Kadence Security Pro
Tweaks
- Add notice for the upcoming major 7.0 release.
Security
- Fix Hide Backend Bypass, thanks to Julio Potier for reporting the issue.
Tweaks
- Add filters to short-circuit lock APIs.
Fixes
- Prevent wp_no_robots deprecation warning on WordPress 5.7.
Tweaks
- Remove non-SSL fallbacks for Security Check Pro and Version Management.
Fixes
- Tweak checkbox styles.
Security
- To improve server compatibility, requests to the iThemes updater servers would automatically downgrade from https to http when https connections failed. This update removes the automatic downgrade. If your server cannot make outbound https connections, you can re-enable the downgrade capability by adding the following define in your site's wp-config.php file: define( 'ITHEMES_ALLOW_HTTP_FALLBACK', true );
Fixes
- Version Management compatibility with further changes in WordPress 5.6.
Fixes
- Improved compatibility with WP Engine.
- Version Management compatibility with WordPress 5.6.
- Follow Core UI patterns for Application Passwords.
- Pass the
WP_Errorobject to thewp_login_failedhook.
Features
- iThemes Security now supports Passwordless Login and reCAPTCHA v3 for Restrict Content Pro ( version 6.4.3 and later ).
Tweaks
- Overwrite Restrict Content Pro's detected IP address with the IP detected by iThemes Security.
- Application Passwords compatibility with WordPress 5.6.
Fixes
- Two Factor and Passwords Requirements compatibility with Restrict Content Pro.
- PHP warnings that may occur when initializing default user groups on a new installation.
Tweaks
- Add WP CLI command to run the Change Admin User tool.
- Disable SSL verification when performing the Security Check Loopback test. Some hosts can't properly verify loopback requests. This verification is unnecessary in this circumstance, and disabling SSL verification aligns iThemes Security with default WordPress loopback behavior.
- Override WordPress' built in auto update notices at a higher priority. This fixes issues with iThemes Security's settings being overwritten by other systems.
Fixes
- Some users would be force to choose a strong password twice in a row.
- Warning when saving the Ban Users module outside of the Settings Page without passing the legacy host_list setting.
- Fix issues with initializing a site scan from a non-licensed domain name.
Tweaks
- iThemes Security requires WordPress 5.4 or later.
- Support writing a note describing why a ban was added.
- Store the time a ban was added, and the lockout module responsible for the ban.
- Add a WP CLI command for managing bans, wp itsec ban.
- Add a setting for configuring the number of bans added to the server config files (.htaccess/nginx.conf).
Features
- Manage bans from the Security Dashboard with the new Banned Users card.
Fixes
- PHP warnings when invalid entries are stored in the WordPress Cron storage.
- Update the list of tables added to wpdb.
- Remove default value for text columns. This caused an issue on MySQL 8 and is unnecessary.
- Missing borders in the sidebar widgets on WordPress 5.5.
- Notice actions didn't trigger when "Hide Admin Bar" is enabled.
Fixes
- On WordPress 5.5, use the new auto-update notification instead of the debug email.
- Updated lib/updater to 1.6.4 Added support for the auto-update feature introduced in WordPress 5.5.
Fixes
- Update lib/updater to the latest version. Fixed fatal error that can happen when upgrading to the 1.6.1 version of this code: Ithemes_Updater_Settings::get_licensed_site_url() in server.php:199".