Anti-Malware Security and Brute-Force Firewall

4.23.92

Fixed path condition in save_contents function that prevented Brute-Force patch from installing (thank to Sean Dempsey for finding this error).

4.23.91

Fixed CSS display issue in the alignment of the scan path text.

Hardened nonce token and removed debug output to prevent stored XSS via CSRF.

Checked code for compatibility with WordPress 7.1.3 and ClassicPress 2.7.4.

4.23.90

Incremented version number to force update of index file that was missing changes from the last update.

4.23.89

Fixed XSS vulnerability to prevent WP Administrators from inserting script into the REQUEST_URI.

Checked code for compatibility with WordPress 7.0 and ClassicPress 2.7.

4.23.88

Fixed PHP Object Injection vulnerability with DB Scan.

4.23.87

Checked code for compatibility with WordPress 6.9.1 and ClassicPress 2.6.

4.23.85

Fixed the post_status field on custom post type for scan results and added log of all scan errors to the post_meta.

4.23.83

Fixed a missing capability check on an admin-ajax API endpoint.

Changed URLs for better compatibility with both HTTPS sites and HTTP sites.

Checked code for compatibility with WordPress 6.8.3.

4.23.81

Fixed Scan Settings issue when only one threat type is selected or when only DB Scan is selected.

Added debugging with file stats for single directory scans.

Fixed some Defined Constants that were causing an error in PHP 8.X.

Checked code for compatibility with WordPress 6.8.1.

4.23.77

Added an option to the Brute-Force Login