Kadence Security Pro
Tweaks
- Replace Google QR Code API with an iThemes Security hosted solution. Google’s API will be shutdown on March 14th, 2019. If you’d like to generate QR codes locally, a plugin is available in the members panel under “Plugins”: iThemes Security – Local QR Code.
- Add support for deleting dashboards.
- Order cards in the dashboard widget in the same order as the mobile breakpoint in the Security Dashboard.
- New WP-CLI command for retrieving, releasing and creating lockouts.
- Improve dashboard a11y.
- Improve dashboard performance by decreasing the bundle size, improving cache stability, and async loading less used libraries.
- Allow the log description column to word break for URLs or other strings with no spaces.
Fixes
- Hide Backend bypass on certain Apache configurations.
- Properly return error that occurs during a backup.
- Regex warning on PHP 7.3 in the File Change module.
- Resolve warning when a user is set to “No Role”.
- Removing the last role or user from a shared dashboard would not work.
Fixes
- Load new dashboard widget on Multisite network admin dashboard properly.
Tweaks
- When ITSEC_DISABLE_MODULES is set, prevent hide backend from running.
Fixes
- Error on the WordPress dashboard screen when the Security Dashboard module does not completely load.
Features
- A new dashboard widget powered by the iThemes Security Dashboard.
Fixes
- Prevent “headers already sent” warning when logging in with the Two-Factor email method on certain systems.
- Tabnapping: Apply noopener to links instead of using blankshield script when available to prevent new pop-up blocker behavior from killing the links.
Features
- Add “Click to Continue” button to email Two-Factor method to simplify usage.
Tweaks
- Don’t require logging in again after overriding Two-Factor in Sync in mid-login.
- Improve redirecting after processing a login interstitial from a front-end login form.
- Add display description for log when safe guarding against an empty config file write.
Fixes
- Include Hide Backend token when emailing a password reset URL.
- Duplicate key error when consolidating Dashboard Events.
- Fix Recaptcha opt-in CSS not always loading.
Features
- reCAPTCHA v3 support. Can toggle between loading the api on all pages ( recommended ) or only the required pages. Adjust the Block Threshold from the recommended default of “0.5” based on the data in the Google reCAPTCHA console.
- On page reCAPTCHA opt-in to allow users to agree to Google’s ToS without refreshing the page.
Fixes
- Prevent dashboard error when the “Show Avatars” setting is disabled.
- Styling issue that made “Identified Loopback IP” look like an error message instead of a success.
Features
- Introducing the iThemes Security Dashboard. See a real-time overview of the security activity on your website with this dynamic dashboard. Turn it on by activating the Security Dashboard module.
Tweaks
- Add loopback IP detection to Security Check.
- Add define “ITSEC_DISABLE_TEMP_WHITELIST” to disable the Temporary IP Whitelisting for logged-in administrators.
- Only run Remote Messages API on Pro versions.
Fixes
- Only re-add Trusted Devices restricted capabilities filter if it was registered in the first place.
- Error when trying to edit reusable blocks with per-post SSL enabled.
Tweaks
- Use new “determine_locale()” function for loading the plugin textdomain.
Fixes
- Update Grade Report Software version fallback data.