wp2shell: more than a month later. Confirm 6.8.6, 6.9.5, 7.0.2. Patched is not clean.

Read the advisory

Changelog

2021.

Release notes from 2021.

v5.128

minor

test interface, less clicks needed

Improved

  • test interface, less clicks needed
  • test section interface, less clicks needed.

Notes

  • Pro: New feature, enforce secure cookies on your website.

v5.127

minor

Pinterest crawler validation.

New

  • Pinterest crawler validation.

v5.126

minor

Rename login. Hide your login page from automated scripts. · Core Scanner now runs automatically every day. No need t…

New

  • Rename login. Hide your login page from automated scripts.
  • Core Scanner now runs automatically every day. No need to manually scan the core WordPress files. This now happens automatically for you :-)
  • Added applebot.apple.com to verifyable crawlers.
  • Whitelisting IPs for WP Rocket and Broken Link Checker services.

Improved

  • 3rd party libraries.

Notes

  • Tested up to WP 5.8.2

v5.125

minor

Added applebot.apple.com to verifyable crawlers. · Core Scanner now runs automatically every day. No need to manually…

New

  • Added applebot.apple.com to verifyable crawlers.
  • Core Scanner now runs automatically every day. No need to manually scan the core WordPress files. This now happens once a day for you :-)
  • Rename login. Hide your login from automated scripts.
  • Rename login. Hide your login page from automated scripts.
  • Whitelisting IPs for WP Rocket services.
  • Core Scanner now runs automatically every day. No need to manually scan the core WordPress files. This now happens automatically for you :-)
  • Whitelisting IPs for WP Rocket and Broken Link Checker services.

Improved

  • 3rd party libraries.

Notes

  • Tested up to WP 5.8.2
  • Version skipped.

v5.124

minor

Added petalsearch.com to list of validated crawlers - Thank you Thomas.

New

  • Added petalsearch.com to list of validated crawlers - Thank you Thomas.

Fixed

  • Made the notice about updated vulnerability list dismissable
  • Updated whitelisted plugins
  • Minor bug in test if Admin SSL is enforced.
  • Updated malware scanner to fix false positive - Thanks Benjamin
  • Made the notice about updated vulnerability list dismissable.
  • Minor bug in test if Admin SSL is enforced - Thank you Christopher.
  • Updated malware scanner to fix false positive - Thank you Benjamin.

Notes

  • Language files updated
  • Language files updated.

v5.123

minor

Improved firewall with better search engine crawler detection · Improved firewall with better search engine crawler d…

New

  • Improved firewall with better search engine crawler detection
  • Improved firewall with better search engine crawler detection - Thank you Thomas.

Fixed

  • Missing details when logging a failed login - Thank you Eric.

Notes

  • 2021/08/30 *

v5.122

minor

High memory usage when activating plugin - getting vulnerabilities could stop activating the plug…

Fixed

  • High memory usage when activating plugin - getting vulnerabilities could stop activating the plugin. Thank you Patrick for the help locating this!
  • Internal links
  • Wizard CSS layout was not properly loading

v5.121

minor

Small display error when showing how many vulnerabilities added in last update.

Improved

  • visitor logging, faster code
  • visitor logging, faster code.

Fixed

  • Small display error when showing how many vulnerabilities added in last update.
  • Memory issue converting data on some servers, thank you John.
  • Vulnerabilities - Small display error when showing how many vulnerabilities added in last update.
  • Vulnerabilities - Memory issue converting data on some servers, thank you John.

v5.120

minor

Improved reporting of blocked IPs -> Faster plugin. · Our global IP network of blocked IPs is now out of beta -> More…

New

  • Improved reporting of blocked IPs -> Faster plugin.
  • Our global IP network of blocked IPs is now out of beta -> More protection for your website.
  • Improved reporting of blocked IPs -> Faster plugin :-)
  • Notice shows new vulnerabilities added since last update.
  • Get email warning if any vulnerabilities are detected on your website!

Improved

  • reporting of blocked IPs
  • reporting of blocked IPs -> Faster plugin.
  • the visitor log -> Only updates when the browser window is in focus, less work for your server.
  • language files. Thanks to all the translators for their hard work! :-)
  • the visitor log -> Only updates when the browser window is in focus, less work for your server.

Fixed

  • Some visits were not properly logged, thank you Thomas and others for reporting :-)
  • Some visits were not properly logged, thank you Thomas and others for reporting.
  • Some visits were not properly logged, thank you Thomas, John and others for reporting.

Notes

  • Our global IP network of blocked IPs is now out of beta -> More protection for your website.
  • zImproved the visitor log -> Only updates when the browser window is in focus, less work for your server.

v5.119

minor

Visitor log with live updates · Visitor log with live updates (Pro)

New

  • Visitor log with live updates
  • Pro Visitor log with live updates (Pro)

Improved

  • IP reporting network functionality. Scaling up
  • IP reporting network functionality.
  • firewall rules.
  • language file.
  • Pro IP reporting network functionality (Pro)
  • Pro firewall rules (Pro)

Fixed

  • PHP notice regarding wizard.
  • Removed visitor logs on Firewall tab - confusing interface.
  • Firewall visitor log mistakenly reported administrators as blocked, eventhough they were not.
  • Visitor log not including WP_AJAX requests
  • Visitor log not including WP_AJAX requests.
  • Fix -
  • Pro PHP notice regarding wizard (Pro)
  • Pro Removed visitor logs on Firewall tab (Pro)
  • Pro Firewall visitor log mistakenly reported administrators as blocked, eventhough they were not (Pro)
  • Pro Visitor log not including WP_AJAX requests (Pro)
  • Visitor log not including cron jobs.

Notes

  • Tested up to WP 5.7.2
  • Minor PHP fixes.

v5.118

minor

Pointer introduction for new users!

New

  • Pointer introduction for new users!

Fixed

  • Welcome page layout and improved styling

v5.117

minor

minor issue in malware scanner

Fixed

  • minor issue in malware scanner
  • persistent error in WC logging.

v5.116

minor

Event logging not working properly on some WooCommerce shops.

Fixed

  • Event logging not working properly on some WooCommerce shops.

v5.115

minor

Added basic WooCommerce tracking to Events Logger. · PRO: Added basic WooCommerce tracking to Events Logger.

New

  • Added basic WooCommerce tracking to Events Logger.
  • PRO: Added basic WooCommerce tracking to Events Logger.

Improved

  • 3rd party libraries.

Fixed

  • Downloading vulnerability list showed error notification on some website configurations.
  • General cleanup of code.
  • Properly overwrite settings in wp-config.php
  • notice in welcome module when deactivating plugin. Thank you Ebrahim.
  • problem on some systems - error when activating firewall - "Undocumented error. Page will automatically reload."
  • problem on some systems - error when activating firewall - "Undocumented error. Page will automatically reload. Reworked code.
  • Event logging not working properly on some WooCommerce shops.

Notes

  • Tested up to WP 5.6.2
  • Languages available: Bulgarian, English (US), Spanish (Ecuador), Spanish (Spain), and Spanish (Venezuela). Thanks to the translators! :-D
  • Whitelabel now available for 20+ site licenses.
  • Tested up to WP 5.7
  • Feature-Policy has been deprecated, it has been renamed to Permissions-Policy.
  • PRO: Feature-Policy has been deprecated, it has been renamed to Permissions-Policy. Currently both headers are used temporarily.
  • Languages available: Bulgarian, English (US), Spanish (Ecuador), Spanish (Spain), and Spanish (Venezuela). Thanks to all the translators! :-D

v5.114.1

patch

Quick fix for PHP notice showing up in debug log on some websites.

Notes

  • Quick fix for PHP notice showing up in debug log on some websites.

v5.114

minor

Enable/disable WP XML Sitemaps introduced in WordPress 5.5 (Pro) · Settings for vulnerability settings - control what…

New

  • Pro Enable/disable WP XML Sitemaps introduced in WordPress 5.5 (Pro)
  • Settings for vulnerability settings - control what is being checked for and disable the counter in the admin menu.
  • Enable/disable WP XML Sitemaps introduced in WordPress 5.5
  • Settings for vulnerability module - control what is being checked for and disable the counter in the admin menu.
  • Disable WP XML Sitemaps introduced in WordPress 5.5
  • Enable/disable username enumeration
  • in Fixes: Disable WP XML Sitemaps introduced in WordPress 5.5
  • in Fixes: Enable/disable username enumeration
  • Wizard - Get started in minutes with a few simple steps - protect your website with ease.
  • Introducing IP ban network - all sites reports heavy attacks to a central API to send out block warning to all sites in the network.
  • Fixes: Disable WP XML Sitemaps introduced in WordPress 5.5
  • Fixes: Enable/disable username enumeration

Improved

  • plugin loading time - Doing more tasks in background.
  • handling of importing data.

Notes

  • xxx,xxx downloads
  • debug page in plugin in favor of the included Site Health under Tools in WordPress itself.
  • Import/export works with vulnerability settings.
  • debug page in plugin in favor of "Site Health" included with WP.
  • Pro:
  • Introducing IP ban network (beta)
  • - Pro Changes -
  • Pro Changes:

Install the free plugin on WordPress.org, or go Pro for cloud firewall, malware scanning, and agency tools.

Free on WordPress.org Get WP Security Ninja Pro

Larger screenshot

Enlarged image