I’m using Cloudflare with a WordPress website and I noticed that private WordPress pages/posts are sometimes available to the non-logged users when Cloudflare is enabled. These private posts are also listed in the archive pages for non-logged users.
The private pages disappear from the non-logged users if we disable Cloudflare with the “Development Mode” option.
We have in place page rules to cache all our content except the admin area:
https://example.com/wp-admin* Cache Level: Bypass Enabled https://example.com/*preview=true* Cache Level: Bypass Enabled https://example.com/* Cache Level: Cache Everything, Edge Cache TTL: a month
Our website uses only two plugin. The Cloudflare plugin and the WP Super Cache plugin.
I don’t understand why this happens.
Thank you for your support.