WordPress 7.1.3: maintenance and security release (7 security fixes). Update now, then confirm the version.

Details

Changelog

2019.

Release notes from 2019.

v5.77

minor

Fixed

  • Identifying correct installed MySQL version when using MariaDB.
  • Fixes for identifying license.txt and readme.html

Notes

  • xx,xxx downloads

v5.76

minor

Fixed

  • Security recommendation from X-Content-Type-Options nosniff had wrong code, thank you Yasaf.
  • Whitelabel - Removing the plugin from list of active plugins if name was changed in whitelabel settings.

v5.75

minor

Fixed

  • Core Scanner - Problem with localized versions of WordPress file detection - Thank you Cuong.
  • Whitelabel - The plugin name showed up in a message if core scans have not been run for a while. Thank you Jay.
  • Whitelabel - Remove plugin name from list of active plugins on "Debug" page. Thank you Jay.

v5.74

minor

Fixed

  • problem with malware definitions that were picked up as false positives by other security software.

Notes

  • Minor styling changes to admin interface.
  • Cleaning up old unused files that created warnings on some servers.

v5.73.1

patch

Improved

  • Firewall bad query list.

Fixed

  • bug with "ghost plugin" when the Whitelabel is enabled. Thank you Cuong.
  • malware results list - missing whitelist and delete buttons. Thank you Chris

Notes

  • Firewall - Fixed responsiveness in "Latest Firewall Events".

v5.73

minor

Improved

  • Firewall bad query list.

Fixed

  • bug with "ghost plugin" when the Whitelabel is enabled. Thank you Cuong.

Notes

  • Firewall - Fixed responsiveness in "Latest Firewall Events".

v5.72

minor

Fixed

  • up Debug page - removed never-ending spinner and tweaked output to remove directory sizes. Thank you Cuong.
  • Malware Scanner - Error in JS code prevented tests to be completed on some systems. Thank you Cuong and everyone else reporting this bug.

Notes

  • WP 5.3 compatibility
  • Security Tests - Added more checks for unwanted files.
  • Scheduler: Table is not better responsive.
  • Reworked tables of data to look better in responsive. Thank you Cuong.
  • WordPress 5.3 compatibility
  • Responsive view on mobile devices look much better. Thank you Cuong.
  • Reworked security tests overview to look better and more WordPress-like.

v5.71

minor

Fixed

  • small interface issues - CSS styling.
  • Scheduled Scans failed with Core Scanning enabled - Thank you Cuong.
  • Debug page not working correctly with Whitelabel enabled - Thank you Cuong.
  • Scheduled Scans failed with Core Scanning enabled, due to recent structure change. Thank you Cuong.
  • The security test for incompatible plugins was not working properly.
  • Removed extra styling some plugin authors just load on all pages, which then messed up this plugin styling.
  • small visual issues - CSS styling.
  • The security test for incompatible plugins was not working properly. Thank you Cuong.

Notes

  • Minor language changes + internationalization work for translators.
  • Multiple email recipients for reports/alerts - Suggestion by Jose.

v5.70

minor

New

  • Security test: Check for files often found in root of website. Such as SQL database dump files, phpinfo.php, *.bak files etc.

Fixed

  • Malware Scanner download latest definitions.

v5.69

minor

New

  • Added Debug to the menu. Find detailed debug information.
  • Debug page.
  • Added Debug page.

Improved

  • language files.

Fixed

  • "Your IP address is" in admin was wrong.
  • "Your IP address is" in admin showed wrong IP.

Notes

  • xx,xxx downloads
  • Language files updated
  • Wordfence warning - No longer needed.
  • Security Tests: Removed Wordfence warning - No longer needed.
  • Core Scanner: Fixed problem with local WP versions not being found - Thank you Yodana :-)

v5.68

minor

New

  • Firewall - Automatically whitelists any new IP from where an admin is logged in.

Fixed

  • Visual bug on some tabs
  • The Firewall and Cloudflare did not play well together. Thanks Chandra, Atley and Yasaf :-)
  • Events IP were sometimes not logged properly, now uses same code as Firewall module.
  • Visual bug on some tabs.

v5.67

minor

New

  • Firewall - Turn cloud firewall on/off

Fixed

  • Firewall - Fixed too agressive blocking.
  • Firewall - Better visitor logging. Some visits were not registered.
  • Core Scanner - Fixed unknown error popup and improved error messages for easier debugging.
  • Firewall - Better visitor logging. Some visits were not registered in the log.
  • Core Scanner - Fix error where checksums for a particular locale was not available by WordPress.
  • Firewall - Fixed too agressive blocking - IP blocking routines.

Notes

  • Rearranged interface, made more space.
  • Rearranged interface, made more space for new features coming up ;-)
  • Cleaned up JS code.

v5.66

minor

Fixed

  • Removed debugging data in JavaScript console.
  • Minor language and CSS styling changes.
  • Removed debug output in JavaScript console.
  • Pro - Malware scan sometimes got stuck.

v5.65

minor

New

  • Manual blacklist IPs.
  • Country name alt tag when hovering over a flag.
  • Added Latest visitors log.
  • Made all stats collapsible on firewall page = less crowded interface.
  • Made all stat sections collapsible on firewall page = less crowded interface.
  • Firewall - You can now manual blacklist IPs.
  • Firewall - Country name alt tag when hovering over a flag.
  • Firewall - Added Latest visitors log.
  • Firewall - Made all stat sections collapsible on firewall page = less crowded interface.
  • Check for Content Security Policy header. It can be tricky to configure this one, read instructions carefully.
  • Firewall - You can now manually blacklist IPs!
  • Firewall - Blocked requests and whitelisted visitors are easily visible in the visitor log.
  • Whitelabel - Change Plugin name, description, the author name and URL as well as the the menu icon.

Improved

  • suggestions for some of the security headers.

Fixed

  • Hides Whitelabel tab when Whitelabel enabled.

Notes

  • Minor improvements to API integration.
  • xx,xxx downloads
  • Minor improvements to whitelabel options.
  • Minor adjustment to interface, preparing for upcoming WordPress 5.3 admin style changes.

v5.64

minor

Fixed

  • PHP notices - Undefined index - Thank you Ivar :-)
  • Removed debug error_log() notices in code.
  • Suspicious request details were not added to the log.
  • Not automatically updating all databases and files when updating.

Notes

  • Whitelabel tab added with info.
  • xx,xxx downloads
  • Whitelabel tab added.

v5.63

minor

New

  • WordPress Multisite compatibility - Control your sites licenses centrally.
  • WordPress Multisite compatibility.
  • Checks for security header "X-XSS-Protection".
  • Checks for Strict Transport Security (HSTS) security header.
  • Checks for security header "X-Frame-Options".
  • Checks for security header "X-Content-Type-Options".
  • more inline help on Core Scanner page.

Improved

  • 3rd party library - Freemius SDK
  • 3rd party library - Freemius SDK to 2.3.1

Fixed

  • problem with
  • problem clicking arrow in results list opened and then closed the result details. Thank you Thomas :-)
  • problem with .htaccess code for blocking username enumeration. Thank you David :-)

Notes

  • xx,xxx downloads
  • WordPress Multisite compatibility.
  • WordPress Multisite compatible.
  • WP 5.2.4 compatible
  • Tested WP 5.2.4 compatible
  • More details shown for blocked suspicious requests.
  • Tested WP 5.2.4 compatible.

v5.62

minor

Fixed

  • minor bugs in JavaScript code.

Notes

  • Security Tests - Added check for if license.txt exists.
  • xx,xxx downloads
  • Auto Fix - Remove license.txt if exists.
  • Firewall - Added direct link to VirusTotal lookup.
  • Remember to add your suggestions to https://trello.com/b/6qxtAlzY/wp-security-ninja-public-roadmap
  • Firewall - Added direct link to VirusTotal details lookup for IPs. Thank you Jose.
  • Event Log - Rotating syslog can now be set to 7 or 30 days. Thank you Jose.

v5.61

minor

Notes

  • Event Logger - Improved syslog integration, get detailed event logging for use with Splunk or other Security information and event management (SIEM) systems.
  • xx,xxx downloads
  • Whitelabel (beta) - Improvements - hiding plugin from list - Thanks Jay.
  • Security Tests - Reworked the way the scan works - giving better feedback on progress.
  • Security Tests - Added error notices in case a test causes problems with the scans.
  • Whitelabel still in beta - Improvements - hiding plugin from list - Thanks Jay.
  • Security Tests - Reworked the way the scan works - See which tests are being made.
  • Security Tests - Added timer showing the progress.
  • Scheduled Scanner - Fixes "Unknown Error" and e-mails now include details about what changed.
  • Scheduled Scanner - Fixes "Unknown Error" and e-mails now include details about what changed - Thank you Thomas :-)

v5.60

minor

Fixed

  • for getting country ISO code - "Call to undefined function".
  • Getting country ISO code could end up in PHP Error "Call to undefined function" - Thank you Thomas :-)

Notes

  • Beta: Event logging to rotating 7-day syslog files in wp-content/uploads/security-ninja/logs/ - Thank you Jose :-)

v5.59

minor

Improved

  • browser detection routines - Thanks Jay.
  • browser detection routines - Thanks Jay :-)

Fixed

  • Security Testing - Fixed bug in detecting EditURI XML-RPC is disabled. Thank you Thomas :-)
  • Security Testing - Autofixer now properly blocks EditURI and also access to
  • Core Scanner: Fix false positive with renamed install.php and upgrade.php

Notes

  • xx,xxx downloads
  • Malware Scanner - Improved the core WP checksum scanning.
  • Security Testing - Changed suggestion for readme.html, install.php and upgrade.php
  • Improvement: Security Testing - Auto Fixer - Delete install.php and upgrade.php instead of renaming.
  • Whitelabel feature now in beta testing :-)
  • This update introduces a couple of improvements to the security tests and a couple of minor fixes.
  • Thank you all for bug reports and suggestions! Check out the public roadmap here: https://trello.com/b/6qxtAlzY/wp-security-ninja-public-roadmap

v5.58

minor

Fixed

  • some options not getting deleted when deleting plugin.

Notes

  • Warning if running Security Scans with less than PHP 7

v5.57

minor

New

  • warning for potential conflict with Anti-Spam by CleanTalk. Thank you Courtney for the report.

Fixed

  • Tests not always loading properly with different user capacities.

Notes

  • Readme update - added video and more tests.

v5.56

minor

New

  • instructions for fixing "Check if the REST API links are shown in code".
  • timer to Security Tests page.

Fixed

  • Security tests not working properly in some environments.

v5.55

minor

New

  • more strings for translators.

Notes

  • Minor fixes in JavaScript code.
  • Cleaned up plugin code.

v5.54

minor

New

  • Added test if REST API links are visible in the header.

Fixed

  • Security tests popups with details not working.

v5.53

minor

Notes

  • Tested with WP 5.2.3.
  • Attempted a fix for loading JS code when other plugins have faulty code. Thank you Vanessa.
  • noticed regarding Security Ninja Pro not on official wordpress.org repository. Thank you Ivar.
  • script, jQuery.ScrollTo - not used anymore.
  • Cleaned up JS code.

v5.52

minor

Fixed

  • Admin notices could sometimes break internal admin pages from showing correctly.

Notes

  • language files from plugin.

v5.51

minor

Notes

  • Minor language updates and small bugfixes.

v5.50

minor

New

  • Getting started tips - Notices that informs you of next steps.
  • cached JSON folders are removed on deactivation
  • Plugin Integrity check - validate installed plugins against wordpress.org API.
  • Malware Scanner - View whitelisted files.
  • Core Scanner - Detects unknown files in core folders.
  • Core Scanner - Find leftover files from older WordPress installations.
  • Core Scanner - Delete unwanted files individually or all unknown files.
  • Firewall - Country blocking, useful if you get a lot of bad traffic from specific countries.
  • Firewall - Top visitors log kept for the last 30 days. Discover top visitors and use to decide on which IPs or countries to block.
  • Firewall - Logging individual visits per IP
  • Firewall - Suspicious requests are blocked - based on the great BBQ: Block Bad Queries by Jeff Starr.
  • Firewall - Redirect blocked visitors - You can show a message or redirect blocked visitors to another website.

Improved

  • Emails sent by Scheduled Scanner are much nicer looking and more informative.
  • 3rd party libraries, Select2

Fixed

  • Malware Scanner - Plugin integrity checker is more accurate and reports fewer false positives.
  • problem with databases not created properly.
  • for database tables not always being created when updating from Free to Pro.

Notes

  • Major rewrite and a lot of new features added.
  • Bumped version from 2.x to 5.50 - Aligning free and pro version numbers.
  • More userfriendly for new users with tips in the admin interface.
  • More inline help on relevant pages.
  • Malware: Updated whitelists
  • Moved WordFence warning to "Security Tests" tab only.
  • Nicer emails in "Your secret access link"
  • Better logging blocked login attempts.
  • Firewall - New: Top countries. See which countries are bringing the most traffic.
  • Firewall - fixed empty results showing up.
  • More details on why a visitor is blocked in the log.
  • Design overhaul to get closer to WP look and feel.
  • xx,xxx downloads
  • Started making plugin translatable.
  • Malware Scanner - Plugin integrity checker is more accurate and reports fewer false positives.

v5.5

major

New

  • Getting started tips - Notices that informs you of next steps.
  • cached JSON folders are removed on deactivation
  • Plugin Integrity check - validate installed plugins against wordpress.org API.
  • Malware Scanner - View whitelisted files.
  • Core Scanner - Detects unknown files in core folders.
  • Core Scanner - Find leftover files from older WordPress installations.
  • Core Scanner - Delete unwanted files individually or all unknown files.
  • Firewall - Country blocking, useful if you get a lot of bad traffic from specific countries.
  • Firewall - Top visitors log kept for the last 30 days. Discover top visitors and use to decide on which IPs or countries to block.
  • Firewall - Logging individual visits per IP
  • Firewall - Suspicious requests are blocked - based on the great BBQ: Block Bad Queries by Jeff Starr.
  • Firewall - Redirect blocked visitors - You can show a message or redirect blocked visitors to another website.

Improved

  • Emails sent by Scheduled Scanner are much nicer looking and more informative.
  • 3rd party libraries, Select2

Fixed

  • Malware Scanner - Plugin integrity checker is more accurate and reports fewer false positives.
  • problem with databases not created properly.
  • for database tables not always being created when updating from Free to Pro.

Notes

  • Bumped version from 2.x to 5.5 - Aligning free and pro version numbers.
  • More userfriendly for new users with tips in the admin interface.
  • More inline help on relevant pages.
  • Malware: Updated whitelists
  • Moved WordFence warning to "Security Tests" tab only.
  • Nicer emails in "Your secret access link"
  • Better logging blocked login attempts.
  • Firewall - New: Top countries. See which countries are bringing the most traffic.
  • Firewall - fixed empty results showing up.
  • More details on why a visitor is blocked in the log.
  • Design overhaul to get closer to WP look and feel.
  • xx,xxx downloads

v2.71

minor

Fixed

  • Malware Scanner - Plugin integrity checker is more accurate and reports fewer false positives.

Notes

  • More userfriendly for new users with tips in the admin interface.
  • More inline help on relevant pages.

v2.70

minor

New

  • Getting started tips - Notices that informs you of next steps.

Notes

  • Malware: Updated whitelists

v2.69

minor

v2.68

minor

New

  • Plugin Integrity check - validate installed plugins against wordpress.org API.

Notes

  • Moved WordFence warning to "Security Tests" tab only.
  • Nicer emails in "Your secret access link"

v2.67

minor

Improved

  • Emails sent by Scheduled Scanner are much nicer looking and more informative.

v2.66

minor

New

  • Malware Scanner - Tweaked the scanner to catch more suspicious files, and also reducing the number of false positives, leading to more accurate scans.
  • Malware Scanner - View whitelisted files.
  • Core Scanner - Detects unknown files in core folders.
  • Core Scanner - Find leftover files from older WordPress installations.
  • Core Scanner - Delete unwanted files individually or all unknown files.
  • Firewall - Country blocking, useful if you get a lot of bad traffic from specific countries.
  • Firewall - Top visitors log kept for the last 30 days. Discover top visitors and use to decide on which IPs or countries to block.
  • Firewall - Logging individual visits per IP
  • Firewall - Suspicious requests are blocked - based on the great BBQ: Block Bad Queries by Jeff Starr.
  • Firewall - Redirect blocked visitors - You can show a message or redirect blocked visitors to another website.

Improved

  • 3rd party libraries, Select2

Fixed

  • for database tables not always being created when updating from Free to Pro.

Notes

  • Better logging blocked login attempts.
  • Firewall - New: Top countries. See which countries are bringing the most traffic.
  • Firewall - fixed empty results showing up.
  • More details on why a visitor is blocked in the log.
  • Preparing plugin for translation, more to come.
  • Design overhaul to get closer to WP look and feel.
  • xx,xxx downloads

v2.65

minor

New

  • Malware Scanner - Tweaked the scanner to catch more suspicious files, and also reducing the number of false positives, leading to more accurate scans.
  • Malware Scanner - View whitelisted files.
  • Core Scanner - Detects unknown files in core folders.
  • Core Scanner - Find leftover files from older WordPress installations.
  • Core Scanner - Delete unwanted files individually or all unknown files.
  • Firewall - Country blocking, useful if you get a lot of bad traffic from specific countries.
  • Firewall - Top visitors log kept for the last 30 days. Discover top visitors and use to decide on which IPs or countries to block.
  • Firewall - Logging individual visits per IP
  • Firewall - Suspicious requests are blocked - based on the great BBQ: Block Bad Queries by Jeff Starr.
  • Firewall - Redirect blocked visitors - You can show a message or redirect blocked visitors to another website.

Improved

  • 3rd party libraries, Select2

Fixed

  • for database tables not always being created when updating from Free to Pro.

Notes

  • More details on why a visitor is blocked.
  • Preparing plugin for translation, more to come.
  • Design overhaul to get closer to WP look and feel.
  • xx,xxx downloads
  • Firewall - fixed empty results showing up.
  • Firewall - New: Top countries. See which countries are bringing the most traffic.
  • More details on why a visitor is blocked in the log.

v2.64

minor

New

  • Malware Scanner - Tweaked the scanner to catch more suspicious files, and also reducing the number of false positives, leading to more accurate scans.
  • Malware Scanner - View whitelisted files.
  • Core Scanner - Detects unknown files in core folders.
  • Core Scanner - Find leftover files from older WordPress installations.
  • Core Scanner - Delete unwanted files individually or all unknown files.
  • Firewall - Country blocking, useful if you get a lot of bad traffic from specific countries.
  • Firewall - Top visitors log kept for the last 30 days. Discover top visitors and use to decide on which IPs or countries to block.
  • Firewall - Logging individual visits per IP
  • Firewall - Suspicious requests are blocked - based on the great BBQ: Block Bad Queries by Jeff Starr.
  • Firewall - Redirect blocked visitors - You can show a message or redirect blocked visitors to another website.

Improved

  • 3rd party libraries, Select2

Notes

  • Preparing plugin for translation, more to come.
  • Design overhaul to get closer to WP look and feel.
  • xx,xxx downloads

v2.63

minor

New

  • Malware Scanner - Tweaked the scanner to catch more suspicious files, and also reducing the number of false positives, leading to more accurate scans.
  • Malware Scanner - View whitelisted files.
  • Core Scanner - Detects unknown files in core folders.
  • Core Scanner - Find leftover files from older WordPress installations.
  • Core Scanner - Delete unwanted files.
  • Firewall - Country blocking, useful if you get a lot of bad traffic from specific countries.
  • Firewall - Top visitors log kept for the last 30 days. Discover top visitors and use to decide on which IPs or countries to block.
  • Firewall - When an IP is blocked, the IP is also saved in the log.
  • Firewall - Suspicious requests are blocked.
  • Core Scanner - Delete unwanted files individually or all unknown files.

Improved

  • 3rd party libraries, Select2

Notes

  • Preparing plugin for translation, more to come.
  • Design overhaul to get closer to WP look and feel.
  • xx,xxx downloads

v2.60

minor

New

  • Whitelisting rows in database
  • Detects unknown files in core folders
  • Malware Scanner - Whitelisting rows in database. Reduce false positives.
  • Core Scanner - Detects unknown files in core folders.
  • Core Scanner - Find leftover files from older WordPress installations.
  • Core Scanner - Delete unwanted files from plugin.
  • Firewall - When an IP is blocked, the IP is also saved in the log.
  • Firewall - Country blocking, useful if you get a lot of bad traffic from specific countries.
  • Malware Scanner - View whitelisted files.
  • Core Scanner - Delete unwanted files.
  • Malware Scanner - Tweaked the scanner to catch more suspicious files, and also reducing the number of false positives, leading to more accurate scans.
  • Firewall - Top visitors log kept for the last 30 days. Discover top visitors and use to decide on which IPs or countries to block.

Improved

  • 3rd party libraries, Select2

Notes

  • xx,xxx downloads
  • Reworked entire plugin
  • Preparing for translation
  • Firewall - When an IP is blocked, the IP is also saved in the log.
  • Reworked entire plugin, improved code.
  • Preparing for translation.
  • Design overhaul to follow WP standards better
  • Design overhaul to get closer to WP look and feel
  • Preparing plugin for translation, more to come.
  • Design overhaul to get closer to WP look and feel.

v2.51

minor

Improved

  • translation

v2.50

minor

Fixed

  • deactivated themes test

Install the free plugin on WordPress.org, or go Pro for cloud firewall, malware scanning, and agency tools.

Free on WordPress.org Get WP Security Ninja Pro

Larger screenshot

Enlarged image