09-15
  • Limit http protocol rewriting to text/html Content-Type
1.3.18 2016-09-15
  • Bug: Clean up headers debugging message that can be displayed in some cases
1.3.19 2016-09-15
1.3.2.Beta 2016-09-15
  • BETA RELEASE: IPv6 support - Pull the IPv6 range from https://www.cloudflare.com/ips-v6. Added Development Mode option to wordpress plugin settings page.
1.3.20 2016-09-15
  • Updated the method to restore visitor IPs
  • Updated the URL rewrite to be compatible with WordPress 4.4
1.3.21 2016-09-15
  • Added input sanitization.
1.3.22 2016-09-15
  • Fixing bug which prevented a user from activating/deactivating the plugin
1.3.23 2016-09-15

Fixed bug that was preventing spam comments from being sent to CloudFlare
1.3.24 2016-09-15
1.3.25 2016-09-15
1.3.3 2016-09-15
  • Bump stable version number.
1.3.4 2016-09-15
  • Add in IPV6 support and Development Mode option to wordpress plugin settings page. Remove cached IP range text file.
1.3.5 2016-09-15
  • Disable Development Mode option if cURL not installed. Will Use JSONP in future release to allow domains without cURL to use Development Mode.
1.3.6 2016-09-15
  • Remove Database Optimizer.
1.3.7 2016-09-15
  • Remove Database Optimizer related text.
1.3.8 2016-09-15
  • Fixed issue with invalid header.
  • Updated IP ranges
  • Fixed support link
1.3.9 2016-09-15
  • Made adjustment to syntax surrounding cURL detection for PHP installations that do not have short_open_tag enabled.
3.0.0 2016-09-15
  • 2016-09-15 =

Added

  • Added one-click application oft WordPress specific recommended settings
  • Added ability to purge the CloudFlare cache
  • Integrated with WordPress cache management to automatically clear the CloudFlare cache on updating site appearance
  • Added ability to change CloudFlare settings (Always Online mode, Im Under Attack, Image Optimization, Security Level, Web Application Firewall)
  • Added Analytics showing Cached Requests, bandwidth used, unique visitors, threats blocked
  • Added Header rewrite to prevent a redirect loop when Cloudflares Universal SSL is enabled
  • Added HTTP/2 Server Push support
  • Added Support for PHP 5.3+

Removed

  • Removed HTTPS Protocol Rewriting
  • Removed submission of spam comments
  • Removed ability to toggle Development Mode On/Off

Changed

  • Updated user interface
  • Started to support WordPress 3.4+ instead of 2.8+ because we depend on the WordPress Options API
1.2.4 2016-09-15
  • Pull the IP range from https://www.cloudflare.com/ips-v4. Modified to keep all files within cloudflare plugin directory.