Cloudflre is blocking me from uploading plugins to my Wordpress site

Unable to upload plugins from my desktop computer to my wordpress site. “Sorry, you have been blocked.”

Do you have the WAF enabled?

Yes. I have “Allow” on my local IP address.

I have a client site also experiencing this. Here is the exported event:

  "action": "block",
  "clientASNDescription": "ATT-INTERNET4",
  "clientAsn": "7018",
  "clientCountryName": "US",
  "clientIP": "...",
  "clientRequestHTTPHost": "...",
  "clientRequestHTTPMethodName": "POST",
  "clientRequestHTTPProtocol": "HTTP/2",
  "clientRequestPath": "/wp-admin/update.php",
  "clientRequestQuery": "?action=upload-plugin",
  "datetime": "2022-12-14T19:19:49Z",
  "rayName": "77994b18188096e9",
  "ruleId": "d93f48eb05324adbb47f0d055969e60b",
  "rulesetId": "efb7b8c949ac4650a09736fc376e9aee",
  "source": "firewallManaged",
  "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ Safari/537.36",
  "matchIndex": 0,
  "metadata": [
      "key": "ruleset_version",
      "value": "121"
      "key": "version",
      "value": "121"
      "key": "type",
      "value": "customer"
  "sampleInterval": 1

The documentation makes it clear this cannot be bypassed:

You cannot bypass the new Cloudflare WAF, only its previous version (WAF managed rules).

Seems like this should affect a lot of WordPress sites.