FAIR

Federated and Independent Repositories

R2 Storage Manager for Cloudflare

Plugin Banner

R2 Storage Manager for Cloudflare

by r2suites

Download
Description

R2 Storage Manager Lite enables restricted file management between WordPress and Cloudflare R2 using its S3-compatible API.

Upload files to your R2 bucket, browse stored objects, and generate expiring signed download links — all from your WordPress dashboard.

Unlike traditional storage solutions, this plugin ensures that your files remain private and are only accessible through controlled, time-limited URLs.

Key Features (Lite)

  • Direct Upload to R2 – Securely upload files from WordPress to Cloudflare R2.
  • Secure Downloads via REST API – Generate expiring signed URLs using a hardened REST endpoint.
  • Private File Delivery – Files are not publicly accessible and are delivered via signed URLs.
  • Configurable Expiration – Set custom expiration times for download links.
  • Basic File Browser – View and manage stored files from the admin panel.
  • S3-Compatible API – Fully compatible with Cloudflare R2 infrastructure.

Use Cases

  • Deliver private digital files securely
  • Share time-limited download links
  • Protect premium content
  • Replace insecure direct file URLs
  • Manage external storage outside WordPress media

Pro Version (Optional)

Upgrade to unlock advanced capabilities:

  • Unlimited uploads (no server limits)
  • Multipart upload for large files
  • Drag & drop interface
  • Advanced file manager with folders
  • Download tracking & analytics
  • User quotas and restrictions
  • Advanced security (IP, referer, geo restrictions)
  • Webhooks & automation tools

More information: https://www.r2suites.com/products/wordpress/cloudflare-r2-storage-manager-pro

External Services

This plugin connects to Cloudflare R2 Object Storage.

Service provider: Cloudflare, Inc.
Service URL: https://www.cloudflare.com/
Privacy Policy: https://www.cloudflare.com/privacypolicy/

Purpose:
Storage and secure delivery of files via S3-compatible API.

Data sent:
* Access Key ID
* Secret Access Key
* Bucket name
* File upload and retrieval requests

Data is only transmitted when explicitly configured and used by the administrator.

Gutenberg Block

The plugin includes a built-in “R2 Download” block. You can insert a download button directly in the WordPress block editor without using shortcodes.

Simply search for “R2 Download” in the block editor and configure the file key and label.

Shortcodes

Use the shortcode to generate a secure download button with restricted access:

[cr2sm_download file=”lite/file.pdf” label=”Download”]

Files are delivered through time-limited signed URLs and are not publicly accessible.

  1. Upload the plugin to /wp-content/plugins/r2-storage-manager-for-cloudflare or install via WordPress.
  2. Activate the plugin.
  3. Go to R2 Storage Lite Settings.
  4. Enter:
    • Endpoint
    • Access Key
    • Secret Key
    • Bucket Name
  1. Dashboard overview.

    Dashboard overview.

  2. Settings page.

    Settings page.

  3. Upload interface.

    Upload interface.

Does this plugin offload the WordPress Media Library?

No. Files are managed independently from the WordPress Media Library.

Are files publicly accessible?

No. Files are delivered through signed URLs and are not publicly exposed.

Can I control download access?

Yes. You can enable login restrictions and control URL expiration.

Is Cloudflare R2 required?

Yes. You must have a Cloudflare account and an R2 bucket.

Are credentials secure?

Yes. Credentials are stored using WordPress options and used only for API communication with R2.

Does the plugin send data to third parties?

No. Only Cloudflare R2 is used. No tracking or analytics is included.

Does the plugin support Gutenberg blocks?

Yes. You can use the built-in “R2 Download” block directly in the WordPress editor without using shortcodes.

1.0.2

  • Added R2 Download Gutenberg block (Shortcode wrapper).
  • Hardened block rendering logic with type-safety and sanitization.
  • Refined Shortcodes admin view documentation and UI.

1.0.1

  • Security hardening and compliance improvements
  • Improved nonce validation for admin actions
  • Migrated download system to REST API
  • Strengthened file upload validation

1.0.0

  • Initial release
Back to top