Flexible SSL for CloudFlare

80 Quality Score

Active Installs

23/30

With 100,000 active installs, this plugin has substantial reach in the CloudFlare Flexible SSL niche, though it solves a problem fewer sites need as proper SSL becomes standard.

Update Freshness

21/25

Updated on 2025-12-23 and tested against WordPress 6.9.4, the plugin is clearly maintained and current with the latest core release.

User Rating

14/15

A 96 out of 100 rating from 51 reviewers is excellent, suggesting the plugin reliably solves the redirect loop problem it targets.

Support Health

8/15

Support health scores middling at 50, with zero support threads tracked, which is both reassuring (few problems reported) and concerning (no visible support channel if issues arise).

WP Compatibility

15/15

The plugin requires only WordPress 3.2.0 and PHP 5.2, making it compatible with virtually any WordPress installation in existence.

Scores higher than 79% of indexed plugins

About

Fix For Redirect Loops on WordPress with CloudFlare's Flexible/Universal SSL.

Active Installs 100k+

Rating ★★★★½ 4.8/5

Last Updated 2025-12-23 10:10am GMT

Requires WordPress 3.2.0+

Tested Up To 6.9.7

Requires PHP 5.2+

✓ No known vulnerabilities

What It Does

Flexible SSL for CloudFlare resolves redirect loop errors that occur when WordPress sits behind CloudFlare's Flexible or Universal SSL. It works by detecting CloudFlare's proxy headers and adjusting how WordPress interprets the connection, allowing HTTPS to function without infinite redirect cycles. In practice, it is a small, focused fix that lets you use CloudFlare's free SSL tier without reconfiguring your origin server.

Who It's For

This plugin is built for site owners using CloudFlare's Flexible SSL who cannot or do not want to install a full SSL certificate on their origin server. It is most useful for small businesses, bloggers, and budget-conscious operators running simple WordPress sites where CloudFlare handles all HTTPS termination. Agencies managing multiple legacy sites on CloudFlare free plans will also find it handy as a quick loop fix.

Who Should Skip It

If your hosting environment supports a real SSL certificate (including CloudFlare's Full or Full Strict modes), you do not need this plugin and should configure proper SSL instead. Anyone running modern infrastructure with Let's Encrypt or a hosting-provided certificate should skip it to avoid masking underlying configuration issues.

The Bottom Line

Flexible SSL for CloudFlare is a narrow, well-maintained utility that does one job and does it well, earning a 96 rating from users and an overall score of 83.22. It is the right answer only if you are specifically stuck with CloudFlare Flexible SSL and redirect loops, which is an increasingly uncommon situation. For most users today, upgrading to a proper SSL certificate is the better long-term path.

Pick this if you need CloudFlare's Turnstile CAPTCHA rather than SSL loop fixing, as it serves a completely different security purpose.

Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals 90/100

Choose this when your priority is caching and performance through CloudFlare rather than SSL redirect issues, and you want a higher-scoring alternative.

SSL Insecure Content Fixer 84/100

Pick this if your SSL works but you have mixed content warnings, since it addresses a different but related SSL problem more broadly.

WP Force SSL & HTTPS SSL Redirect 84/100

Choose this for general HTTPS enforcement and redirect management when you already have a proper certificate and do not need CloudFlare-specific fixes.

WP Encryption – No.1 HTTPS plugin & One Click Free SSL Cert, HTTPS Redirect, SSL Security 83/100

Pick this if you want to issue and install a real free SSL certificate directly rather than rely on CloudFlare's Flexible mode at all.