Plugin Name: WP Defender
Author: WPMU DEV
Tested up to: 5.8.1

Change Log:

= 2.6.0 ( 2021-09-20 ) =

- New: User Agent banning
- New: "What's New" modal hidden on fresh installs
- Enhance: Update Firewall filters and widgets to include User Agent lockouts
- Enhance: Add Countdown timer on the lockout screen
- Enhance Update IP Banning Blocklist/Allowlist UI
- Enhance: Update misaligned pagination on Firewall Logs page
- Fix: GEOIP.PHP issue in Defender Pro
- Fix: Update Malware Scanning loopback request params to same as WP core
- Fix: Can't login using WooCommerce's login/registration forms when Defender reCAPTCHA is enabled
- Fix: PHP version recommendation
- Fix: Integrate Defender password features with activated 2FA feature
- Fix: Issue with activated Mask Login Area and 2FA features
- Fix: Malware Scanning reports not sent on MU sites

= 2.5.7 ( 2021-08-25 ) =

- Fix: Firewall Locations ban issue

= 2.5.6 ( 2021-08-23 ) =

- New: reCAPTCHA for comments
- Enhance: 404 lockout – CSS, JS and MAP files excluded
- Enhance: Hide "Powered by Defender" line when Whitelabel is enabled
- Enhance: Hide "What's New Modal" when Whitelabel is enabled
- Enhance: Integrated Force Password Reset feature with Forminator
- Enhance: Option to automatically regenerate security keys
- Enhance: Recipient user list can be sorted and filtered by user role
- Fix: Login Protection and 404 Detection deactivated by itself
- Fix: Google reCAPTCHA v3 Locations issue
- Fix: Problem while navigating malware issues in Defender Pro
- Fix: Defender Pro sends the same reports twice
- Fix: Security Header Referrer description
- Fix: Updating from 2.3.2 to 2.4.4 resets security key recommendation to 60 days
- Fix: Updating from 2.3.2 to 2.4.4 removes previous malware scanning data
- Fix: Notification recipients – 'load more' interaction not visible when adding users

= 2.5.5 ( 2021-07-26 ) =

- New: Pwned Passwords settings added to Configs
- New: "What's New" modal hidden on fresh installs
- Enhance: "Clear Temporary IP Block List" option added to Configs
- Enhance: Asset Optimization to increase loading speed in the backend
- Enhance: Malware scanning rules improvements
- Enhance: File scan not detecting code inside wp-config.php
- Enhance: Updated white label method from the WPMU DEV Dashboard
- Enhance: Updated footer text on Preset Configs page
- Fix: Forced Password Reset not applied if user of one subsite tries to login to another subsite
- Fix: Displayed number of actioned recommendations in incorrect
- Fix: Free Defender version sending Pro version notifications
- Fix: Callbacks to avoid slow log
- Fix: Browser console error when changing default admin username
- Fix: Fix list of auxiliary WP-CLI commands
- Fix: Language translation not updating on multisite
- Fix: 2FA can be forced for user roles when inactive for that role
- Fix: Password reset doesn't work for Flywheel sites if Defender Pro is active
- Fix: Pwned Passwords security flaw
- Fix: Plugin updates via WPMU DEV Dashboard missing from Event Logs
- Fix: File scan reporting empty non-WP directories
- Fix: File scan missing files that start with a dot
- Fix: Defender sending mail reports to noreply@www.domain.com instead of noreply@domain.com
- Fix: 2FA > Active Users > View users link should open in new tab
- Fix: Issues viewing Dashboard and Notifications pages on Mobile
- Fix: Console error on Mask Login page
- Fix: Change reCaptcha to reCAPTCHA

= 2.5.4 ( 2021-06-28 ) =

- New: Google reCAPTCHA for WordPress login/register/password reset pages
- New: Highlight new features in welcome modal
- Enhance: Compatibility with WordPress 5.8
- Enhance: Update WP-CLI scan options
- Enhance: Tools dashboard widget
- Fix: Locations feature not working on Flywheel hosting
- Fix: Warnings with PHP version 7.4
- Fix: Password reset page showing if users from any subsite try to save pwned password
- Fix: Guest User under Malware Scanning Notification
- Fix: Various issues with notifications in Defender
- Fix: Can't update email when mask login enabled
- Fix: Minor typo in Dashboard modal
- Fix: Issue Details section not showing code
- Fix: Hide notice on Configs page

= 2.5.3 ( 2021-06-07 ) =

- Fix: Check password's hash before forwarding to Pwned Password API

= 2.5.2 ( 2021-06-01 ) =

- New: Force password reset for all registered users
- New: Highlight new features in welcome modal
- New: WP CLI support for Force Bulk Password reset
- Enhance: Integration with Smush - exclude Smush-optimized images from Malware Scanning reports
- Enhance: Add Pwned Passwords and Password Reset widgets to Defender Dashboard page
- Enhance: Change Doc link from advanced-tools to tools
- Enhance: Fix success notification inconsistencies
- Enhance: Add License at the footer of Pwned Passwords
- Enhance: Change 'Please try again!' error message for known vulnerabilities
- Fix: Clean Lockouts option
- Fix: Blank vulnerability report with some plugins
- Fix: Masked login are bypassed with double slash
- Fix: Search details are not showing on IP Banning modal page
- Fix: Defender translations
- Fix: Unable to schedule Posts
- Fix: Issues with Mask Login Area and user creation
- Fix: Typo in Prevent Information Disclosure and Prevent PHP Execution
- Fix: 2FA active state notification should change only after saving settings


598926-1634249807-ai