Private WordPress pages made public with Cloudflare enabled

Performance
#1

I’m using Cloudflare with a WordPress website and I noticed that private WordPress pages/posts are sometimes available to the non-logged users when Cloudflare is enabled. These private posts are also listed in the archive pages for non-logged users.

The private pages disappear from the non-logged users if we disable Cloudflare with the “Development Mode” option.

We have in place page rules to cache all our content except the admin area:

https://example.com/wp-admin*
Cache Level: Bypass Enabled

https://example.com/*preview=true*
Cache Level: Bypass Enabled

https://example.com/*
Cache Level: Cache Everything, Edge Cache TTL: a month

Our website uses only two plugin. The Cloudflare plugin and the WP Super Cache plugin.

I don’t understand why this happens.

Thank you for your support.

#2

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.