Changelog

2019.

Release notes from 2019.

v5.77

minor

Identifying correct installed MySQL version when using MariaDB.

Fixed

  • Identifying correct installed MySQL version when using MariaDB.
  • Fixes for identifying license.txt and readme.html

Notes

  • xx,xxx downloads

v5.76

minor

Security recommendation from X-Content-Type-Options nosniff had wrong code, thank you Yasaf.

Fixed

  • Security recommendation from X-Content-Type-Options nosniff had wrong code, thank you Yasaf.
  • Whitelabel - Removing the plugin from list of active plugins if name was changed in whitelabel settings.

v5.75

minor

Core Scanner - Problem with localized versions of WordPress file detection - Thank you Cuong.

Fixed

  • Core Scanner - Problem with localized versions of WordPress file detection - Thank you Cuong.
  • Whitelabel - The plugin name showed up in a message if core scans have not been run for a while. Thank you Jay.
  • Whitelabel - Remove plugin name from list of active plugins on "Debug" page. Thank you Jay.

v5.74

minor

Fixes problem with malware definitions that were picked up as false positives by other security s…

Notes

  • Fixes problem with malware definitions that were picked up as false positives by other security software.
  • Minor styling changes to admin interface.
  • Cleaning up old unused files that created warnings on some servers.

v5.73.1

patch

Fix bug with "ghost plugin" when the Whitelabel is enabled. Thank you Cuong.

Notes

  • Fix bug with "ghost plugin" when the Whitelabel is enabled. Thank you Cuong.
  • Updated Firewall bad query list.
  • Firewall - Fixed responsiveness in "Latest Firewall Events".
  • Fix malware results list - missing whitelist and delete buttons. Thank you Chris

v5.73

minor

Fix bug with "ghost plugin" when the Whitelabel is enabled. Thank you Cuong.

Notes

  • Fix bug with "ghost plugin" when the Whitelabel is enabled. Thank you Cuong.
  • Updated Firewall bad query list.
  • Firewall - Fixed responsiveness in "Latest Firewall Events".

v5.72

minor

WP 5.3 compatibility

Fixed

  • Malware Scanner - Error in JS code prevented tests to be completed on some systems. Thank you Cuong and everyone else reporting this bug.

Notes

  • WP 5.3 compatibility
  • Security Tests - Added more checks for unwanted files.
  • Scheduler: Table is not better responsive.
  • Reworked tables of data to look better in responsive. Thank you Cuong.
  • Fixed up Debug page - removed never-ending spinner and tweaked output to remove directory sizes. Thank you Cuong.
  • WordPress 5.3 compatibility
  • Responsive view on mobile devices look much better. Thank you Cuong.
  • Reworked security tests overview to look better and more WordPress-like.

v5.71

minor

Minor language changes + internationalization work for translators.

Fixed

  • Scheduled Scans failed with Core Scanning enabled - Thank you Cuong.
  • Debug page not working correctly with Whitelabel enabled - Thank you Cuong.
  • Scheduled Scans failed with Core Scanning enabled, due to recent structure change. Thank you Cuong.
  • The security test for incompatible plugins was not working properly.
  • Removed extra styling some plugin authors just load on all pages, which then messed up this plugin styling.
  • The security test for incompatible plugins was not working properly. Thank you Cuong.

Notes

  • Minor language changes + internationalization work for translators.
  • Fixed small interface issues - CSS styling.
  • Multiple email recipients for reports/alerts - Suggestion by Jose.
  • Fixed small visual issues - CSS styling.

v5.70

minor

Security test: Check for files often found in root of website. Such as SQL database dump files, phpinfo.php, *.bak fi…

New

  • Security test: Check for files often found in root of website. Such as SQL database dump files, phpinfo.php, *.bak files etc.

Fixed

  • Malware Scanner download latest definitions.

v5.69

minor

Added Debug to the menu. Find detailed debug information. · Debug page.

New

  • Added Debug to the menu. Find detailed debug information.
  • Debug page.
  • Added Debug page.

Fixed

  • "Your IP address is" in admin was wrong.
  • "Your IP address is" in admin showed wrong IP.

Notes

  • xx,xxx downloads
  • Updated language files.
  • Language files updated
  • Removed Wordfence warning - No longer needed.
  • Security Tests: Removed Wordfence warning - No longer needed.
  • Core Scanner: Fixed problem with local WP versions not being found - Thank you Yodana :-)

v5.68

minor

Firewall - Automatically whitelists any new IP from where an admin is logged in.

New

  • Firewall - Automatically whitelists any new IP from where an admin is logged in.

Fixed

  • Visual bug on some tabs
  • The Firewall and Cloudflare did not play well together. Thanks Chandra, Atley and Yasaf :-)
  • Events IP were sometimes not logged properly, now uses same code as Firewall module.
  • Visual bug on some tabs.

v5.67

minor

Firewall - Turn cloud firewall on/off

New

  • Firewall - Turn cloud firewall on/off

Fixed

  • Firewall - Fixed too agressive blocking.
  • Firewall - Better visitor logging. Some visits were not registered.
  • Core Scanner - Fixed unknown error popup and improved error messages for easier debugging.
  • Firewall - Better visitor logging. Some visits were not registered in the log.
  • Core Scanner - Fix error where checksums for a particular locale was not available by WordPress.
  • Firewall - Fixed too agressive blocking - IP blocking routines.

Notes

  • Rearranged interface, made more space.
  • Rearranged interface, made more space for new features coming up ;-)
  • Cleaned up JS code.

v5.66

minor

Removed debugging data in JavaScript console.

Fixed

  • Removed debugging data in JavaScript console.
  • Minor language and CSS styling changes.
  • Removed debug output in JavaScript console.
  • Pro - Malware scan sometimes got stuck.

v5.65

minor

Manual blacklist IPs. · Country name alt tag when hovering over a flag.

New

  • Manual blacklist IPs.
  • Country name alt tag when hovering over a flag.
  • Added Latest visitors log.
  • Made all stats collapsible on firewall page = less crowded interface.
  • Made all stat sections collapsible on firewall page = less crowded interface.
  • Firewall - You can now manual blacklist IPs.
  • Firewall - Country name alt tag when hovering over a flag.
  • Firewall - Added Latest visitors log.
  • Firewall - Made all stat sections collapsible on firewall page = less crowded interface.
  • Check for Content Security Policy header. It can be tricky to configure this one, read instructions carefully.
  • Firewall - You can now manually blacklist IPs!
  • Firewall - Blocked requests and whitelisted visitors are easily visible in the visitor log.
  • Whitelabel - Change Plugin name, description, the author name and URL as well as the the menu icon.

Fixed

  • Hides Whitelabel tab when Whitelabel enabled.

Notes

  • Minor improvements to API integration.
  • xx,xxx downloads
  • Minor improvements to whitelabel options.
  • Improved suggestions for some of the security headers.
  • Minor adjustment to interface, preparing for upcoming WordPress 5.3 admin style changes.

v5.64

minor

PHP notices - Undefined index - Thank you Ivar :-)

Fixed

  • PHP notices - Undefined index - Thank you Ivar :-)
  • Removed debug error_log() notices in code.
  • Suspicious request details were not added to the log.
  • Not automatically updating all databases and files when updating.

Notes

  • Whitelabel tab added with info.
  • xx,xxx downloads
  • Whitelabel tab added.

v5.63

minor

Checks for security header "X-XSS-Protection". · Checks for Strict Transport Security (HSTS) security header.

New

  • Checks for security header "X-XSS-Protection".
  • Checks for Strict Transport Security (HSTS) security header.
  • Checks for security header "X-Frame-Options".
  • Checks for security header "X-Content-Type-Options".

Notes

  • Fix problem with
  • xx,xxx downloads
  • Fix problem clicking arrow in results list opened and then closed the result details. Thank you Thomas :-)
  • Added WordPress Multisite compatibility - Control your sites licenses centrally.
  • Updated 3rd party library - Freemius SDK
  • Added WordPress Multisite compatibility.
  • WordPress Multisite compatibility.
  • Updated 3rd party library - Freemius SDK to 2.3.1
  • WordPress Multisite compatible.
  • Fix problem with .htaccess code for blocking username enumeration. Thank you David :-)
  • WP 5.2.4 compatible
  • Tested WP 5.2.4 compatible
  • More details shown for blocked suspicious requests.
  • Tested WP 5.2.4 compatible.
  • Added more inline help on Core Scanner page.

v5.62

minor

Security Tests - Added check for if license.txt exists.

Notes

  • Security Tests - Added check for if license.txt exists.
  • xx,xxx downloads
  • Auto Fix - Remove license.txt if exists.
  • Firewall - Added direct link to VirusTotal lookup.
  • Remember to add your suggestions to https://trello.com/b/6qxtAlzY/wp-security-ninja-public-roadmap
  • Firewall - Added direct link to VirusTotal details lookup for IPs. Thank you Jose.
  • Event Log - Rotating syslog can now be set to 7 or 30 days. Thank you Jose.
  • Fixed minor bugs in JavaScript code.

v5.61

minor

Event Logger - Improved syslog integration, get detailed event logging for use with Splunk or oth…

Notes

  • Event Logger - Improved syslog integration, get detailed event logging for use with Splunk or other Security information and event management (SIEM) systems.
  • xx,xxx downloads
  • Whitelabel (beta) - Improvements - hiding plugin from list - Thanks Jay.
  • Security Tests - Reworked the way the scan works - giving better feedback on progress.
  • Security Tests - Added error notices in case a test causes problems with the scans.
  • Whitelabel still in beta - Improvements - hiding plugin from list - Thanks Jay.
  • Security Tests - Reworked the way the scan works - See which tests are being made.
  • Security Tests - Added timer showing the progress.
  • Scheduled Scanner - Fixes "Unknown Error" and e-mails now include details about what changed.
  • Scheduled Scanner - Fixes "Unknown Error" and e-mails now include details about what changed - Thank you Thomas :-)

v5.60

minor

Fix for getting country ISO code - "Call to undefined function".

Notes

  • Fix for getting country ISO code - "Call to undefined function".
  • BUGFIX: Getting country ISO code could end up in PHP Error "Call to undefined function" - Thank you Thomas :-)
  • Beta: Event logging to rotating 7-day syslog files in wp-content/uploads/security-ninja/logs/ - Thank you Jose :-)

v5.59

minor

Updated browser detection routines - Thanks Jay.

Fixed

  • Security Testing - Fixed bug in detecting EditURI XML-RPC is disabled. Thank you Thomas :-)
  • Security Testing - Autofixer now properly blocks EditURI and also access to
  • Core Scanner: Fix false positive with renamed install.php and upgrade.php

Notes

  • Updated browser detection routines - Thanks Jay.
  • xx,xxx downloads
  • Malware Scanner - Improved the core WP checksum scanning.
  • Security Testing - Changed suggestion for readme.html, install.php and upgrade.php
  • Improvement: Security Testing - Auto Fixer - Delete install.php and upgrade.php instead of renaming.
  • Updated browser detection routines - Thanks Jay :-)
  • Whitelabel feature now in beta testing :-)
  • This update introduces a couple of improvements to the security tests and a couple of minor fixes.
  • Thank you all for bug reports and suggestions! Check out the public roadmap here: https://trello.com/b/6qxtAlzY/wp-security-ninja-public-roadmap

v5.58

minor

Warning if running Security Scans with less than PHP 7

Notes

  • Warning if running Security Scans with less than PHP 7
  • Fixed some options not getting deleted when deleting plugin.

v5.57

minor

Added warning for potential conflict with Anti-Spam by CleanTalk. Thank you Courtney for the report.

Notes

  • Added warning for potential conflict with Anti-Spam by CleanTalk. Thank you Courtney for the report.
  • Bugfix - Tests not always loading properly with different user capacities.
  • Readme update - added video and more tests.

v5.56

minor

Bugfix - Security tests not working properly in some environments.

Notes

  • Bugfix - Security tests not working properly in some environments.
  • Added instructions for fixing "Check if the REST API links are shown in code".
  • Added timer to Security Tests page.

v5.55

minor

Minor fixes in JavaScript code.

Notes

  • Minor fixes in JavaScript code.
  • Cleaned up plugin code.
  • Added more strings for translators.

v5.54

minor

Added test if REST API links are visible in the header.

New

  • Added test if REST API links are visible in the header.

Notes

  • Fix - Security tests popups with details not working.

v5.53

minor

Tested with WP 5.2.3.

Notes

  • Tested with WP 5.2.3.
  • Attempted a fix for loading JS code when other plugins have faulty code. Thank you Vanessa.
  • Removed noticed regarding Security Ninja Pro not on official wordpress.org repository. Thank you Ivar.
  • Removed script, jQuery.ScrollTo - not used anymore.
  • Cleaned up JS code.

v5.52

minor

Fix - Admin notices could sometimes break internal admin pages from showing correctly.

Notes

  • Fix - Admin notices could sometimes break internal admin pages from showing correctly.
  • Removed language files from plugin.

v5.51

minor

Minor language updates and small bugfixes.

Notes

  • Minor language updates and small bugfixes.

v5.50

minor

Getting started tips - Notices that informs you of next steps. · Plugin Integrity check - validate installed plugins…

New

  • Getting started tips - Notices that informs you of next steps.
  • Plugin Integrity check - validate installed plugins against wordpress.org API.
  • Malware Scanner - View whitelisted files.
  • Core Scanner - Detects unknown files in core folders.
  • Core Scanner - Find leftover files from older WordPress installations.
  • Core Scanner - Delete unwanted files individually or all unknown files.
  • Firewall - Country blocking, useful if you get a lot of bad traffic from specific countries.
  • Firewall - Top visitors log kept for the last 30 days. Discover top visitors and use to decide on which IPs or countries to block.
  • Firewall - Logging individual visits per IP
  • Firewall - Suspicious requests are blocked - based on the great BBQ: Block Bad Queries by Jeff Starr.
  • Firewall - Redirect blocked visitors - You can show a message or redirect blocked visitors to another website.

Improved

  • Emails sent by Scheduled Scanner are much nicer looking and more informative.

Fixed

  • Malware Scanner - Plugin integrity checker is more accurate and reports fewer false positives.

Notes

  • Major rewrite and a lot of new features added.
  • Bumped version from 2.x to 5.50 - Aligning free and pro version numbers.
  • More userfriendly for new users with tips in the admin interface.
  • More inline help on relevant pages.
  • Malware: Updated whitelists
  • Fixes problem with databases not created properly.
  • New cached JSON folders are removed on deactivation
  • Moved WordFence warning to "Security Tests" tab only.
  • Nicer emails in "Your secret access link"
  • Better logging blocked login attempts.
  • Firewall - New: Top countries. See which countries are bringing the most traffic.
  • Fix for database tables not always being created when updating from Free to Pro.
  • Firewall - fixed empty results showing up.
  • More details on why a visitor is blocked in the log.
  • Design overhaul to get closer to WP look and feel.
  • Updated 3rd party libraries, Select2
  • xx,xxx downloads
  • Started making plugin translatable.
  • Malware Scanner - Plugin integrity checker is more accurate and reports fewer false positives.

v5.5

major

Getting started tips - Notices that informs you of next steps. · Plugin Integrity check - validate installed plugins…

New

  • Getting started tips - Notices that informs you of next steps.
  • Plugin Integrity check - validate installed plugins against wordpress.org API.
  • Malware Scanner - View whitelisted files.
  • Core Scanner - Detects unknown files in core folders.
  • Core Scanner - Find leftover files from older WordPress installations.
  • Core Scanner - Delete unwanted files individually or all unknown files.
  • Firewall - Country blocking, useful if you get a lot of bad traffic from specific countries.
  • Firewall - Top visitors log kept for the last 30 days. Discover top visitors and use to decide on which IPs or countries to block.
  • Firewall - Logging individual visits per IP
  • Firewall - Suspicious requests are blocked - based on the great BBQ: Block Bad Queries by Jeff Starr.
  • Firewall - Redirect blocked visitors - You can show a message or redirect blocked visitors to another website.

Improved

  • Emails sent by Scheduled Scanner are much nicer looking and more informative.

Fixed

  • Malware Scanner - Plugin integrity checker is more accurate and reports fewer false positives.

Notes

  • Bumped version from 2.x to 5.5 - Aligning free and pro version numbers.
  • More userfriendly for new users with tips in the admin interface.
  • More inline help on relevant pages.
  • Malware: Updated whitelists
  • Fixes problem with databases not created properly.
  • New cached JSON folders are removed on deactivation
  • Moved WordFence warning to "Security Tests" tab only.
  • Nicer emails in "Your secret access link"
  • Better logging blocked login attempts.
  • Firewall - New: Top countries. See which countries are bringing the most traffic.
  • Fix for database tables not always being created when updating from Free to Pro.
  • Firewall - fixed empty results showing up.
  • More details on why a visitor is blocked in the log.
  • Design overhaul to get closer to WP look and feel.
  • Updated 3rd party libraries, Select2
  • xx,xxx downloads

v2.71

minor

Malware Scanner - Plugin integrity checker is more accurate and reports fewer false positives.

Fixed

  • Malware Scanner - Plugin integrity checker is more accurate and reports fewer false positives.

Notes

  • More userfriendly for new users with tips in the admin interface.
  • More inline help on relevant pages.

v2.70

minor

Getting started tips - Notices that informs you of next steps.

New

  • Getting started tips - Notices that informs you of next steps.

Notes

  • Malware: Updated whitelists

v2.69

minor

v2.68

minor

Plugin Integrity check - validate installed plugins against wordpress.org API.

New

  • Plugin Integrity check - validate installed plugins against wordpress.org API.

Notes

  • Moved WordFence warning to "Security Tests" tab only.
  • Nicer emails in "Your secret access link"

v2.67

minor

Emails sent by Scheduled Scanner are much nicer looking and more informative.

Improved

  • Emails sent by Scheduled Scanner are much nicer looking and more informative.

v2.66

minor

Malware Scanner - Tweaked the scanner to catch more suspicious files, and also reducing the number of false positives…

New

  • Malware Scanner - Tweaked the scanner to catch more suspicious files, and also reducing the number of false positives, leading to more accurate scans.
  • Malware Scanner - View whitelisted files.
  • Core Scanner - Detects unknown files in core folders.
  • Core Scanner - Find leftover files from older WordPress installations.
  • Core Scanner - Delete unwanted files individually or all unknown files.
  • Firewall - Country blocking, useful if you get a lot of bad traffic from specific countries.
  • Firewall - Top visitors log kept for the last 30 days. Discover top visitors and use to decide on which IPs or countries to block.
  • Firewall - Logging individual visits per IP
  • Firewall - Suspicious requests are blocked - based on the great BBQ: Block Bad Queries by Jeff Starr.
  • Firewall - Redirect blocked visitors - You can show a message or redirect blocked visitors to another website.

Notes

  • Better logging blocked login attempts.
  • Firewall - New: Top countries. See which countries are bringing the most traffic.
  • Fix for database tables not always being created when updating from Free to Pro.
  • Firewall - fixed empty results showing up.
  • More details on why a visitor is blocked in the log.
  • Preparing plugin for translation, more to come.
  • Design overhaul to get closer to WP look and feel.
  • Updated 3rd party libraries, Select2
  • xx,xxx downloads

v2.65

minor

Malware Scanner - Tweaked the scanner to catch more suspicious files, and also reducing the number of false positives…

New

  • Malware Scanner - Tweaked the scanner to catch more suspicious files, and also reducing the number of false positives, leading to more accurate scans.
  • Malware Scanner - View whitelisted files.
  • Core Scanner - Detects unknown files in core folders.
  • Core Scanner - Find leftover files from older WordPress installations.
  • Core Scanner - Delete unwanted files individually or all unknown files.
  • Firewall - Country blocking, useful if you get a lot of bad traffic from specific countries.
  • Firewall - Top visitors log kept for the last 30 days. Discover top visitors and use to decide on which IPs or countries to block.
  • Firewall - Logging individual visits per IP
  • Firewall - Suspicious requests are blocked - based on the great BBQ: Block Bad Queries by Jeff Starr.
  • Firewall - Redirect blocked visitors - You can show a message or redirect blocked visitors to another website.

Notes

  • More details on why a visitor is blocked.
  • Preparing plugin for translation, more to come.
  • Design overhaul to get closer to WP look and feel.
  • Updated 3rd party libraries, Select2
  • xx,xxx downloads
  • Fix for database tables not always being created when updating from Free to Pro.
  • Firewall - fixed empty results showing up.
  • Firewall - New: Top countries. See which countries are bringing the most traffic.
  • More details on why a visitor is blocked in the log.

v2.64

minor

Malware Scanner - Tweaked the scanner to catch more suspicious files, and also reducing the number of false positives…

New

  • Malware Scanner - Tweaked the scanner to catch more suspicious files, and also reducing the number of false positives, leading to more accurate scans.
  • Malware Scanner - View whitelisted files.
  • Core Scanner - Detects unknown files in core folders.
  • Core Scanner - Find leftover files from older WordPress installations.
  • Core Scanner - Delete unwanted files individually or all unknown files.
  • Firewall - Country blocking, useful if you get a lot of bad traffic from specific countries.
  • Firewall - Top visitors log kept for the last 30 days. Discover top visitors and use to decide on which IPs or countries to block.
  • Firewall - Logging individual visits per IP
  • Firewall - Suspicious requests are blocked - based on the great BBQ: Block Bad Queries by Jeff Starr.
  • Firewall - Redirect blocked visitors - You can show a message or redirect blocked visitors to another website.

Notes

  • Preparing plugin for translation, more to come.
  • Design overhaul to get closer to WP look and feel.
  • Updated 3rd party libraries, Select2
  • xx,xxx downloads

v2.63

minor

Malware Scanner - Tweaked the scanner to catch more suspicious files, and also reducing the number of false positives…

New

  • Malware Scanner - Tweaked the scanner to catch more suspicious files, and also reducing the number of false positives, leading to more accurate scans.
  • Malware Scanner - View whitelisted files.
  • Core Scanner - Detects unknown files in core folders.
  • Core Scanner - Find leftover files from older WordPress installations.
  • Core Scanner - Delete unwanted files.
  • Firewall - Country blocking, useful if you get a lot of bad traffic from specific countries.
  • Firewall - Top visitors log kept for the last 30 days. Discover top visitors and use to decide on which IPs or countries to block.
  • Firewall - When an IP is blocked, the IP is also saved in the log.
  • Firewall - Suspicious requests are blocked.
  • Core Scanner - Delete unwanted files individually or all unknown files.

Notes

  • Preparing plugin for translation, more to come.
  • Design overhaul to get closer to WP look and feel.
  • Updated 3rd party libraries, Select2
  • xx,xxx downloads

v2.60

minor

Whitelisting rows in database · Detects unknown files in core folders

New

  • Whitelisting rows in database
  • Detects unknown files in core folders
  • Malware Scanner - Whitelisting rows in database. Reduce false positives.
  • Core Scanner - Detects unknown files in core folders.
  • Core Scanner - Find leftover files from older WordPress installations.
  • Core Scanner - Delete unwanted files from plugin.
  • Firewall - When an IP is blocked, the IP is also saved in the log.
  • Firewall - Country blocking, useful if you get a lot of bad traffic from specific countries.
  • Malware Scanner - View whitelisted files.
  • Core Scanner - Delete unwanted files.
  • Malware Scanner - Tweaked the scanner to catch more suspicious files, and also reducing the number of false positives, leading to more accurate scans.
  • Firewall - Top visitors log kept for the last 30 days. Discover top visitors and use to decide on which IPs or countries to block.

Notes

  • xx,xxx downloads
  • Reworked entire plugin
  • Preparing for translation
  • Firewall - When an IP is blocked, the IP is also saved in the log.
  • Reworked entire plugin, improved code.
  • Preparing for translation.
  • Design overhaul to follow WP standards better
  • Design overhaul to get closer to WP look and feel
  • Preparing plugin for translation, more to come.
  • Design overhaul to get closer to WP look and feel.
  • Updated 3rd party libraries, Select2

v2.51

minor

Improved translation

Notes

  • Improved translation

v2.50

minor

deactivated themes test

Fixed

  • deactivated themes test

Install the free plugin on WordPress.org, or go Pro for cloud firewall, malware scanning, and agency tools.

Free on WordPress.org Get WP Security Ninja Pro