Kadence Security Pro
Fixes
- Version Management compatibility with further changes in WordPress 5.6.
Fixes
- Improved compatibility with WP Engine.
- Version Management compatibility with WordPress 5.6.
- Follow Core UI patterns for Application Passwords.
- Pass the
WP_Errorobject to thewp_login_failedhook.
Features
- iThemes Security now supports Passwordless Login and reCAPTCHA v3 for Restrict Content Pro ( version 6.4.3 and later ).
Tweaks
- Overwrite Restrict Content Pro's detected IP address with the IP detected by iThemes Security.
- Application Passwords compatibility with WordPress 5.6.
Fixes
- Two Factor and Passwords Requirements compatibility with Restrict Content Pro.
- PHP warnings that may occur when initializing default user groups on a new installation.
Tweaks
- Add WP CLI command to run the Change Admin User tool.
- Disable SSL verification when performing the Security Check Loopback test. Some hosts can't properly verify loopback requests. This verification is unnecessary in this circumstance, and disabling SSL verification aligns iThemes Security with default WordPress loopback behavior.
- Override WordPress' built in auto update notices at a higher priority. This fixes issues with iThemes Security's settings being overwritten by other systems.
Fixes
- Some users would be force to choose a strong password twice in a row.
- Warning when saving the Ban Users module outside of the Settings Page without passing the legacy host_list setting.
- Fix issues with initializing a site scan from a non-licensed domain name.
Tweaks
- iThemes Security requires WordPress 5.4 or later.
- Support writing a note describing why a ban was added.
- Store the time a ban was added, and the lockout module responsible for the ban.
- Add a WP CLI command for managing bans, wp itsec ban.
- Add a setting for configuring the number of bans added to the server config files (.htaccess/nginx.conf).
Features
- Manage bans from the Security Dashboard with the new Banned Users card.
Fixes
- PHP warnings when invalid entries are stored in the WordPress Cron storage.
- Update the list of tables added to wpdb.
- Remove default value for text columns. This caused an issue on MySQL 8 and is unnecessary.
- Missing borders in the sidebar widgets on WordPress 5.5.
- Notice actions didn't trigger when "Hide Admin Bar" is enabled.
Fixes
- On WordPress 5.5, use the new auto-update notification instead of the debug email.
- Updated lib/updater to 1.6.4 Added support for the auto-update feature introduced in WordPress 5.5.
Fixes
- Update lib/updater to the latest version. Fixed fatal error that can happen when upgrading to the 1.6.1 version of this code: Ithemes_Updater_Settings::get_licensed_site_url() in server.php:199".
Fixes
- Bump lib/updater
Tweaks
- Disable the WordPress 5.5 Auto-Update UI when iThemes Security Version Management is being used to manage auto-updates.
- Make the Site Scanner Report a configurable admin notice.
- Add a security message if a user needs to update their license information.
- Check if a licensed user is defined when checking license status.
- Use an opaque token for site scan verification to reduce invalid secret errors.
Fixes
- Error when trying to run Security Check on new installations.
Tweaks
- Add support for updating a plugin/theme directly from the Site Scanner vulnerability details page.
- Update site scanner notification language to be less alarming.
- Change insensitive language to be more inclusive.