v3.7.4 — One-click complete security rules

Complete security installation in one click

Network site rows and subsite settings now provide Install cache and Install security rules. Security installation needs no separate review, checkbox or approval.

The security action installs all five recommended custom rules plus the public-page rate limiter: WordPress exploit probes, XML-RPC blocking, legal-page query challenges, sensitive-file probes, submission/session rate exceptions, and public-page rate limiting. Existing matching rules are retained; sites using the previous baseline receive the three missing legacy protections without duplicates.

Current zone scope/status checks, a bounded automatic backup, per-zone locking, drift checks and verified readback run automatically. Unrelated custom-rule conflicts or insufficient capacity stop with a specific error rather than overwriting existing protection. XML-RPC-dependent integrations should account for the included XML-RPC block before installation.

Plugin updates do not apply Cloudflare rules automatically. Click Install security rules for each desired zone.

Validated with regression tests, successful GitHub CI, and real standalone/multisite WordPress integration tests using mocked Cloudflare writes.