The Cloudflare plugin connects a WordPress site to a Cloudflare account and brings selected settings and analytics into the WordPress dashboard. Cloudflare Pro and Business include Automatic Platform Optimization (APO); the Web Application Firewall (WAF) is available on paid plans.

When edge caching is the priority

APO caches static HTML pages at Cloudflare’s edge. Traditional caching and CDN setups often focus on static assets such as pictures, JavaScript and CSS, while APO also caches page content. When a page is updated, APO automatically purges that content from cache so visitors can receive the current version while unchanged pages remain cached. Cloudflare describes its edge network as having more than 250 data centers worldwide and says APO can speed up a WordPress site by up to 300%.

APO is included with paid plans, including Pro and Business. On the free plan, APO is a $5 monthly add-on with unlimited subdomains. Cloudflare also lists free DNS, automated SSL certificates and DDoS mitigation among the benefits available with APO.

When WordPress-focused firewall rules are needed

The WAF is available on paid plans and includes rulesets tailored to WordPress threats and vulnerabilities. Cloudflare regularly updates these rules. The plugin also includes a header rewrite intended to prevent a redirect loop when Universal SSL is enabled.

Settings and analytics in WordPress

From the plugin, administrators can manage cache purges, security level, Always Online and image optimization settings. Its analytics display total visitors, bandwidth saved and threats blocked. The plugin also works with HTTP/2 and Server Push.

Connect and configure the plugin

Install and activate the plugin in WordPress, then connect a Cloudflare account using the account email and either an API Token or API key. The listed requirements are WordPress 6.7 or newer and PHP 7.4 or newer. After connecting, configure the available settings and enable plan capabilities such as APO where included in the account.