Cloudflre is blocking me from uploading plugins to my Wordpress site

Zero Trust Access
#1

Unable to upload plugins from my desktop computer to my wordpress site. “Sorry, you have been blocked.”

Manged rule blocking WordPress plugin uploads
#2

Do you have the WAF enabled?

#3

Yes. I have “Allow” on my local IP address.

#4

I have a client site also experiencing this. Here is the exported event:

{
  "action": "block",
  "clientASNDescription": "ATT-INTERNET4",
  "clientAsn": "7018",
  "clientCountryName": "US",
  "clientIP": "...",
  "clientRequestHTTPHost": "...",
  "clientRequestHTTPMethodName": "POST",
  "clientRequestHTTPProtocol": "HTTP/2",
  "clientRequestPath": "/wp-admin/update.php",
  "clientRequestQuery": "?action=upload-plugin",
  "datetime": "2022-12-14T19:19:49Z",
  "rayName": "77994b18188096e9",
  "ruleId": "d93f48eb05324adbb47f0d055969e60b",
  "rulesetId": "efb7b8c949ac4650a09736fc376e9aee",
  "source": "firewallManaged",
  "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36",
  "matchIndex": 0,
  "metadata": [
    {
      "key": "ruleset_version",
      "value": "121"
    },
    {
      "key": "version",
      "value": "121"
    },
    {
      "key": "type",
      "value": "customer"
    }
  ],
  "sampleInterval": 1
}

The documentation makes it clear this cannot be bypassed:

You cannot bypass the new Cloudflare WAF, only its previous version (WAF managed rules).

Seems like this should affect a lot of WordPress sites.