9.0.1
Fix5 Security2 Tweak1Fixes
- Prevent the User Security page from crashing when "Show Avatars" is disabled in the WordPress discussion settings.
- Fix some filters on the User Security page not working as expected.
- Fix spacing on the Two-Factor form when backup methods are enabled.
- Fix fatal error when there is an error retrieving Patchstack license information.
- Styling issues on WordPress 6.4.
Security
- Don't disclose the login URL when using Hide Backend on a site with comments enabled and comment registration required. Thanks to Naveen Muthusamy for disclosing this issue.
- Check for the promote_user capability when using Privilege Escalation in addition to edit_user.
Tweaks
- Remove the iThemes Security is now Solid Security banner from admin-facing email notifications.