Decryption key:
WP Cerber Security Pro - WordPress Antispam & Malware Scan v9.7.4 Nulled
= 9.7.4 =
New: Timestamps in the fail2ban log now follow the operating system timezone instead of UTC, so fail2ban can correctly evaluate failed login attempts on servers using a non-UTC timezone.
New: Added the constant CERBER_LOG_TIMEZONE to force an explicit timezone identifier for the fail2ban log when automatic detection cannot determine the system timezone.
Improved: Hostnames written to the fail2ban log on failed login attempts are now sanitized to strip log-forging characters, allow only hostname-safe characters, and keep each entry on a single well-formed line.
Improved: WP Cerber's admin interface now uses WordPress's --wp-admin-theme-color custom property instead of hardcoded accent colors, aligning tabs, focus states, and changelog callouts with the selected admin color scheme.
Improved: The Tools / License page now shows localized, non-contradictory notices for empty, malformed, invalid, expired, or temporarily unverifiable license keys.
Improved: Refactored database operations with the new CRB_Database and CRB_Query_Builder classes for more consistent query execution, transactions, safe value quoting, and validation.
Improved: Added the Revalt result/error type as an internal foundation for more consistent operation results, diagnostic chains, and error logging.
Improved: Traffic Inspector now validates decoded JSON request payloads and captures decoding errors for more reliable request logging.
Improved: Sensitive-field masking and request-field preparation now use stricter validation, normalization, and escaping before database insertion.
Improved: Admin notices emitted by WP Cerber are now rendered through crb_purify_message(), which allows only a defined set of HTML elements and attributes.
Changed: The login security setting "Write failed login attempts to the system log file" has been renamed to "Log failed logins in a syslog-style format for automated IP banning tools". Behavior is unchanged.
Decryption key:
WP Cerber Security Pro - WordPress Antispam & Malware Scan v9.7.3 Nulled
= 9.7.3 =
Improved: Plugin settings that accept REGEX patterns are now validated for syntax errors when an administrator saves settings, helping detect invalid patterns before they cause configuration problems.
Improved: The Readiness widget now detects when required PHP functions are disabled even if a required extension is installed, and they provide more precise diagnostic messages.
Fixed: Translation updates no longer attempt to download non-existent locales, which prevents the misleading error message Updating translations for WP Cerber Security (haz)… Download failed. Not Found.
Fixed: Regular expression patterns in the Traffic Inspector setting "Do not log these locations" now work correctly when they contain forward slashes, so matching requests are excluded from logging as intended.
Fixed: A minor bug that could cause the server error log message preg_replace(): Passing null to parameter #3 ($subject) of type array|string is deprecated.
Fixed: A minor bug that could cause the server error log message Constant CRB_DOING_BG_TASK already defined. Fixed: A minor bug that could cause the server error log message Attempt to read property "ID" on null.
Fixed: A minor bug that could cause the server error log message Call to undefined function curl_init().
Fixed: A minor bug that could cause the server error log message Undefined array key "primary_ip".
Fixed: A minor bug that could cause the server error log message Undefined array key "local_ip".
Decryption key:
WP Cerber Security Pro - WordPress Antispam & Malware Scan v9.7 Nulled
== Changelog ==
= 9.7 =
New: Implemented a "System Readiness" dashboard widget that surfaces configuration and environment issues impacting security and stability, with quick links to relevant settings and documentation.
Improved: Enforced stricter Content-Security-Policy (CSP) measures in the plugin admin area by adding additional security directives.
Improved: Enhanced the detection of obfuscated malicious JavaScript to better identify hidden security threats.
Improved: More efficient analysis of suspicious requests by the firewall, resulting in better performance and fewer false positives.
Improved: Implemented batch processing and timestamp formatting for spam comment cleanup to improve performance and prevent resource issues.
Improved: Refactored database operations to use stricter identifier validation, improving SQL safety and compliance with MySQL standards.
Improved: Updated HTTP header validation methods used for whitelisting requests in the anti-spam engine and traffic firewall settings. These settings now support entries with an empty value after the colon.
Improved: Added exception logging and enhanced error handling to the continuous code quality assurance process.
Improved: File handling operations are now more fault-tolerant with the implementation of explicit permission checks and thread-safe file locks.
Changed: To prevent accidental movement dashboard widgets can now be reorganized using drag-and-drop via their headings only.
Compatibility: Refactored code to address deprecated features and ensure compatibility with PHP 8.5.
Fixed: A minor bug where escaped HTML tags were not properly handled when rendering the settings pages user interface.
Fixed: A minor bug that caused the server error log message: preg_replace(): Passing null to parameter #3 ($subject) of type array|string is deprecated in /wp-cerber/cerber-common.php:4267.
Fixed: A minor bug that caused the server error log message: preg_match(): Passing null to parameter #2 ($subject) of type string is deprecated.
Fixed: A minor bug that caused the server error log message: Undefined array key "REQUEST_METHOD".
Fixed: A minor bug that caused the server error log message: preg_replace(): Passing null to parameter #3 ($subject) of type array|string is deprecated.
Fixed: A minor bug that caused the server error log message: Undefined array key "HTTP_HOST".
Decryption key:
WP Cerber Security Pro - WordPress Antispam & Malware Scan v9.6.11 Nulled
Full changelogs
![]()
WP Cerber Security 9.6.11
WP Cerber Security 9.6.11 WordPress security plugin, firewall & anti-spam - Defenderwpcerber.com
Decryption key:
WP Cerber Security Pro - WordPress Antispam & Malware Scan v9.6.10 Nulled
= WP Cerber Security 9.6.10
We’ve just released a new version of WP Cerber, and while you won’t see big visual changes, this update is all about the details that prepare WP Cerber for the future. We refined how links are generated in email alerts, made admin navigation smoother, and strengthened URL and data sanitizing in rare edge cases. These are the kinds of [...]
Decryption key:
= 9.6.9 =
Important: The behavior of the 'authenticate' hook has been reverted to restore the behavior from versions before WP Cerber 9.6.6. Custom login workflows may be affected.
New: Added RDAP protocol support for retrieving IP address data. This is a modern and efficient replacement for WHOIS.
New: Added a setting to configure an optional message shown when a user’s email address is not allowed for registration.
New: New setting for handling login attempts with prohibited usernames: administrators can choose to silently deny access or also block the IP address.
Improved: Hardened .htaccess rules to prevent file execution in the WordPress uploads folder, even in edge-case scenarios.
Improved: Updated the plugin upgrade process to correctly handle copying and deleting obsolete settings.
Improved: Optimized log table rendering by replacing esc_url() with the faster crb_escape_url().
Improved: Enhanced diagnostic messaging in the "Upload a reference ZIP archive" dialog on the scanner page.
Improved: Hardened code of crb_escape_url() — bulletproof just got tougher.
Fixed bug: Warning: Undefined array key 'title' in cerber-load.php on line 9157.
Fixed bug: Undefined property: stdClass::$plugin in cerber-common.php on line 5853.
Fixed bug: The notification threshold setting was being reset to its default value after upgrading the plugin.
Fixed bug: The integrity scanner could stop scanning if the WP Cerber data folder became write-protected.
Minor: The setting "Non-existing users are strictly prohibited" has been moved from "Main Settings" to the "Global User Policies" tab.
Minor: The "Disable login language switcher" checkbox has been moved from "Main Settings" to the "Global User Policies" tab.
Decryption key:
Download WP Cerber Security Pro v9.6.7.3 - WordPress Antispam & Malware Scan Nulled Free
WP Cerber Security 9.6.7.3
In our ongoing commitment to providing an ever-evolving security solution for WordPress, this update to WP Cerber addresses several bugs discovered post-launch, ensuring a more reliable and seamless experience.
Fixed: A fatal PHP error triggered by a conflict with InfiniteWP.
Fixed: A bug that prevented language translations from loading when the main website’s language was set to English.
Fixed: An issue within Cerber.Hub where new client websites were incorrectly added to the main website with quotation marks in the client website URL and website name.
Improved: Cerber.Hub now renders client websites using the language specified in WP Cerber settings, allowing you to choose any language when managing a client website remotely.
Removed: The deprecated FILTER_SANITIZE_STRING constant, ensuring compatibility with modern PHP versions.
Decryption key:
Download WP Cerber Security Pro v9.6.6 - WordPress Antispam & Malware Scan Nulled Free
= v9.6.6 =
New: Introduced automatic translation of the plugin interface and messages for non-English websites, powered by AI and delivered via the WP Cerber cloud.
Improved: Enhanced plugin interoperability by allowing third-party plugins to integrate with WordPress and WP Cerber's authentication, enforcing their rules during login attempts.
Improved: Enhanced compatibility with alternative WordPress directory structures, such as those used by Bedrock.
Improved: Refined error messages on WordPress and WooCommerce login/password reset forms for better compatibility with third-party plugins.
Improved: Streamlined error reporting by automatically logging PHP errors and displaying them in a developer-friendly format on the Diagnostic tab.
Fixed: Resolved incorrect Anti-spam settings links displayed in Activity log pop-up windows.
Fixed: Addressed missing translations for tab titles on WP Cerber admin pages for non-English websites.
Fixed: Resolved a fatal PHP error triggered when saving add-on settings.
Fixed: Corrected URL display in Activity and Traffic logs when WordPress is installed in a separate directory.
Fixed: Resolved an issue where CTRL + clicking a link failed to open it in a new window/tab.
Fixed: Repaired broken "View details" links on the WordPress Plugins admin page.
Other: Removed the obsolete "Cerber Security Cloud protocol" setting.
Decryption key:
New: Dashboard widgets can now be rearranged using drag-and-drop, giving you full control over their placement.
New: Unused widgets can be disabled via the gear icon at the bottom of the page for a cleaner interface.
New: Added new widgets to the dashboard: Activity Breakdown, Top Offending IP Addresses, New Users, and Login Issues, providing deeper insights into site activity.
Improved: WP Cerber now leverages persistent WordPress cache like Redis to speed up some SQL-heavy requests on admin pages.
Improved: Permissions to block users have been updated, allowing any user with the edit_users or delete_users capability to block accounts. [How to block a WordPress user](https://wpcerber.com/how-to-block-wordpress-user/)
Improved: An inter-page overlay loader has been introduced to improve navigation on resource-intensive admin pages.
Compatibility: WordPress now checks for required PHP and WordPress versions before allowing an update to WP Cerber.
Compatibility: Added plugin headers "Requires PHP" and "Requires at least" to wp-cerber.php for better compatibility checks.
Compatibility: This is the final version supporting PHP 7.0, as the next release will require PHP 7.2.
Compatibility: Removed outdated CSS that previously supported older versions of Safari.
Fixed: Resolved issues with untranslated plural forms in some multilingual phrases.
Decryption key:
New: WP Cerber continuously monitors IP detection issues and provides diagnostic messages. If IP detection fails due to configuration or server settings, the details of the issue are displayed to assist in troubleshooting.
Improved: When valid proxy headers are missing, WP Cerber falls back to the standard $_SERVER['REMOTE_ADDR'] variable to extract IP addresses.
Improved: If the PHP constant [CERBER_IP_KEY](https://wpcerber.com/wordpress-ip-address-detection/) is configured but does not provide valid IP address, WP Cerber switches to fallback methods for IP detection.
Improved: The Sessions page now marks users with enforced [2FA](https://wpcerber.com/two-factor-authentication-for-wordpress/) using a green "2FA" label. A solid label indicates successful verification, while an outlined one means verification is pending.
Improved: WP Cerber’s cookies in the "Live Traffic" log are highlighted in green under "Server Response Cookies". Their values are now properly decoded for easier analysis.
Improved: REGEX patterns for [URL exceptions](https://wpcerber.com/antispam-exception-for-specific-http-request/) no longer require escaped slashes. Existing patterns are automatically updated during the upgrade.
Improved: 2FA PIN emails now include the recipient’s first and last name along with their email address. This change helps improve email deliverability.
Improved: Enhanced storage of 2FA session data prevents its misuse as an attack vector in compromised WordPress databases.
Improved: 2FA login forms have been improved for full compatibility with WordPress installations in sub-folders, particularly on web servers with sub-optimal configurations.
Improved: Database operations are optimized to leverage the latest PHP-compatible technologies. Performance on modern servers is improved.