Cloudflare 已于 2026 年 7 月 17 日 17:03 UTC 部署两条 Managed Rules，免费与付费站（流量经 Cloudflare 代理）均覆盖，默认动作是 Block。
https://blog.cloudflare.com/wordpress-vulnerabilities/
https://blog.cloudflare.com/wordpress-vulnerabilities/
The Cloudflare Blog
Cloudflare WAF protects WordPress applications from two high-severity vulnerabilities
Cloudflare has deployed two WAF rules in response to high-severity vulnerabilities disclosed to us by the WordPress security team. The new rules protect all Cloudflare customers using affected WordPress versions, but customers should still update immediately…
