Log zmian

7.9.3

• New: New settings for the Traffic Inspector firewall allow you to fine-tune its behavior. You can enable less or more restrictive firewall rules.
• Update: Troubleshooting of possible issues with scheduled maintenance tasks has been improved.
• Update: To make troubleshooting easier the plugin logs not only a lockout event but also logs and displays the reason for the lockout.
• Update: Compatibility with ManageWP and Gravity Forms has been improved.
• Update: The layout of the Activity and Live Traffic pages has been improved.
• Bug fixed: The malware scanner wrongly prevents PHP files with few specific names in one particular location from being deleted after a manual scan or during the automatic malware removal.
• Bug fixed: The number of email notifications might be incorrectly limited to one email per hour.
• Read more

7.9

• New: The plugin monitors suspicious requests that cause 4xx and 5xx HTTP errors and blocks IP addresses that aggressively generate such requests.
• New: A set of WordPress navigation menu links. Login, logout, and register menu items can be automatically generated and shown in any WordPress menu or a widget.
• New: Software error logging. A handy feature that logs PHP errors and shows them on Live Traffic page.
• New: A new export feature for Traffic Inspector. It allows exporting all log entries or a filtered set from the log of HTTP requests.
• Update: Multiple improvements to Traffic Inspector firewall algorithms. In short, the detection of obfuscated malicious SQL queries and injections has been improved.
• Update: Improved handling of malformed requests to wp-cron.php.
• Fix: The number of email notifications per hour can exceed the configured limit.
• Read more

7.8.5

• New: A new set of heuristics algorithms for detecting obfuscated malicious JavaScript code.
• New: A new file filter on the Quarantine page lets to filter out quarantined files by the date of the scan.
• New: The performance of the malware scanner has been improved. Now the scanner deletes all files in the website session and temporary folders permanently before the scan.
• Update: If the plugin is unable to detect the remote IP address, it uses 0.0.0.0 as an IP.
• Update: The antispam engine will never block the localhost IP
• Update: Performance improvements for database queries related to the process of user authentication.
• Update: Improved handling the plugin settings in a buggy or misconfigured hosting environment that could cause the plugin to reset settings to their default values.
• Update: Translations have been updated. Thanks to Francesco, Jos Knippen, Fredrik Näslund, Slobodan Ljubic and MARCELHAP.
• Fix: Fixed an issue with saving settings on the Hardening tab: „Unable to get access to the file…”
• Read more

7.8

• New: An ignore list for the malware scanner.
• New: Disabling execution of PHP scripts in the WordPress media folder helps to prevent offenders from exploiting security flaws.
• New: Disabling PHP error displaying as a setting is useful for misconfigured servers.
• New: English for the plugin admin interface. Enable it if you prefer to have untranslated, original admin interface.
• New: Diagnostic logging for the malware scanner. Specify a particular location of the log file by using the CERBER_DIAG_DIR constant.
• Update: The performance of malware scanning on a slow web server with thousands of issues and tens of thousands of files has been improved.
• Update: PHP 5.3 is not supported anymore. The plugin can be activated and run only on PHP 5.4 or higher.
• Fix: If a malicious file is detected on a slow shared hosting, the file can be shown twice in the results of the scan.
• Fix: A possible issue with the short PHP syntax on old PHP versions in /wp-content/plugins/wp-cerber/common.php on line 1970
• Read more

7.7

• New: Automatic cleanup of malware and suspicious files. This powerful feature is available in the PRO version and automatically deletes trojans, viruses, backdoors, and other malware. Cerber Security Professional scans the website on an hourly basis and removes malware immediately.
• Update: Algorithms of the malware scanner have been improved to detect obfuscated malware code more precisely for all types of files.
• Update: Email reports for scheduled malware scans have been extended with useful performance numbers and a list of automatically deleted malicious files if you’ve enabled automatic malware removal and some files have been deleted.
• Fix: A possible issue with uploading large JSON and CSV files. When Traffic Inspector scans uploaded files for malware payload, some JSON and CSV files might be erroneously identified as containing a malicious payload.
• Fix: A possible Divi theme forms incompatibility. If you use the Divi theme (by Elegant Themes), you can come across a problem with submitting some forms.
• Read more

7.6

• New: The quarantine has got a separate admin page in the WordPress dashboard which allows viewing deleted files, restoring or deleting them.
• New: Now the malware scanner and integrity checker supports multisite WordPress installations.
• Fix: Once an address IP has been locked out after reaching the limit to the number of attempts to log in the „We’re sorry, you are not allowed to proceed” forbidden page is being displayed instead of the normal user message „You have exceeded the number of allowed login attempts”.
• Fix: PHP Notice: Only variables should be passed by reference in cerber-load.php on line 5377
• Read more

7.5

• New: Firewall algorithms have been improved and now inspect the contents of all files that are being tried to upload on a website.
• New: The traffic logger can save headers, cookies and the $_SERVER variable for every HTTP request.
• New: The scanner now scans installed plugins for known vulnerabilities. If you have enabled scheduled automatic scans you will be notified in a email report.
• Update: A set of new malware signatures amd patterns have been added to detect malware submitted through a contact form as well as any HTTP request fields.
• Update: Now the plugin inspects user sign ups (user registrations) on multisite WordPress installations and BuddyPress.
• Update: The search for user activity, as well as enabling activity notifications, is improved.
• Read more

7.2

• New: Monitoring new and changed files.
• New: Detecting malicious redirections and directives in .htaccess files.
• New: Automated hourly and daily scheduled scans with flexible email reports.
• Update: Added a protection from logging wrong time stamps on some misconfigured web servers.
• Fix: Unexpected warning messages in the WordPress dashboard.
• Fix: Some file status links on the scanner results page may not work.

7.0

• Cerber Security Scanner: integrity checker, malware detector and malware removal tool.
• New: a new setting for Traffic Inspector: Use White IP Access List.
• Update: the redirection from /wp-admin/ to the login page is not blocked for a user that has been logged in once before.
• Bug fixed: the limit to the number of new user registrations is calculated the way that allows one additional registration within a given period of time.
• Read more

6.7.5

• A new button View Activity has been added to the user edit page in the WordPress dashboard.
• Miscellaneous code optimizations: performance of database routines and SQL queries are improved.
• A new Swedish translation has been added. Thanks to Fredrik Näslund.
• Bug fixed: The wildcard ... entry (all IPv4 addresses) to the Black IP Access List, doesn’t work as intended.

6.7

• New: Regular expressions are now available for the Traffic Inspector Request whitelist and Antispam Query whitelist.
• Update: Antispam engine algorithms have been updated to improve AJAX requests handling and reduce false positives.
• Update: Improved compatibility with WooCommerce, Formidable Forms, Gravity Forms and AJAX file upload.
• Update: Any symbols other than letters, numbers, dashes and underscores are not permitted in Custom login URL anymore.
• Bug fixed: The Safe antispam mode doesn’t work correctly on some website configurations. That may lead to false positives and erroneous spam form submission detection.
• Read more

6.5

• New: A new, advanced initialization mode which reinforces overall security performance.
• New: Traffic Inspector’s algorithms detect and deny any attempt to upload executable files or an .htaccess file via any POST request.
• New: A new setting to disable email notifications about new versions of the plugin.
• New: Search in the traffic log improved. Search in the User agent string and filter out the HTTP method (GET/POST) are available.
• Update: Performance of the logging subsystem is improved.
• Update: In the Smart mode if a user is not logged in, all requests to the admin dashboard are logged.
• Bug fixed: If a user tries to log in with an email address and an incorrect password, the „Invalid username” message is shown.
• Bug fixed: On a multisite installation with websites in subdirectories a user activation link doesn’t work.
• Read more

6.2

• New: Protection against (DoS) attacks that exploit recently discovered vulnerability (CVE-2018-6389).
• New: The Traffic Inspector algorithm detects malformed and double extensions like .php.jpg more precisely.
• New: The Access Lists now accept IPv6 addresses in any form and handle them in a shortened form. All existing IPs will be converted.
• Bug fixed: If the WP REST API is blocked, a request with a specially malformed URL can bypass protection. Thanks to Tomasz Wasiak.
• Bug fixed: An IPv4 range in the Access Lists might not work as expected, depending on server/site settings.

6.1

• New: Traffic Inspector has got a Request White List setting.
• New: An Activity filter for the Advanced search form on the Traffic Inspector page.
• Bug fixed: Two reCAPTCHA widgets on login/registration forms.
• Bug fixed: A legitimate IP address can be locked out by Traffic Inspector on a Windows hosting (server).

6.0

• New: Traffic Inspector. It’s a specialized request inspection algorithm that performs inspection all suspicious incoming HTTP requests and block them before they can harm a website.
• New: Traffic Inspector optionally logs all or just suspicious and malicious requests so you can inspect them.
• New: Added ability to clean up Cerber’s DB tables.
• New: If the web server has some issues and those issues can affect plugin functionality, they are shown on the Diagnostic page.
• Added protection to prevent scheduled tasks from being executed multiple times an hour.
• JavaScript antispam code is improved to eliminate excessive fields in GET requests.
• To eliminate possible warning messages, the inet_pton() function has been replaced with filter_var().

5.9

• New: You can add comments for new entries in the access lists
• Improved compatibility with exotic hosting environments: now the plugin handles URLs with the MultiViews server option enabled.
• Improved compatibility with caching plugins
• Bug fixed: The plugin logs a logout event if the actual logout doesn’t happen
• Read more

5.8.6

• New: Regular expressions (REGEX) in the list of prohibited usernames.
• New: Enable/disable weekly reports, a new setting to specify email addresses for weekly reports.
• Improved compatibility with non-standard authentication processes, WooCommerce and exotic/outdated hosting environments.
• Bug fixed: Some interface elements of WordPress Customizer might not work.
• Read more

5.8

• New: Now the plugin will send a brief security report (activity for past seven days) to specified email addresses.
• Plugin admin interface pages: compatibility with screen readers has been improved.
• REST API: the deprecated rest_enabled filter is used for WordPress older than 4.7.
• Bug fixed: After updating the plugin to the 5.7 version some disabled checkboxes (and corresponding disabled settings) are set to their default, enabled states.
• Bug fixed: An IP address in the white access list may be locked out as a suspicious IP.
• Read more