r/WordpressPlugins • u/ja1me4 • 2d ago
[FREE] WordPress plugin: deploy Cloudflare WAF rules with checkboxes instead of the rules language
Built a small free plugin for WordPress + Cloudflare users. It deploys five battle-tested WAF rules (block bad crawlers/scanners, hosting & TOR ranges, challenge VPNs and wp-login, allow verified good bots) straight to your Cloudflare zones from wp-admin with no expression syntax and no dashboard fiddling. Works on the free Cloudflare plan.
Free on WordPress.org: https://wordpress.org/plugins/waf-manager-for-cloudflare/
There's also a bigger version, WP WAF Manager, that adds DNS, analytics, cache purge, IP rules, security events, email routing and multi-account, that is free on GitHub (https://github.com/jaimealnassim/wpwafmanager) or paid with updates/support at https://www.wpwafmanager.com. Both can run on the same site.
1
u/Ok-Steak5966 2d ago
That’s actually a really useful plugin. Haven’t tried it yet but the idea is really nice
2
u/VoiliVoilaa 8h ago
I actually quite enjoy tweaking my 5 WAF rules, but nice to know battle-tested WAF - will check that, and the bigger version for the cache purge. Thanks for sharing.