Cloudflare + WordPress: The Complete Setup Guide
The Cloudflare + WordPress settings that matter: the SSL mode that prevents redirect loops, cache rules that don't break wp-admin, and which fixes apply next.
Category
Cloudflare & SSL
Understand what happens between the browser, Cloudflare and your origin server.
'Updating Failed: Response Is Not a Valid JSON Response' — Cloudflare Fix
Getting 'Updating failed: The response is not a valid JSON response' in the WordPress editor? Here's how to find the Cloudflare rule blocking it and the fix.
Cloudflare Challenge Loop on Your WordPress Login? Here's the Exact Fix
Stuck in a Cloudflare Managed Challenge loop on wp-login.php or wp-admin? Here's why it happens and the exact settings to fix it without disabling security.
Cloudflare Killed Page Rules — Here's Why Your WordPress Redirects Broke (and the Fix)
Cloudflare deprecated Page Rules and your WordPress HTTPS or www redirect stopped working. Here's how to find the old rule and rebuild it as a Redirect Rule.
WordPress Login Loop After a Cloudflare Turnstile Update? Fix Wordfence 2FA Conflicts
Stuck in an infinite WordPress login redirect after a Cloudflare Turnstile update? Here's the Wordfence two-factor conflict causing it and how to fix or unlock it.
About Cloudflare & SSL guides
These guides cover the problems that appear when a WordPress site sits behind Cloudflare: redirect and login loops, challenge pages on wp-login, the "Updating failed — not a valid JSON response" error in the block editor, redirects that stopped working when Page Rules were retired, and Turnstile conflicts with two-factor plugins.
Most of them come down to three things: the SSL/TLS mode, cache or security rules applied to paths WordPress needs, and settings that differ between Cloudflare and the origin. Each guide shows how to confirm which one applies before changing anything.
New to this setup? Start with the complete Cloudflare + WordPress setup guide, then use the specific fixes when something breaks.