wp2shell: more than a month later. Confirm 6.8.6, 6.9.5, 7.0.2. Patched is not clean.

Read the advisory

Changelog

2022.

Release notes from 2022.

v5.151

minor

Updated visitor log styling and the log now filters out requests not relevant to show, eg. favicon.ico

New

  • Updated visitor log styling and the log now filters out requests not relevant to show, eg. favicon.ico

Fixed

  • Problems reported with blocking regular visitors.

v5.150

minor

Remove settings when deactivating. Now you can choose if the plugin database and settings should be removed when deac…

New

  • Remove settings when deactivating. Now you can choose if the plugin database and settings should be removed when deactivating the plugin. Per default this is not enabled to help with debugging. Thank you Thomas :-)

Improved

  • visitor log.
  • language files. Volounteer translators are translating the plugin and making it easier to use in Bulgarian, German, Spanish (Colombia), Spanish (Ecuador), Spanish (Spain), Spanish (Venezuela). Thank you translators :-)
  • visitor log visuals and logging.

Notes

  • WP 6.1.1 checked.
  • WP 6.1.1 compatibility.

v5.149

minor

WP 6.1 compatibility.

Notes

  • WP 6.1 compatibility.

v5.148

minor

more events from WooCommerce to the Events Logger - more detailed activity.

New

  • more events from WooCommerce to the Events Logger - more detailed activity.

Notes

  • Prettified the interface
  • Minor improvements to translated strings. Language files updated.

v5.147

minor

memory usage and reduce unnecessary details and options that load automatically = Faster plugin.

Improved

  • memory usage and reduce unnecessary details and options that load automatically = Faster plugin.
  • Freemius SDK to 2.4.5

Fixed

  • PHP notice on some installations showing update status notification.
  • IP Range CIDR matching - improved matching of IP ranges.

v5.146

minor

Firewall blocked exports - Thank you Kevin :-)

Fixed

  • Firewall blocked exports - Thank you Kevin :-)
  • Restore upgrade.php on sites where missing.

v5.145

minor

MainWP integration with Secret Access URL.

Improved

  • MainWP integration with Secret Access URL.
  • database usage.
  • documentation in plugin and on website for Permissions Policy (used to be called Feature Policy) security headers. Thank you Oliver :-)
  • Freemius SDK to 2.4.4 with PHP 8 compability fixes.

Notes

  • the check for upgrade.php - it is not considered a security issue and can cause conflicts with normal WP upgrade processes.
  • the check for upgrade.php - it can cause conflicts with normal WP upgrade processes.

v5.144

minor

Expand all details for security tests. Thank you Alauddin.

New

  • Expand all details for security tests. Thank you Alauddin.

Fixed

  • Typo in warning messages.
  • PHP error on some installs - Thank you @fakkel and @computerbuddha.

v5.143

minor

Detected vulnerabilities list update when website

New

  • Detected vulnerabilities list update when website

Improved

  • whitelabel - missing name replacements several places. Thank you Jay.
  • vulnerabilities interface and text.
  • language files.

Fixed

  • PHP pruning visitor log in some cases.
  • Plugin name was showing up even if whitelabel feature enabled. Thank you Jay.
  • PHP notice on tests page.
  • PHP notice on vulnerabilities page.
  • Whitelabel - missing name replacements several places. Thank you Jay.
  • Not detecting themes properly.

Notes

  • Compatibility check with WordPress 6.0

v5.142

minor

When renaming the login URL the default page now returns 404. Thank you Alauddin :-)

Fixed

  • When renaming the login URL the default page now returns 404. Thank you Alauddin :-)
  • PHP notice when amount of vulnerabilities change.
  • Error if multiple Strict-Transport-Security headers are used - Thank you Jay.
  • PHP notice in auto-fixer module, thank you Jay.
  • When renaming the login URL the default page now returns 404. Thank you Alauddin.

v5.141

minor

Filter for whitelisting custom files and folder for malware scanner. <a href="https://wpsecurityninja.com/docs/filter…

New

Fixed

  • for the "Remove unnecessary themes".
  • for the "Remove unnecessary themes". Thank you Jay.
  • whitelisting folders and files in malware scanner
  • for Russian language websites. Opt-in dialogue failed. Thank you Mikhail :-)

Notes

  • The autofix is back and improved :-)
  • Wizard: Auto update plugin enabled per default.
  • The autofix is back and improved - Easy fixes for many of the security tests.

v5.140

minor

MainWP integration.

Improved

  • MainWP integration.
  • auto-updates integration.

Fixed

  • Logging database tables sometimes not created before plugin tried to log something.

v5.139

minor

notice to enable automatic background updates. · Notice to easily enable automatic background updates.

New

  • notice to enable automatic background updates.
  • Notice to easily enable automatic background updates.

Improved

  • the description of the Content Security Policy, thank you Reza.

Fixed

  • PHP Notice missing database table when deactivating and reactivating.

Notes

  • Wizard - automatically sends email with unblock URL to administrator currently logged in.
  • Cleanup JS code.
  • Code preparation for integration with MainWP! :-D

v5.138

minor

Tested up to WP 5.9.2

Improved

  • test "Check if automatic WordPress core updates are enabled." with better explanation - thank you Reza.
  • firewall with new rules.

Fixed

  • error in installation script on some configurations.
  • potential bug in installation script.

Notes

  • Tested up to WP 5.9.2
  • clutter in interface.

v5.137

minor

events logger from wizard - it is automatically enabled.

Improved

  • the Wizard layout and process
  • the Wizard layout and process.

Fixed

  • bug in event log, thank you Eelco.

Notes

  • events logger from wizard - it is automatically enabled.
  • events logger step from wizard - it is automatically enabled.

v5.136

minor

Security Tests - Improved test for unnecessary themes. Thank you Jay :-)

Fixed

  • Opt in link failed.
  • Opt in reset link.

Notes

  • Security Tests - Improved test for unnecessary themes. Thank you Jay :-)
  • Visitor Log: Rearrange details for each request, easier to get an overview.
  • Security Tests - Fixed the test for unnecessary themes. Thank you Jay :-)
  • Security Tests - Improved layout changes, "Details" link moved.
  • Event logging is always on, helps detect patterns, eg. failed logins and repeated attacks spread over longer periods of time.
  • syslog feature.
  • Cleanup old code.
  • Minor improvements to event logger page styling.
  • Retired old database optimizer module.
  • syslog feature from events module.

v5.135

minor

Core Scanner - Now with "Delete all" button.

Notes

  • Core Scanner - Now with "Delete all" button.
  • Security fix.

v5.134

minor

Firewall

Fixed

  • Firewall
  • Firewall rename login module was deactivated in settings.
  • First time activation goes to main page.

Notes

  • Rename login - when activated shows same message as set in the settings for blocked pages.

v5.133

minor

for empty table name when updating.

Fixed

  • for empty table name when updating.
  • for IP detection.

Notes

  • Code tightening and 3rd party library updates.
  • Tested WP 5.9.1

v5.132

minor

Disable "Rename login URL" when the firewall is disabled. Thank you Alauddin.

Improved

  • IP detection functionality.
  • IP detection.
  • IP detection functionality - fix for firewall issues.

Notes

  • Disable "Rename login URL" when the firewall is disabled. Thank you Alauddin.
  • Disable "Rename login URL" feature when the firewall module is disabled. Thank you Alauddin.

v5.131

minor

for firewall - thank you Barry :-)

Fixed

  • for firewall - thank you Barry :-)

v5.130

minor

Pro: New feature, automatically remove unwanted files - Enable on Fixes page.

Fixed

  • to firewall issues reported on some websites. Sorry to those affected.

Notes

  • Pro: New feature, automatically remove unwanted files - Enable on Fixes page.
  • Pro: Improved event logging detecting user in some cases.
  • Pro: Fixed problem loading the wizard on some websites.
  • Pro: More details in "Event logger" - see raw data for more events.

v5.129

minor

test interface, less clicks needed.

Improved

  • test interface, less clicks needed.
  • PHP 8 compatibility
  • 3rd party libraries.

Notes

  • Pro: New feature, enforce secure cookies on your website. Easy 1-click fix.
  • Tested up to WP 5.9

Install the free plugin on WordPress.org, or go Pro for cloud firewall, malware scanning, and agency tools.

Free on WordPress.org Get WP Security Ninja Pro

Larger screenshot

Enlarged image