Action

and

Expression Preview

(http.request.uri.path contains "/wp-content/plugins/" and not http.referer contains "yoursite.com" and not cf.client.bot)

Field

URI Path

Operator

contains

Tag

securityagressive

Value

/wp-content/plugins/