Anti-Malware Security and Brute-Force Firewall

4.23.90

Incremented version number to force update of index file that was missing changes from the last update.

4.23.89

Fixed XSS vulnerability to prevent WP Administrators from inserting script into the REQUEST_URI.

Checked code for compatibility with WordPress 7.0 and ClassicPress 2.7.

4.23.88

Fixed PHP Object Injection vulnerability with DB Scan.

4.23.87

Checked code for compatibility with WordPress 6.9.1 and ClassicPress 2.6.

4.23.85

Fixed the post_status field on custom post type for scan results and added log of all scan errors to the post_meta.

4.23.83

Fixed a missing capability check on an admin-ajax API endpoint.

Changed URLs for better compatibility with both HTTPS sites and HTTP sites.

Checked code for compatibility with WordPress 6.8.3.

4.23.81

Fixed Scan Settings issue when only one threat type is selected or when only DB Scan is selected.

Added debugging with file stats for single directory scans.

Fixed some Defined Constants that were causing an error in PHP 8.X.

Checked code for compatibility with WordPress 6.8.1.

4.23.77

Added an option to the Brute-Force Login Protection to not use PHP session_start to store the LOGIN_KEY.

Updated JavaScript arrays for better efficiency when larger arrays are created.

Fixed notice about Passing null to strlen being Deprecated in PHP 8.X.

Fixed notice about function _load_textdomain_just_in_time being called incorrectly in WP 6.7 and above.

Checked code for compatibility with WordPress 6.8 and Classi