WordPress 7.1.3: maintenance and security release (7 security fixes). Update now, then confirm the version.

Details

Changelog

2022.

Release notes from 2022.

v5.151

minor

New

  • Updated visitor log styling and the log now filters out requests not relevant to show, eg. favicon.ico

Fixed

  • Problems reported with blocking regular visitors.

v5.150

minor

New

  • Remove settings when deactivating. Now you can choose if the plugin database and settings should be removed when deactivating the plugin. Per default this is not enabled to help with debugging. Thank you Thomas :-)

Improved

  • visitor log.
  • language files. Volounteer translators are translating the plugin and making it easier to use in Bulgarian, German, Spanish (Colombia), Spanish (Ecuador), Spanish (Spain), Spanish (Venezuela). Thank you translators :-)
  • visitor log visuals and logging.

Notes

  • WP 6.1.1 checked.
  • WP 6.1.1 compatibility.

v5.149

minor

Notes

  • WP 6.1 compatibility.

v5.148

minor

New

  • more events from WooCommerce to the Events Logger - more detailed activity.

Notes

  • Prettified the interface
  • Minor improvements to translated strings. Language files updated.

v5.147

minor

Improved

  • memory usage and reduce unnecessary details and options that load automatically = Faster plugin.
  • Freemius SDK to 2.4.5

Fixed

  • PHP notice on some installations showing update status notification.
  • IP Range CIDR matching - improved matching of IP ranges.

v5.146

minor

Fixed

  • Firewall blocked exports - Thank you Kevin :-)
  • Restore upgrade.php on sites where missing.

v5.145

minor

Improved

  • MainWP integration with Secret Access URL.
  • database usage.
  • documentation in plugin and on website for Permissions Policy (used to be called Feature Policy) security headers. Thank you Oliver :-)
  • Freemius SDK to 2.4.4 with PHP 8 compability fixes.

Notes

  • the check for upgrade.php - it is not considered a security issue and can cause conflicts with normal WP upgrade processes.
  • the check for upgrade.php - it can cause conflicts with normal WP upgrade processes.

v5.144

minor

New

  • Expand all details for security tests. Thank you Alauddin.

Fixed

  • Typo in warning messages.
  • PHP error on some installs - Thank you @fakkel and @computerbuddha.

v5.143

minor

New

  • Detected vulnerabilities list update when website

Improved

  • whitelabel - missing name replacements several places. Thank you Jay.
  • vulnerabilities interface and text.
  • language files.

Fixed

  • PHP pruning visitor log in some cases.
  • Plugin name was showing up even if whitelabel feature enabled. Thank you Jay.
  • PHP notice on tests page.
  • PHP notice on vulnerabilities page.
  • Whitelabel - missing name replacements several places. Thank you Jay.
  • Not detecting themes properly.

Notes

  • Compatibility check with WordPress 6.0

v5.142

minor

Fixed

  • When renaming the login URL the default page now returns 404. Thank you Alauddin :-)
  • PHP notice when amount of vulnerabilities change.
  • Error if multiple Strict-Transport-Security headers are used - Thank you Jay.
  • PHP notice in auto-fixer module, thank you Jay.
  • When renaming the login URL the default page now returns 404. Thank you Alauddin.

v5.141

minor

New

Fixed

  • for the "Remove unnecessary themes".
  • for the "Remove unnecessary themes". Thank you Jay.
  • whitelisting folders and files in malware scanner
  • for Russian language websites. Opt-in dialogue failed. Thank you Mikhail :-)

Notes

  • The autofix is back and improved :-)
  • Wizard: Auto update plugin enabled per default.
  • The autofix is back and improved - Easy fixes for many of the security tests.

v5.140

minor

Improved

  • MainWP integration.
  • auto-updates integration.

Fixed

  • Logging database tables sometimes not created before plugin tried to log something.

v5.139

minor

New

  • notice to enable automatic background updates.
  • Notice to easily enable automatic background updates.

Improved

  • the description of the Content Security Policy, thank you Reza.

Fixed

  • PHP Notice missing database table when deactivating and reactivating.

Notes

  • Wizard - automatically sends email with unblock URL to administrator currently logged in.
  • Cleanup JS code.
  • Code preparation for integration with MainWP! :-D

v5.138

minor

Improved

  • test "Check if automatic WordPress core updates are enabled." with better explanation - thank you Reza.
  • firewall with new rules.

Fixed

  • error in installation script on some configurations.
  • potential bug in installation script.

Notes

  • Tested up to WP 5.9.2
  • clutter in interface.

v5.137

minor

Improved

  • the Wizard layout and process
  • the Wizard layout and process.

Fixed

  • bug in event log, thank you Eelco.

Notes

  • events logger from wizard - it is automatically enabled.
  • events logger step from wizard - it is automatically enabled.

v5.136

minor

Fixed

  • Opt in link failed.
  • Opt in reset link.

Notes

  • Security Tests - Improved test for unnecessary themes. Thank you Jay :-)
  • Visitor Log: Rearrange details for each request, easier to get an overview.
  • Security Tests - Fixed the test for unnecessary themes. Thank you Jay :-)
  • Security Tests - Improved layout changes, "Details" link moved.
  • Event logging is always on, helps detect patterns, eg. failed logins and repeated attacks spread over longer periods of time.
  • syslog feature.
  • Cleanup old code.
  • Minor improvements to event logger page styling.
  • Retired old database optimizer module.
  • syslog feature from events module.

v5.135

minor

Notes

  • Core Scanner - Now with "Delete all" button.
  • Security fix.

v5.134

minor

Fixed

  • Firewall
  • Firewall rename login module was deactivated in settings.
  • First time activation goes to main page.

Notes

  • Rename login - when activated shows same message as set in the settings for blocked pages.

v5.133

minor

Fixed

  • for empty table name when updating.
  • for IP detection.

Notes

  • Code tightening and 3rd party library updates.
  • Tested WP 5.9.1

v5.132

minor

Improved

  • IP detection functionality.
  • IP detection.
  • IP detection functionality - fix for firewall issues.

Notes

  • Disable "Rename login URL" when the firewall is disabled. Thank you Alauddin.
  • Disable "Rename login URL" feature when the firewall module is disabled. Thank you Alauddin.

v5.131

minor

Fixed

  • for firewall - thank you Barry :-)

v5.130

minor

Fixed

  • to firewall issues reported on some websites. Sorry to those affected.

Notes

  • Pro: New feature, automatically remove unwanted files - Enable on Fixes page.
  • Pro: Improved event logging detecting user in some cases.
  • Pro: Fixed problem loading the wizard on some websites.
  • Pro: More details in "Event logger" - see raw data for more events.

v5.129

minor

Improved

  • test interface, less clicks needed.
  • PHP 8 compatibility
  • 3rd party libraries.

Notes

  • Pro: New feature, enforce secure cookies on your website. Easy 1-click fix.
  • Tested up to WP 5.9

Install the free plugin on WordPress.org, or go Pro for cloud firewall, malware scanning, and agency tools.

Free on WordPress.org Get WP Security Ninja Pro

Larger screenshot

Enlarged image