Here are CloudFlare page rules for WordPress web site.
yourdomain/xmlrpc.php*
Security Level = High
yourdomain/wp-login.php*
Security Level = High Browser Integrity Check = On
yourdomain/wp-admin/*
Security Level = High Cache Level = Bypass Disable Apps Disable Performance
yourdomain/wp-content/uploads/*
Browser Cache TTL = a day Cache Level = Cache Everything Edge Cache TTL = a month