Kadence Security Pro
Fixes
- Fix fatal error in WP-Admin when File Change is active.
Tweaks
- Delete older JS files that were causing false-positives on scans. They have not been used since the UI was rewritten in React.
Security
- Update StellarWP Telemetry library to improve authorization checks.
Tweaks
- Use block API Version 3 for the Security Profile block.
Fixes
- PHP warning when HTTP_HOST not set.
Tweaks
- Better surface Login Security features during onboarding.
Fixes
- PHP warning about translations being loaded too early.
Tweaks
- Solid Security now requires WordPress 6.5.
- Add a new
solid_security_mail_site_logofilter to modify the Site Logo used in email notifications.
Fixes
- PHP fatal error on shutdown due to missing Event class on some sites.
- PHP warning on Site Health page.
- PHP warning in the SSL module on some server setups.
Features
- Users can register for an account using passkeys on WP Login.
Tweaks
- Improve highlighting settings search results.
Fixes
- Checkbox styling issue on WordPress 6.6.
- If Login Methods is set to "Email Only" use the user's email address for the passkey's name.
- Fire an action when a vulnerability is unresolved due to plugin activation.
Fixes
- The Security Dashboard widget would not appear on new Solid Security installs.
- Activating a Patchstack license on sites with a www. subdomain would not show the license as active.
Security
- Fix a Google reCAPTCHA v3 bypass.
Deprecateds
- "Automatic (Insecure)" IP detection has been removed. Read more: https://go.solidwp.com/firewall-features-not-available
Tweaks
- Block repeated session hijacking attacks from the same device even if the user has not specifically blocked the attacker's device. Previously, subsequent attacks after the first block would have their capabilities reduced.
- Remove the "Accept-Language" and "DNT" header from the list of sources for Trusted Devices.
- The Updater library has been updated to 1.8.4. The list of Patchstack licensed domains have been removed from the SolidWP licensing page.
Fixes
- Fix the Trusted Devices "Approve" link in Outlook mail clients.
- The "Privilege Escalation" tab would not appear in a user's profile unless Passwordless Login was enabled.
Tweaks
- The "Trusted Devices" user experience has been reworked to make it clearer and simpler, especially for end users. Learn more: https://academy.solidwp.com/?p=10906
- Allow generating a new Two-Factor TOTP secret from the WP-Login UI.
Fixes
- The SolidWP logo appeared too large in some email clients.
- An error would occur if we could not determine the length of database columns while saving log items.