- New: Firewall widget displaying a list of the countries with the highest number of blocked IPs
- Enhance: Block IP when UA is banned
- Enhance: Display IP value in the Firewall log header
- Enhance: Save TOTP secret key to DB only after code verification
- Enhance: Add max number of lockout records
- Enhance: Add timestamp for all lockout records
- Enhance: Firewall Log improvements
- Enhance: User role check
- Fix: Settings saved notice not dismissed automatically
- Fix: Two files from Avada builder 3.8 are reported as suspicious
- Fix: Broken CVSS score details of previously ignored issue
- New: Disable Google reCAPTCHA for logged-in users
- Enhance: Check HTML Entity for Audit Logs
- Enhance: Web Authentication notice on 2FA page
- Enhance: Show CVSS score in plugin vulnerability details
- Enhance: Compatibility with WordPress 6.1
- Enhance: IP detection
- Fix: Web Authentication during plugin upgrade
- Fix: Banned usernames for existing users
- Fix: Outdated manual rules for Prevent Information Disclosure
- Fix: User detail doesn't match the login/logout audit logs
- Fix: Defender 2FA conflicts with other plugins on Users page
- Fix: Displaying users when bulk updating notifications
- Fix: Masked Login not updating on My sites menu
- Fix: Conflict with OptimizePress
Enhance: 2FA flow for secret keys