Cloudflare Page Cache for WordPress Security & Risk Analysis

wordpress.org/plugins/wp-cloudflare-cache

WP Cloudflare Cache plugin built for cache html pages on Cloudflare free plan and purge cache only when post or page updated.

60 active installs v1.2.1 PHP 5.6+ WP 4.7+ Updated May 11, 2024
cloudflarecloudflare-cachecloudflare-page-cacheimprove-performanceimprove-speed
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Cloudflare Page Cache for WordPress Safe to Use in 2026?

Generally Safe

Score 92/100

Cloudflare Page Cache for WordPress has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The wp-cloudflare-cache v1.2.1 plugin exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The code adheres to good practices by not utilizing dangerous functions, all SQL queries are prepared, and all outputs are properly escaped. There are no file operations or bundled libraries to worry about. The plugin also has a robust approach to security checks, with 7 capability checks present and all 4 AJAX handlers secured (0 unprotected). Furthermore, the complete absence of any known CVEs and historical vulnerabilities is a significant positive indicator of the plugin's security development and maintenance.

Key Concerns

  • No Nonce checks on AJAX handlers
  • No critical or high severity taint flows, but 0 flows analyzed
Vulnerabilities
None known

Cloudflare Page Cache for WordPress Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Cloudflare Page Cache for WordPress Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
7
File Operations
0
External Requests
5
Bundled Libraries
0
Attack Surface

Cloudflare Page Cache for WordPress Attack Surface

Entry Points4
Unprotected0

AJAX Handlers 4

authwp_ajax_wpcc_purge_everythingcore\includes\classes\class-wp-cloudflare-cache-purge.php:51
authwp_ajax_wpcc_purge_test_configcore\includes\classes\class-wp-cloudflare-cache-purge.php:52
authwp_ajax_wpcc_create_page_rulecore\includes\classes\class-wp-cloudflare-cache-purge.php:53
authwp_ajax_wpcc_set_browser_ttlcore\includes\classes\class-wp-cloudflare-cache-purge.php:54
WordPress Hooks 13
actioninitcore\class-wp-cloudflare-cache.php:58
actionsend_headerscore\class-wp-cloudflare-cache.php:59
actiontransition_comment_statuscore\includes\classes\class-wp-cloudflare-cache-purge.php:57
actioncomment_postcore\includes\classes\class-wp-cloudflare-cache-purge.php:58
actiondelete_commentcore\includes\classes\class-wp-cloudflare-cache-purge.php:59
actionwp_insert_postcore\includes\classes\class-wp-cloudflare-cache-purge.php:74
actiontransition_post_statuscore\includes\classes\class-wp-cloudflare-cache-purge.php:75
actionwpcc_purge_cachecore\includes\classes\class-wp-cloudflare-cache-purge.php:77
actionadmin_menucore\includes\classes\class-wp-cloudflare-cache-settings.php:44
actionadmin_initcore\includes\classes\class-wp-cloudflare-cache-settings.php:45
actionadmin_bar_menucore\includes\classes\class-wp-cloudflare-cache-settings.php:47
actionadmin_footercore\includes\classes\class-wp-cloudflare-cache-settings.php:48
filteruse_block_editor_for_postcore\includes\classes\class-wp-cloudflare-cache-settings.php:316

Scheduled Events 6

wpcc_purge_cache
wpcc_purge_cache
wpcc_purge_cache
wpcc_purge_cache
wpcc_purge_cache
wpcc_purge_cache
Maintenance & Trust

Cloudflare Page Cache for WordPress Maintenance & Trust

Maintenance Signals

WordPress version tested6.5.8
Last updatedMay 11, 2024
PHP min version5.6
Downloads5K

Community Trust

Rating80/100
Number of ratings5
Active installs60
Developer Profile

Cloudflare Page Cache for WordPress Developer Profile

Jumedeen khan

3 plugins · 460 total installs

92
trust score
Avg Security Score
97/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Cloudflare Page Cache for WordPress

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-cloudflare-cache/core/admin/css/wp-cloudflare-cache-admin.css/wp-content/plugins/wp-cloudflare-cache/core/admin/js/wp-cloudflare-cache-admin.js/wp-content/plugins/wp-cloudflare-cache/core/admin/js/settings.js
Script Paths
/wp-content/plugins/wp-cloudflare-cache/core/admin/js/wp-cloudflare-cache-admin.js/wp-content/plugins/wp-cloudflare-cache/core/admin/js/settings.js
Version Parameters
wp-cloudflare-cache/core/admin/css/wp-cloudflare-cache-admin.css?ver=wp-cloudflare-cache/core/admin/js/wp-cloudflare-cache-admin.js?ver=wp-cloudflare-cache/core/admin/js/settings.js?ver=

HTML / DOM Fingerprints

CSS Classes
wpcc-wrapwpcc-generalwpcc-support
HTML Comments
<!-- WPCC Hooks --><!-- Settings --><!-- You do not have permissions to access this page. --><!-- allow only for edit permission users -->+9 more
Data Attributes
id="wpcc-create-page-rule"id="wpcc-set-browser-ttl"
JS Globals
window.wpcc_settings_url
FAQ

Frequently Asked Questions about Cloudflare Page Cache for WordPress