SiteGuard WP Plugin

1.8.7

Fixed a cross-site scripting (XSS) vulnerability in the logout URL that could occur when the login page URL is changed.

Special thanks to daroo (Patchstack) for the report.

1.8.6

Rename Login: when the login URL falls back to the .php (stub) form, the settings screen now explains why .htaccess could not be used.

Rename Login: fixed the .htaccess self-test so it works when WordPress has been given its own directory (the WordPress Address differs from the Site Address).

Block Author Query: the “Disable REST API” exclusion list now uses REST API namespaces instead of plugin names.

Special thanks to abcdrew and miwarock777 for their contributions to this release.

1.8.5

Fixed a security issue affecting the login URL protection on some server configurations.

Special thanks to goto5656 for the report.

1.8.4

Fixed a security issue affecting the login URL protection on some server configurations.

Special thanks to goto5656 for the report.

1.8.3

Fixed an issue where the cleanup of legacy .htaccess rules (which could lock administrators out of /wp-admin/) did not run on sites that had already updated to 1.8.0 or 1.8.1.

1.8.2

Fixed an issue where upgrading from 1.7.x to 1.8.x could leave legacy .htaccess rules in place, locking administrators out of /wp-admin/.

Special thanks to t.inoue for the report.

1.8.1

Fixed a security issue affecting the login URL protection.

1.8.0

Added support for Nginx and Apache environments that do not use an .htaccess file.

Impro