Cloudflare WAF is blocking WordPress Plugin

Hi there,

We have Cloudflare and Cloudflare WAF activated on our WordPress sites and it is actively blocking our All in One SEO plugin from saving any changes.

The requests that are being blocked are -
/wp-json/aioseo/v1/activate
/wp-json/aioseo/v1/ping
/wp-json/aioseo/v1/options

I’ve tried adding this rule in WAF settings but it doesn’t work -
Field: URI Path
Operator: Contains
Value: /wp-json/aioseo/

Here are the Page Rules I’ve added for Cloudflare -
mydomain/wp-json/aioseo/*

Here’s a screenshot from one of our sites -

Can you please help us figure out the exact rule required to allow these requests?

Thanks!

Refer this thread - Blocked by DotNetNuke rule when updating WP article

It should help.