WP Cerber Security Pro - WordPress Antispam & Malware Scan v9.6.7.3

Jackmoon said:

Update 8.7

Click to expand...

• For better compatibility with different web server configurations, the anti-spam query whitelist now ignores trailing slashes if a list entry or a requested URI has no GET parameters. For instance, these two entries, “/some-path/” and “/some-path”, are equal now in case of a request like “https://wpcerber.com/some-path/”.
• Processing of extended and invalid UTF-8 characters in the Traffic Inspector log has been improved. The collation of some database fields is converted to utf8mb4_unicode_ci.
• The displaying of invalid UTF-8 characters (invalid byte sequences) in the WP Cerber’s logs throughout the admin interface has been improved.
• WP Cerber is tested and fully jQuery 3 compatible.
• The wording and translations of the plugin admin interface have been updated and improved.

• Fixed a bug that prevented activating the Cerber.Hub master mode on PHP 8.
• Fixed bug: a fatal PHP error occurs while saving some WP Cerber settings when using Cerber.Hub on a remote website with “Standard mode” enabled.
• Fixed a bug that generated warning messages in the web server error log: Use of undefined constant LOGGED_IN_COOKIE – assumed ‘LOGGED_IN_COOKIE’
• Fixed a bug that blocked theme preview if the anti-spam engine is enabled for all forms on the website.

We are excited to announce a major release of WP Cerber that brings several new features and multiple important improvements to many algorithms and parts of the plugin. Some of the features are available in the professional version of the plugin only. Application passwords management done right You get control over the use of WordPress [...]

Click to expand...

mosestherock said:

v8.8.3 is right here.

Code:

New: Mimicking the default WordPress user authentication through the wp-login.php to detect slow brute-force attacks.
New: Prevent guessing valid usernames and user emails by disabling WordPress hints in the login error message when attempting to log in with non-existing usernames and emails.
New: Prevent guessing valid usernames and user emails by disabling WordPress hints in the password reset error message when attempting to reset passwords for non-existing accounts.
New: Prevent username discovery via oEmbed and user XML sitemaps.
New: User and malicious activity are displayed separately in two different areas on WP Cerber’s main dashboard page.
New: More convenient navigation through the WP Cerber admin pages by having the admin menu at the top.
New: A new quick link "Login issues" to view all login issues such as failed logins, denied attempts, attempts to reset passwords, and so forth.
Improved: Reduced the number of false positives when the malware scanner inspecting directives with external IP addresses in .htaccess files.
Improved: Better Two-factor authentication (2FA) emails: the wording of the verification email has been updated and can be translated. The email subject includes the site name.
Improved: The size of the database tables used by the integrity checker and malware scanner has been reduced.
Improved: Implemented a strictly secure way of utilizing the unserialize() PHP function known for being used to deliver and run malicious code.
Improved: Implemented a backup way of running WP Cerber maintenance tasks if WordPress scheduled tasks are not configured properly.
Fixed bug: Two-factor authentication (2FA) PINs are not displayed on the edit user admin pages in the WordPress dashboard.
Fixed bug: The "API request authorization failed" event was logged as "Login failed".

Click to expand...