Solid Security Pro (iThemes Security Pro) 8.5.0 NULLED

View attachment 2842

iThemes Security Pro is a WordPress plugin from iThemes developers, that takes your website security to the next level. Your WordPress website needs a security strategy that includes a trusted WordPress security plugin like iThemes Security Pro. WordPress currently powers over 25% of all websites, so it has become an easy target for hackers with malicious intent.
Make sure your WordPress website is secure and protected with iThemes Security Pro...

Click to expand...

7.2.1 - 2022-09-16 - Timothy Jacobs, Lisa Canini, Jared Hill
Bug Fix: Fatal error when running on a site with an unprefixed version of Pimple or Psr/Container that was loaded before iThemes Security.

Click to expand...

7.2.2 - 2022-10-11 - Timothy Jacobs, Lisa Canini, Jared Hill

• Security: Add support for encrypting Two-Factor Mobile App secrets. Enable via Tools -> Set Encryption Key.
• Security: Deprecate Automatic Proxy Detection. Instead, manually configure Proxy Detection or use Security Check. Fix IP spoofing attacks.
• Enhancement: Add "Ban Lockout" button to the Active Lockouts card.
• Tweak: Delete passkeys that have been in the "trash" for seven days.
• Bug...

Click to expand...

7.2.3 - 2022-11-15 - Timothy Jacobs, Lisa Canini, Jared Hill
New: Passwordless Login can now be setup from the frontend of your website. Use the new iThemes Security block in the Block Editor or the [itsec_passwordless_login_settings] shortcode.
Tweak: Don't show "Ban" buttons in Security Dashboard if the user won't be able to create a ban.
Bug Fix: Prevent Headers Already Sent warning when a lockout occurs during a WP Cron request on some server setups.
Bug Fix...

Click to expand...

7.2.4 - 2022-11-30 - Timothy Jacobs, Lisa Canini, Jared Hill
Tweak: Add "All" tab to the Features page.
Tweak: Don't show Passkeys onboarding flow during front-end Passwordless Login attempts.
Bug Fix: Properly render the Passwordless Login block when not using a Full Site Editing theme.
Bug Fix: Prevent a redirect loop when logging in on sites that take more than 5 seconds to load the Dashboard.

Click to expand...

7.3.0 - 2023-01-24 - Timothy Jacobs, Lisa Canini, Jared Hill
New Feature: Add support for CloudFlare Turnstile and hCaptcha. Learn More: https://ithemes.com/?p=82867
Enhancement: Add support for logging in with Discoverable Passkeys.
Bug Fix: Update Password Strength library to the latest version. This fixes discrepancies between the realtime password strength estimation and the enforced password strength.
Bug Fix: Upgrade the iThemes Updater to 1.7.2 to fix...

Click to expand...

7.3.1 - 2023-03-23 - Timothy Jacobs, Lisa Canini, Jared Hill
Security Hardening: Prevent open redirects attacks against the Enforce SSL module. This attack requires spoofing the Host header which requires additional conditions to exploit. Thanks to nlpro for reporting the issue.

Click to expand...

7.3.2 - 2023-04-18 - Timothy Jacobs, Lisa Canini, Jared Hill
Tweak: Start enabling encryption for existing iThemes Security sites. Read more: https://ithemes.com/?p=84653
Bug Fix: Fallback to the homepage when Enforce SSL encounters a non-safelisted redirect destination.
Bug Fix: IP Detection on sites behind Load Balancers that appended their IP address to X-Forwarded-For and did not provide a Real IP header.

Click to expand...

7.3.6 - 2023-08-30 - Timothy Jacobs, Lisa Canini, Jared Hill
News: iThemes Security is becoming Solid Security soon. Learn More: https://go.solidwp.com/security-wpadmin-ithemes-becoming-solidwp
Bug Fix: Username First login compatibility with WordPress 6.3.

Click to expand...

8.0.1 - 2023-10-10 - Timothy Jacobs
Bug Fix: Ensure new database tables are created.

Click to expand...

8.0.2 - 2023-10-16 - Timothy Jacobs, Lisa Canini, Jared Hill
Enhancement: Add pagination to the Firewall logs table.
Tweak: Various UI improvements.
Bug Fix: On sites with no logo, a broken image appeared in some emails.
Bug Fix: In some email clients, the Solid Security logo would stretch too wide.

Click to expand...

8.0.3 - 2023-10-30 - Timothy Jacobs, Lisa Canini, Jared Hill
Security: Don't disclose the login URL when using Hide Backend on a site with comments enabled and comment registration required. Thanks to Naveen Muthusamy for disclosing this issue.
Hardening: Check for the promote_user capability when using Privilege Escalation in addition to edit_user.
Tweak: Remove the iThemes Security is now Solid Security banner from admin-facing email notifications.
Bug Fix: Prevent...

Click to expand...

8.0.4 - 2023-11-07 - Timothy Jacobs, Lisa Canini
Security: Harden SolidWP Updater against XSS attacks. Thanks to Robin Wood (digi.ninja) for disclosing this issue.

Click to expand...

8.1.0 - 2023-11-14 - Timothy Jacobs, Lisa Canini, Jared Hill
New: Add support for creating custom firewall rules.
Enhancement: Add support for configuring firewall settings from the Firewall page.
Bug Fix: The firewall page would appear empty when geolocation could not retrieve a country code.

Click to expand...

8.3.0 - 2024-01-24 - Timothy Jacobs, Lisa Canini, Jared Hill
New: The Firewall page has a new IP Management tab to provide easy access to blocking or authorizing IP addresses.
New: Usage Data Sharing (opt-in only) allows users to share non-personal and non-sensitive information with StellarWP to inform decisions about how to improve Solid Security in the future.
Enhancement: The "Trusted Devices" manager has been redesigned and relocated to the Security Profile tabbed UI...

Click to expand...

8.3.2 - 2024-02-06 - Timothy Jacobs, Lisa Canini, Jared Hill
Tweak: Add a notice when a user's role is demoted from the Site Scans page.
Tweak: Update Privacy Policy generator text.
Bug Fix: Could not proceed through onboarding when BuddyPress or BuddyBoss was active.
Bug Fix: Some firewall rules could not be deactivated.
Bug Fix: Allow opting in to Telemetry via the Settings Page.
Bug Fix: PHP 8.2 deprecation warnings.

Click to expand...

8.4.1 - 2024-03-21 - Timothy Jacobs, Lisa Canini, Jared Hill
Security: Fix a Google reCAPTCHA v3 bypass.
Important: "Automatic (Insecure)" IP detection has been removed. Read more: https://go.solidwp.com/firewall-features-not-available
Tweak: Block repeated session hijacking attacks from the same device even if the user has not specifically blocked the attacker's device. Previously, subsequent attacks after the first block would have their capabilities reduced...

Click to expand...

8.5.0 - 2024-06-18 - Timothy Jacobs, Lisa Canini, Jared Hill
New: Users can register for an account using passkeys on WP Login.
Enhancement: Improve highlighting settings search results.
Bug Fix: Checkbox styling issue on WordPress 6.6.
Bug Fix: If Login Methods is set to "Email Only" use the user's email address for the passkey's name.
Bug Fix: Fire an action when a vulnerability is unresolved due to plugin activation.

Click to expand...