So basically I should compromise my website’s security in order to make the plugin work, it would be nice if the plugin could be updated to be compatible with nowadays security standards.
Also as I already said disabling Cloudflare is not an option, and I can’t seem to find a guide anywhere on how to configure it to work with your plugin.