diff --git a/manifest.json b/manifest.json
index 523d5c8..fa0ed59 100644
--- a/manifest.json
+++ b/manifest.json
@@ -1,11 +1,11 @@
 {
-    "version": "7.37.0",
-    "released_at": "2026-09-15T13:21:25+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.37.0/argus-wordpress-defence-7.37.0.zip",
-    "sha256": "3bec359a782ebf97cb5c8c458ffad14ce392e80bb0091e85230b02a5884a4397",
+    "version": "7.37.1",
+    "released_at": "2026-09-15T16:45:42+00:00",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.37.1/argus-wordpress-defence-7.37.1.zip",
+    "sha256": "daa33299e82da0d1ae6af271b9f6795f57e7ee11fe034b34e1ebc5ad6478daae",
     "min_php": "7.4",
     "min_wp": "6.0",
     "critical": false,
-    "summary": "* If connected to WAD, you can now see and manage a lot more remotely: run a security scan,\n  restore or permanently delete a quarantined file, re-check for vulnerable plugins/themes, purge\n  your page cache, and adjust Bot Protection, Form Protection, Cache & Performance, and general\n  Settings -- all from the WAD portal, the same way it already worked for Backups and WAF mode.",
-    "signature": "Rj5CL8iAcB0imZktoV3c7TJy7LVI5hnBW8Y34r/M3vDxqMQ6kDeVXse52Cx+Oz59pCM0KBZgB6YZuSH/qj2pAg=="
+    "summary": "* Hardening for the WAD remote settings added in 7.37.0: a remotely-adjusted custom login URL now\n  goes through the exact same safety checks as changing it here in wp-admin (it can no longer be\n  set to something that collides with a reserved WordPress path), and a value of the wrong type\n  for a setting is rejected instead of applied.",
+    "signature": "ugEaoL+TpncC8umJYEowzA5X8qFYlRyRVEU8Jt+6f0g0RXRErGzaWNJ3++ZD7Rry/umppR7TQhVjxAVuLOtsDg=="
 }