- New: Audit Log for Free Hub and WP.org users
- Enhancement: Compatibility with WordPress 7.1
- Enhancement: Replace PHP-DI third-party package with custom lightweight DI Container
- Enhancement: Display the Audit Log Storage retention setting
- Enhancement: Handle UI state when all scan types are disabled on the Settings page
- Enhancement: Update WPMU DEV domain in Audit service codebase
- Enhancement: Validate secret-key API response before writing to wp-config.php
- Enhancement: Improve toast message when attempting to disable the last enabled Malware Scan type
- Enhancement: Remove dash-notice submodule
- Enhancement: Ensure all scan status messages are displayed during scan progress
- Enhancement: Improving user communication while the site is connecting to the Hub
- Fix: Clicking on 'View Logs' link does not filter Firewall Logs after the redirect
- Fix: Security improvements on Hub-Connector (props: Jakub Herman)
- Fix: Prevent adding duplicate recipient email addresses in Reports and Alerts
- Fix: Changing the default report template should not affect existing recipient(s) preferences
- Fix: Fix responsive layout issues on Dashboard, Two-Factor Auth and Other Settings plugin pages
- Fix: Reverting to Defender 5 causes JavaScript errors on the Notifications page
- Fix: Recipients don't receive email for all types of 'Firewall Alert' when a firewall lockout is enabled and triggered for XSS, Fake Bot, or 'Non-installed plugin lockout'
- Fix: Logs are displayed without timezone on Audit and Firewall log pages
- Fix: Improve Malware Alert and Report flow for 'always_send' and 'error_send' params
- Fix: Email notifications title issue with apostrophes
- Fix: The scheduled time notice does not show after the Free upgrade
- Fix: Defender Welcome Modal is displayed in wrong version
- Fix: 3 strings were not imported for translation due to emoji
- Fix: Unable to access the Custom Rules page
- Fix: Force Authentication is not restricted to roles enabled under User Roles
- Fix: Settings page layout breaks at 1280px with horizontal scrollbar
- Fix: Incorrect 'Enable Bot Protection' modal on disabled reCAPTCHA toggles
- Fix: Pagination remains visible after ignoring all files and only disappears after clicking a page
- Fix: Defender Audit Logs creates incorrect and duplicate entries when updating General Settings
- Fix: Minor code improvements
- New: Reimagined Defender interface for a seamless, clutter-free optimization experience
- New: Comprehensive Activity Log to track scans, optimizations, and configuration changes in real time
- Enhancement: Transitioned to real-time Auto-save for all settings to provide a frictionless workflow
- Fix: Minor code improvements and performance refinements
- Enhancement: Improvements to Audit Logging in both API and plugin
- Enhancement: Compatibility with WordPress 7.0
- Enhancement: Improve compliance with wp.org guidelines throughout the plugin
- Enhancement: Submit button activates without radio button selection on Deactivate modal
- Fix: Error when Uninstall plugin settings are set to Delete value
- Fix: Console error when saving User Agent Banning changes
- Fix: Deprecated function warnings on PHP 8.5.X
- Enhancement: Improve AntiBot Stats endpoint
- Enhancement: Improve handling of response data in the Audit API
- Enhancement: Update malware signatures
- Enhancement: Improve suspicious issue view on the Malware Scanning page
- Enhancement: Include selected presets in the User Agent blocklist during export
- Fix: Error when filtering the Firewall logs
- Fix: Error when switching languages with WPML while Bot Trap is enabled
- Fix: Strong Passwords do not work when Mask Login URL is enabled
- Fix: Colored elements appear on Defender admin pages when High Contrast Mode is enabled
- Fix: Exported Firewall logs do not follow the selected sort order
- New: WooCommerce and BuddyPress integrations in Cloudflare Turnstile
- Enhancement: Compatibility with PHP 8.4
- Enhancement: Update malware signatures
- Enhancement: Update ALTCHA functionality
- Enhancement: Improve plugin code style using PHPStan
- Enhancement: Refactor CAPTCHA file structure
- Enhancement: Add Thinkbot user agent to Blocklist Presets
- Enhancement: Display the readme file on the Malware Scanning page after it is renamed
- Enhancement: Add new "Outdated and closed plugin" key to the config structure
- Fix: Prevent audit logs from being created when updating a user profile without changes
- Fix: Backslash character in salt generator can break the site
- Fix: Update copy for Mask URL block page
- Fix: Hide Settings > General > "More info" link when Whitelabel is enabled
- Fix: Inconsistent validation in CAPTCHA when the Preview test is not passed
- Fix: IP address and event type filters not working in the audit log export file
- Fix: Masked Login URL slug validation after activation
- New: Detect suspicious code in JavaScript files during Malware Scanning
- Enhance: Prevent false lockouts when requests contain mixed Facebook/Twitterbot user agents
- Enhance: Update Axios and form-data package versions
- Enhance: Update malware signatures
- Enhance: Split Bulk checkboxes between tabs on Malware Scanning page
- Enhance: Display Disconnect Site button on Defender’s general settings screen
- Enhance: Improve plugin code style using PHPStan
- Enhance: Improve UI for background Malware Scanning
- Enhance: Restore reCAPTCHA class alias for backward compatibility
- Enhance: Add new audit logging events
- Enhance: Migrate notification events to the centralized Cron Manager
- Enhance: Migrate common plugin events to the centralized Cron Manager
- Fix: Update .htaccess rules for LiteSpeed servers
- Fix: Duplicate user agent records in robots.txt
- Fix: Extra space and hidden Google reCAPTCHA field shown on multisite registration page
- Fix: Duplicates of Ignored Scan issues
- Fix: Deprecation warnings from the thecodingmachine/safe package in PHP 8.4
- Fix: Quarantine activation link does not work in the free version
- Fix: Incorrect "Configure" button flow in the Firewall widget on the Dashboard
- Fix: UI improvements
- New: Cloudflare Turnstile integration
- Enhance: Compatibility with WordPress 6.9
- Enhance: Redesigned CAPTCHA menu
- Enhance: Optimize database performance on multisite
- Enhance: Add additional widget IDs on Defender’s Dashboard page
- Enhance: Add new hooks to simplify Audit testing and Firewall logs deletion
- Enhance: Update minimum supported PHP version to 8.0
- Enhance: Disable New Scan button until the background scan is complete
- Enhance: Migrate Security Recommendations multisite events to the centralized Cron Manager system
- Enhance: Migrate Malware Scanning multisite events to the centralized Cron Manager system
- Enhance: Tracking improvements
- Fix: Masking URL displays a notice when using a slug already assigned to another page
- Fix: Defender not detecting some outdated plugins
- Fix: Recommended PHP version appears as NULL on WP Engine hosting
- Fix: Default Security Config name and description not saving properly