Kadence Security Pro
Fixes
- Strong Passwords zxcvbn Library was not evaluating penalty strings correctly.
Tweaks
- Add confirmation button to Passwordless Login or One-Click Two-Factor when on a different device than you started with. When Trusted Devices is active, include information about the device the login will be processed on.
Fixes
- Fix Passwordless Login release notice not being dismissed due to a REST API route that was more narrowly defined than necessary.
Fixes
- PHP Warning while logging interstitial updates.
Tweaks
- iThemes Security requires PHP 5.4 or later.
- Make Magic Links work in a wider variety of situations.
- New Lockout Template screen.
- There were significant changes to the internals of the iThemes Security Lockout API in this release. If you are using the ITSEC_Lockout class directly, all the API functions will continue to work, but will emit deprecation notices. Please update your integrations.
Features
- Make WordPress Security Easy With Passwordless Logins
Fixes
- WordPress 5.3 Compatibility
- Brute Force module reporting invalid logins using an email address incorrectly.
Tweaks
- new iThemes Sync Verb support for overriding a specific Two-Factor request.
Fixes
- Hide Backend Bypass.
- Strict Standards error during Sync request.
- wp_die() if a login interstitial session fails to be created instead of throwing a fatal error.
Tweaks
- New iThemes Sync Verb support for File Change.
- Add additional information about the login attempt when calling the Network Brute Force API.
Fixes
- Ensure Dashboard classes are always loaded.
Tweaks
- Add Security Message when a Notification Center email fails to send.
- Add Security Message when the Malware Scanner finds malware or encounters an error.
- Replace Trace IP with IP Tracker Online.
Tweaks
- iThemes Security Admin Notices are now conveniently located in the new Security Messages Menu. Check your notices in the Security menu on the WordPress Admin Bar.
- Add filters to customize the available Two Factor providers for a user.
- Add a dismissible warning if iThemes Security isn’t licensed.
- Remove “pin” link from a Security Profile when that profile has already been pinned.
- Remove ‘DELETE’ method from “System Tweaks -> Filter Request Methods”
- Minor UI and a11y improvements to the Security Dashboard.
Fixes
- For WordPress 5.2 installs, prevent updating a plugin via Grade Report if the new plugin update has PHP version requirements that are not met.
Fixes
- Hide backend bypass.