Here are CloudFlare page rules for WordPress web site.
yourdomain/wp-admin/*
Security Level = High Cache Level = Bypass Disable Apps Disable Performance

yourdomain/wp-content/uploads/*
Browser Cache TTL = a day Cache Level = Cache Everything Edge Cache TTL = a month
Configuration Rules
(http.request.uri wildcard “/wp-login.php*”)
Security Level = I am Under Attack
Security > WAF > Custom rules
Rule name = block xmlrpc
(http.request.uri wildcard r”/xmlrpc.php*”)
Choose action = Block
Leave a Reply