R2 Storage Manager for Cloudflare

Description

Connect WordPress to Cloudflare R2 Object Storage using its fully S3-compatible API. This plugin allows direct uploads to R2, the generation of signed URLs, and the ability to browse stored objects from within the WordPress dashboard.

The plugin allows direct uploads to R2, the generation of signed URLs, and the ability to browse stored objects from within the WordPress dashboard.

Features (Lite)

  • Direct Upload – Upload files directly to your Cloudflare R2 bucket.
  • REST API Downloads – Secure, shareable download links handled via standard WP REST endpoints.
  • Configurable Access – Adjustable signed-URL expiration (default 300s).
  • File Browser – View objects stored in your R2 bucket.
  • S3 Compatible – Uses Cloudflare R2’s S3-compatible API.

Pro Version (Optional)

Additional features are available in the optional Pro edition:

  • Unlimited Uploads – Remove upload limitations.
  • Drag & Drop Upload – Modern upload interface with multipart support.
  • Advanced File Manager – Folder organisation and enhanced object management.
  • User Download Quotas – Define download limits per user.
  • Download Statistics & Logs – Track file access activity.
  • Extended Security Controls – Custom expiry rules, IP restrictions, referer filters, and geo-blocking.
  • Priority Support – Direct assistance via email.
  • Developer Tools – Webhooks and extended API automation.

More information: https://www.r2suites.com/products/wordpress/cloudflare-r2-storage-manager-pro

External Services

This plugin connects to Cloudflare R2 Object Storage to store and retrieve files.

Service provider: Cloudflare, Inc.
Service URL: https://www.cloudflare.com/
Privacy Policy: https://www.cloudflare.com/privacypolicy/

Purpose:
Storage and retrieval of files via the S3-compatible API.

Data sent:
* Access Key ID
* Secret Access Key
* Bucket name
* Object upload and retrieval requests

When data sent:
Only after the administrator configures credentials and initiates uploads or file operations.

Shortcodes

[cr2sm_download file=”lite/file.pdf” label=”Download” class=”btn”]

Example:
[cr2sm_download file=”lite/example.pdf”]

file – (required) File name stored in your R2 bucket. Note: In the Lite version, files must be located in the “/lite/” container.
label – (optional) Button text (default: “Download”).
class – (optional) CSS class for styling.

This shortcode generates a secure signed download link handled via the Secure REST API endpoint.

Screenshots

  • Dashboard overview.
  • Settings page.
  • Upload interface.

Installation

  1. Upload the plugin to /wp-content/plugins/r2-storage-manager-for-cloudflare or install it via the Plugins screen.
  2. Activate the plugin through Plugins Installed Plugins.
  3. Navigate to R2 Storage Lite Settings and enter:
    • Endpoint
    • Access Key
    • Secret Key
    • Bucket Name

FAQ

Do I need a Cloudflare account?

Yes. Cloudflare R2 requires an active Cloudflare account. The service includes a generous free tier suitable for most use cases.

What information do I need to connect WordPress to R2?

You will need:
* API Endpoint
* Access Key ID
* Secret Access Key
* Bucket Name
These values can be found in the Cloudflare dashboard under R2 Overview or Tokens.

Does this plugin offload the WordPress Media Library?

No. Media Library offload is not part of the Lite or Pro versions.
Files uploaded with this plugin are handled separately from WordPress media.

Does the plugin integrate with WooCommerce?

No. WooCommerce integration is not provided in the current versions.

How are files uploaded in the Lite version?

Lite provides a simple, single-file upload method that follows your server’s PHP upload limits.

What are the limitations of single-file uploads?

Single-file uploads depend on your server configuration (php.ini):
upload_max_filesize, post_max_size, and memory_limit.
For larger files, the Pro version supports multipart uploads.

Does the plugin support folders or subdirectories?

Lite is limited to root-level files and the /lite/ container.
Folder management and directory navigation are available in the Pro version.

Can users download files without authentication?

Yes. Download URLs can be accessed publicly unless you enable the “Require Login” option.

Where are my credentials stored? Are they secure?

Credentials are stored using the WordPress options API and are not transmitted to any third party except Cloudflare R2. They are only used to authenticate requests to your configured bucket.

Does the plugin send data to third-party servers?

No. The plugin communicates exclusively with Cloudflare R2.
No telemetry, analytics, or tracking is performed.

Can I browse files stored in my bucket?

Yes. The Lite version includes a basic file list.
The Pro version includes a full file manager with folders, sorting, and advanced actions.

What happens if credentials are incorrect?

The plugin includes connection testing and clear error messages to help validate your configuration.

Does uninstalling the plugin delete my files?

No. Removing the plugin does not affect your R2 bucket.
You may optionally choose to keep or remove your plugin settings.

Is multisite supported?

Yes. WordPress multisite installations are supported.
Each site maintains its own configuration.

What features are only available in the Pro version?

The Pro version includes:
* Unlimited uploads
* Drag & Drop / Multipart upload
* Advanced File Manager (folders and actions)
* User download quotas
* Download statistics and logs
* Advanced security tools (expiry rules, IP restrictions, referer filters)
* Priority email support

Is the plugin compatible with caching plugins?

Yes. Signed URLs are generated dynamically and operate independently of local cache.

Is this plugin suitable for hosting large files?

Yes. Large files are supported in the Pro version through multipart uploads.
Lite uploads depend on your server’s PHP limits.

Reviews

There are no reviews for this plugin.

Contributors & Developers

“R2 Storage Manager for Cloudflare” is open source software. The following people have contributed to this plugin.

Contributors

Changelog

1.0.1

  • Security & Compliance hardening.
  • Fixed nonce validation for file sorting in admin.
  • Migrated download endpoint to secure REST API.
  • Hardened $_FILES handling logic.

1.0.0

  • Initial release with REST API download endpoint.