A simple plugin to create Cloudflare WAF custom rules based on account ID (based on Troy Glancy's superb CF WAF v3 rules)

It takes your CF API key, email, and account ID, and then gets all the domains in that account, and displays a checkbox list, and you can choose the domains you want to add Troy’s WAF rules to, and bulk update all the domains with one click. Please see the notes and security tips in the plugin settings page, use at your own risk

First add you credentials to the Cloudflare WAF Rules Wizard settings page in the plugin. Your email is the email you log in with. You can retrieve your API key here. And here are instructions for where you can find your Account ID.

This will pull in the domains from the Account ID you entered. Select which domains you'd like to apply the WAF rules to:

Last, check your Cloudflare WAF Rules to see if they have applied:

After you are done adding your shiny new WAF Rules, you can remove the plugin.

⚠️ But before you do that, don't forget to click the Delete Settings button after you are done using this plugin to remove your credentials from the database. They are not encrypted when stored. Maybe future versions will encrypt, delete the options on deactivation, etc. Right now it is a quick and simple plugin for you to use and then remove.