Solid Security Pro (iThemes Security Pro) 8.5.2 NULLED

8.5.2 - 2024-11-19 - Timothy Jacobs
Bug Fix: PHP warning about translations being loaded too early.

8.5.1 - 2024-11-11 - Timothy Jacobs
Important: Solid Security now requires WordPress 6.5.
Tweak: Add a new `solid_security_mail_site_logo` filter to modify the Site Logo used in email notifications.
Bug Fix: PHP fatal error on shutdown due to missing Event class on some sites.
Bug Fix: PHP warning on Site Health page.
Bug Fix: PHP warning in the SSL module on some server setups.

8.5.0 - 2024-06-18 - Timothy Jacobs, Lisa Canini, Jared Hill
New: Users can register for an account using passkeys on WP Login.
Enhancement: Improve highlighting settings search results.
Bug Fix: Checkbox styling issue on WordPress 6.6.
Bug Fix: If Login Methods is set to "Email Only" use the user's email address for the passkey's name.
Bug Fix: Fire an action when a vulnerability is unresolved due to plugin activation.

8.4.1 - 2024-03-21 - Timothy Jacobs, Lisa Canini, Jared Hill
Security: Fix a Google reCAPTCHA v3 bypass.
Important: "Automatic (Insecure)" IP detection has been removed. Read more: https://go.solidwp.com/firewall-features-not-available
Tweak: Block repeated session hijacking attacks from the same device even if the user has not specifically blocked the attacker's device. Previously, subsequent attacks after the first block would have their capabilities reduced.
Tweak: Remove the "Accept-Language" and "DNT" header from the list of sources for Trusted Devices.
Tweak: The Updater library has been updated to 1.8.4. The list of Patchstack licensed domains have been removed from the SolidWP licensing page.
Bug Fix: Fix the Trusted Devices "Approve" link in Outlook mail clients.
Bug Fix: The "Privilege Escalation" tab would not appear in a user's profile unless Passwordless Login was enabled.

8.3.2 - 2024-02-06 - Timothy Jacobs, Lisa Canini, Jared Hill
Tweak: Add a notice when a user's role is demoted from the Site Scans page.
Tweak: Update Privacy Policy generator text.
Bug Fix: Could not proceed through onboarding when BuddyPress or BuddyBoss was active.
Bug Fix: Some firewall rules could not be deactivated.
Bug Fix: Allow opting in to Telemetry via the Settings Page.
Bug Fix: PHP 8.2 deprecation warnings.

8.3.0 - 2024-01-24 - Timothy Jacobs, Lisa Canini, Jared Hill
New: The Firewall page has a new IP Management tab to provide easy access to blocking or authorizing IP addresses.
New: Usage Data Sharing (opt-in only) allows users to share non-personal and non-sensitive information with StellarWP to inform decisions about how to improve Solid Security in the future.
Enhancement: The "Trusted Devices" manager has been redesigned and relocated to the Security Profile tabbed UI.
Enhancement: Add a snackbar notice when making changes on the Firewall Configure page.
Enhancement: Make the GDPR Optin text in the CAPTCHA module more visible.
Tweak: Remove some straggling references and links to iThemes.
Tweak: Consistently refer to 2FA as Two-Factor Authentication on the Profile page.
Tweak: Allow performing more Site Scan actions when the issue is muted.
Bug Fix: Truncate log item columns that are too long before inserting into the database.
Bug Fix: Consistently order the Security Profile tabs.
Bug Fix: Add missing text domain to new Solid Security Admin Menu items.
Bug Fix: Reset filters on the Vulnerabilities page when starting a Site Scan.
Bug Fix: PHP warning on the logs page when the File Change module logs unexpected data.

8.1.0 - 2023-11-14 - Timothy Jacobs, Lisa Canini, Jared Hill
New: Add support for creating custom firewall rules.
Enhancement: Add support for configuring firewall settings from the Firewall page.
Bug Fix: The firewall page would appear empty when geolocation could not retrieve a country code.

8.0.4 - 2023-11-07 - Timothy Jacobs, Lisa Canini
Security: Harden SolidWP Updater against XSS attacks. Thanks to Robin Wood (digi.ninja) for disclosing this issue.

8.0.3 - 2023-10-30 - Timothy Jacobs, Lisa Canini, Jared Hill
Security: Don't disclose the login URL when using Hide Backend on a site with comments enabled and comment registration required. Thanks to Naveen Muthusamy for disclosing this issue.
Hardening: Check for the promote_user capability when using Privilege Escalation in addition to edit_user.
Tweak: Remove the iThemes Security is now Solid Security banner from admin-facing email notifications.
Bug Fix: Prevent the User Security page from crashing when "Show Avatars" is disabled in the WordPress discussion settings.
Bug Fix: Fix some filters on the User Security page not working as expected.
Bug Fix: Fix spacing on the Two-Factor form when backup methods are enabled.
Update: The lib/updater library has been updated to 1.8.1
Enhancement: Add a `wp ithemes-licensing set-licensed-url` WP-CLI command.
Bug Fix: Fix fatal error when there is an error retrieving Patchstack license information.
Bug Fix: Styling issues on WordPress 6.4.