| @@ -1,14 +1,14 @@ | ||
| 1 | 1 | === Defender Security - Malware Scanner, Login Security & Firewall === |
| 2 | 2 | Plugin Name: Defender Security - Malware Scanner, Login Security & Firewall |
| 3 | -Version: 6.2.0 | |
| 3 | +Version: 6.3.0 | |
| 4 | 4 | Author: WPMU DEV |
| 5 | 5 | Author URI: https://wpmudev.com/ |
| 6 | 6 | Contributors: WPMUDEV |
| 7 | 7 | Tags: security, malware, firewall, malware scanner, login security |
| 8 | 8 | Requires at least: 6.4 |
| 9 | -Tested up to: 7.1 | |
| 10 | -Stable tag: 6.2.0 | |
| 9 | +Tested up to: 7.1.1 | |
| 10 | +Stable tag: 6.3.0 | |
| 11 | 11 | Requires PHP: 8.0.0 |
| 12 | 12 | License: GPL v2 - http://www.gnu.org/licenses/old-licenses/gpl-2.0.html |
| 13 | 13 | |
| 14 | 14 | WordPress security plugin with malware scanner, IP blocking, audit logs, antivirus scans, firewall, 2FA, brute force login security, and more. |
| @@ -235,8 +235,59 @@ | ||
| 235 | 235 | 4. Done! |
| 236 | 236 | |
| 237 | 237 | == Changelog == |
| 238 | 238 | |
| 239 | += 6.3.0 ( 2026-09-22 ) = | |
| 240 | + | |
| 241 | +- Enhancement: Update malware signatures | |
| 242 | +- Enhancement: Make Scan settings uneditable while scanning is in progress | |
| 243 | +- Enhancement: Upgrade node packages | |
| 244 | +- Enhancement: Display country name tooltip on country flag hover in Firewall Logs | |
| 245 | +- Enhancement: Reduce the plugin archive size by removing legacy code in some files | |
| 246 | +- Enhancement: Translation improvements | |
| 247 | +- Enhancement: Display scan details of issue with a suspicious code with automatic scrolling | |
| 248 | +- Enhancement: Update support and product roadmap links | |
| 249 | +- Enhancement: DOM improvements when Pwned/Strong passwords are enabled | |
| 250 | +- Enhancement: Style improvements on Issues page | |
| 251 | +- Enhancement: Scan progress bar improvements | |
| 252 | +- Enhancement: Placeholder copy for Files, folders and file types field | |
| 253 | +- Enhancement: Show count of lockouts in the notice within Malicious Bot detector | |
| 254 | +- Enhancement: Improve config applying message | |
| 255 | +- Fix: Unlock Pro features on free plan for sites hosted by WPMU DEV | |
| 256 | +- Fix: Passing null to parameter #1 on class-malicious-bot.php | |
| 257 | +- Fix: Audit logs are causing an error when updating menu items | |
| 258 | +- Fix: Defender blocking entire America if Armenia is blocked in geoblocking | |
| 259 | +- Fix: Messaging missing for the config file imports | |
| 260 | +- Fix: Defender > Strong passwords option breaks the WP Application Password | |
| 261 | +- Fix: Dropdown scroll issue in smaller screens | |
| 262 | +- Fix: Overlapping modals on Dashboard page | |
| 263 | +- Fix: Minor code improvements | |
| 264 | + | |
| 265 | += 6.2.4 ( 2026-09-01 ) = | |
| 266 | + | |
| 267 | +- Fix: Username does not appear in some Audit Log events | |
| 268 | +- Fix: Audit module stores un-interpolated {{user_login}} in some logs | |
| 269 | +- Fix: Minor improvements in vulnerability detection | |
| 270 | + | |
| 271 | += 6.2.3 ( 2026-08-31 ) = | |
| 272 | + | |
| 273 | +- Enhancement: Improved Audit Log UI across Dashboard and Audit Log pages | |
| 274 | +- Enhancement: Added a "Save your API keys to load" preview state for Bot Protection CAPTCHA settings | |
| 275 | +- Enhancement: Updated the event type label in the detailed Audit Log view from 'Content' to 'Context' | |
| 276 | +- Fix: Resolved an issue where audit log events from multi-event requests were not synchronizing to the Hub | |
| 277 | +- Fix: Fixed a UI layout issue when editing Nginx configuration under Hardening > Prevent Information Disclosure | |
| 278 | +- Fix: Addressed a deprecation notice for Webauthn::verify_response() | |
| 279 | +- Fix: Fixed a visual bug where the "Learn how we detect your IP" link overlapped the background border at 1280px screen widths | |
| 280 | +- Fix: Minor code improvements | |
| 281 | + | |
| 282 | += 6.2.2 ( 2026-08-24 ) = | |
| 283 | + | |
| 284 | +- Fix: Streamlined schema method by removing bootstrap trait | |
| 285 | + | |
| 286 | += 6.2.1 ( 2026-08-20 ) = | |
| 287 | + | |
| 288 | +- Fix: 2FA > Web Authentication method binds credential verification to the target user (props: Tai) | |
| 289 | + | |
| 239 | 290 | = 6.2.0 ( 2026-08-18 ) = |
| 240 | 291 | |
| 241 | 292 | - New: Audit Log for Free Hub and WP.org users |
| 242 | 293 | - Enhancement: Compatibility with WordPress 7.1 |
| @@ -290,84 +341,8 @@ | ||
| 290 | 341 | |
| 291 | 342 | = 6.0.1 ( 2026-07-08 ) = |
| 292 | 343 | |
| 293 | 344 | - Fix: Resolved a fatal error caused by legacy null date values |
| 294 | - | |
| 295 | -= 6.0.0 ( 2026-07-07 ) = | |
| 296 | - | |
| 297 | -- New: Reimagined Defender interface for a seamless, clutter-free optimization experience | |
| 298 | -- New: Comprehensive Activity Log to track scans, optimizations, and configuration changes in real time | |
| 299 | -- Enhancement: Transitioned to real-time Auto-save for all settings to provide a frictionless workflow | |
| 300 | -- Fix: Minor code improvements and performance refinements | |
| 301 | - | |
| 302 | -= 5.11.0 ( 2026-03-31 ) = | |
| 303 | - | |
| 304 | -- Enhancement: Improvements to Audit Logging in both API and plugin | |
| 305 | -- Enhancement: Compatibility with WordPress 7.0 | |
| 306 | -- Enhancement: Improve compliance with wp.org guidelines throughout the plugin | |
| 307 | -- Enhancement: Submit button activates without radio button selection on Deactivate modal | |
| 308 | -- Fix: Error when Uninstall plugin settings are set to Delete value | |
| 309 | -- Fix: Console error when saving User Agent Banning changes | |
| 310 | -- Fix: Deprecated function warnings on PHP 8.5.X | |
| 311 | - | |
| 312 | -= 5.10.0 ( 2026-02-26 ) = | |
| 313 | - | |
| 314 | -- Enhancement: Improve AntiBot Stats endpoint | |
| 315 | -- Enhancement: Improve handling of response data in the Audit API | |
| 316 | -- Enhancement: Update malware signatures | |
| 317 | -- Enhancement: Improve suspicious issue view on the Malware Scanning page | |
| 318 | -- Enhancement: Include selected presets in the User Agent blocklist during export | |
| 319 | -- Fix: Error when filtering the Firewall logs | |
| 320 | -- Fix: Error when switching languages with WPML while Bot Trap is enabled | |
| 321 | -- Fix: Strong Passwords do not work when Mask Login URL is enabled | |
| 322 | -- Fix: Colored elements appear on Defender admin pages when High Contrast Mode is enabled | |
| 323 | -- Fix: Exported Firewall logs do not follow the selected sort order | |
| 324 | - | |
| 325 | -= 5.9.0 ( 2026-01-27 ) = | |
| 326 | - | |
| 327 | -- New: WooCommerce and BuddyPress integrations in Cloudflare Turnstile | |
| 328 | -- Enhancement: Compatibility with PHP 8.4 | |
| 329 | -- Enhancement: Update malware signatures | |
| 330 | -- Enhancement: Update ALTCHA functionality | |
| 331 | -- Enhancement: Improve plugin code style using PHPStan | |
| 332 | -- Enhancement: Refactor CAPTCHA file structure | |
| 333 | -- Enhancement: Add Thinkbot user agent to Blocklist Presets | |
| 334 | -- Enhancement: Display the readme file on the Malware Scanning page after it is renamed | |
| 335 | -- Enhancement: Add new "Outdated and closed plugin" key to the config structure | |
| 336 | -- Fix: Prevent audit logs from being created when updating a user profile without changes | |
| 337 | -- Fix: Backslash character in salt generator can break the site | |
| 338 | -- Fix: Update copy for Mask URL block page | |
| 339 | -- Fix: Hide Settings > General > "More info" link when Whitelabel is enabled | |
| 340 | -- Fix: Inconsistent validation in CAPTCHA when the Preview test is not passed | |
| 341 | -- Fix: IP address and event type filters not working in the audit log export file | |
| 342 | -- Fix: Masked Login URL slug validation after activation | |
| 343 | - | |
| 344 | -= 5.8.1 ( 2026-01-12 ) = | |
| 345 | - | |
| 346 | -- Enhancement: Miscellaneous improvements | |
| 347 | - | |
| 348 | -= 5.8.0 ( 2025-12-24 ) = | |
| 349 | - | |
| 350 | -- New: Detect suspicious code in JavaScript files during Malware Scanning | |
| 351 | -- Enhancement: Prevent false lockouts when requests contain mixed Facebook/Twitterbot user agents | |
| 352 | -- Enhancement: Update Axios and form-data package versions | |
| 353 | -- Enhancement: Update malware signatures | |
| 354 | -- Enhancement: Split Bulk checkboxes between tabs on Malware Scanning page | |
| 355 | -- Enhancement: Display Disconnect Site button on Defender’s general settings screen | |
| 356 | -- Enhancement: Improve plugin code style using PHPStan | |
| 357 | -- Enhancement: Improve UI for background Malware Scanning | |
| 358 | -- Enhancement: Restore reCAPTCHA class alias for backward compatibility | |
| 359 | -- Enhancement: Add new audit logging events | |
| 360 | -- Enhancement: Migrate notification events to the centralized Cron Manager | |
| 361 | -- Enhancement: Migrate common plugin events to the centralized Cron Manager | |
| 362 | -- Fix: Update .htaccess rules for LiteSpeed servers | |
| 363 | -- Fix: Duplicate user agent records in robots.txt | |
| 364 | -- Fix: Extra space and hidden Google reCAPTCHA field shown on multisite registration page | |
| 365 | -- Fix: Duplicates of Ignored Scan issues | |
| 366 | -- Fix: Deprecation warnings from the thecodingmachine/safe package in PHP 8.4 | |
| 367 | -- Fix: Quarantine activation link does not work in the free version | |
| 368 | -- Fix: Incorrect "Configure" button flow in the Firewall widget on the Dashboard | |
| 369 | -- Fix: UI improvements | |
| 370 | 345 | |
| 371 | 346 | [Changelog for previous versions](https://wpmudev.com/project/wp-defender/#view-changelog). |
| 372 | 347 | |
| 373 | 348 | == Upgrade Notice == |
