Kadence Security Pro
Fixes
- Fix issue with saving Global settings if Security Check Pro has detected the correct Proxy Header to use.
Tweaks
- Allow for selecting the particular Proxy header a server is configured to use. Improve the language to indicate the importance of configuring this setting. H/t Filippo Cavallarin CEO at wearesegment.com
Tweaks
- Delete a user's device fingerprints when their account is deleted.
Fixes
- Ensure you can save Two-Factor when "Trusted Devices" is disabled on a new site.
Features
- Trusted Devices identifies the devices users use to login and can apply additional restrictions to unknown devices.
Tweaks
- Allow a device to be remembered and bypass Two-Factor for 30 days. Requires "Trusted Devices" to be active.
- Display Recaptcha in the wp_login_form() template function.
- Block access to git and svn repositories when System Tweaks -> Protect System Files is enabled.
- Update jQuery Validation library to 1.17.0
- Don't require Two-Factor on-boarding if the user is required to use Two-Factor because of a vulnerable site.
Fixes
- Improve detection of blocking the File Change Scan from being scheduled if one is already being run.
- Prevent infinite recursion error when trying to access directories outside of the allowed file tree.
- Grade Report styling issue on IE 11.
Tweaks
- Add schedule options to the "Grade Report Change" email.
Fixes
- Don't send "Grade Report Change" email if the grade is reverted back to the original grade during the waiting period before sending the notification.
- Plugins were deactivated when updating through Grade Report.
- REST API Protection blocked the Taxonomies route for all users.
Fixes
- Fixed how the Grade Report enable/disable status is stored to fix admin page loading issues on some sites.
Tweaks
- Added a setting to enable/disable the Grade Report feature of Pro.
Fixes
- Fix serialization of closure error when a plugin registering a hook with a closure is in the boot-up stack and the notification center is triggered too early in the cycle.
Features
- Allow for globally setting recipients for admin-targeted notifications. All new notifications will default to the recipients in this list. Notifications can be set to use the default list or switch to a custom list.
Tweaks
- Allow for disabling Grade Report for certain users. This will hide the Grade Report in the admin and remove it from the Security Digest sent to those users. If one of these users is configured to receive the "Grade Report Change" email they WILL still receive that notification.
- Account for 3rd-party Backup Plugin in Security Check.
- On upgrade, disable "Grade Report Change" email when more than one recipient is designated to receive the notification.