Kadence Security Pro
Fixes
- Fixed a fatal error condition that could occur on the Grade Report page when specific combinations of manual roles for Two-Factor Protection > User Type Protection were selected.
Features
- Added Grade Report, a tool to identify security weaknesses on the site with options to fix the detected issues.
Fixes
- Ensure all users with the
manage_optionscapability are available when selecting contacts in the Notification Center.
Tweaks
- Added minimal API for adding additional entries to the Security admin menu.
Fixes
- Warning when uninstalling a plugin while File Change module is active.
Tweaks
- Shrink storage size of file scans.
- Make recovering file scan log smaller.
Fixes
- Prevent WP admin dashboard JavaScript from crashing when the File Change module is not loaded.
Tweaks
- Track raw memory used by the file change scanner as well.
- Page Load Scheduler: Unschedule single events before running them. This mirrors the behavior of the WP Cron scheduler.
Tweaks
- File Change Scan uses a new batching mechanism to prevent crashing on hosts but still generating only one report per-day.
- Updated list of File Change excluded file types to include more media extensions.
- File Scan "chunk" option is removed.
- Specifying a manual file scan list has been removed.
- Security Digest now includes all lockouts that have occurred since the last email.
Fixes
- Don't prompt for security check when visiting the settings page after running the security check WP CLI command.
Features
- Add WP CLI commands for running the Security Check Scan, managing Modules and enrolling in Network Brute Force.
Fixes
- When using the Cron scheduling system, malware scans that had failed and been scheduled to retry would fail to reschedule the original scan event upon success.
- Added ability to show object data for classes that are not loaded to the Logs page.
- Fixed logging system references to "fatal-error" that should be "fatal".
- Prevent PHP warning when completing database backups that are not emailed to any recipients.
- Prevent PHP warning about converting an array to a string when adding notification data.
Fixes
- Fixed situation that could cause lockout notifications being sent for whitelisted IPs.
- Fixed issue where saving Global Settings would be blocked by an unwritable "Path to Log Files" path when the "Log Type" is set to "Database Only".
- Fixed issue that prevented log database entries from purging and log file entries from rotating on a schedule.
Security
- Fixed display of unescaped data on logs page.
Tweaks
- The logging system now differentiates between WP-CLI commands, WP-Cron scheduled events, and normal page requests.
Fixes
- Fixed the File Change scanner in that it previously could fail to exclude selected directories on some systems.
Tweaks
- Cleaned up styling in settings to make some settings stand out better.
- Use plugin build for cache busting assets.
- Extract scheduling loop system to iThemes Security Core for future development.
Fixes
- Fixed issue preventing the Two-Factor override from iThemes Sync from working as expected.
- Cannot use object of type WP_Error as array in Malware Scanner.
- Reordered loading of logging class to allow for logging earlier.
Fixes
- Fixed issue that could cause login attempts to bypass recaptcha protection.