Weboria/argus-wp-defence
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 118 Wiki Activity

Update signed manifest to 7.23.14

Browse Source
This commit is contained in:
tech
2026-08-10 10:42:30 +00:00
parent b79ead3dcf
commit 5d36e1058f
1 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
manifest.json
+7 -7
View File
@@ -1,11 +1,11 @@
{ {
"version": "7.23.13", "version": "7.23.14",
"released_at": "2026-08-10T09:48:11+00:00", "released_at": "2026-08-10T10:42:30+00:00",
"package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.23.13/argus-wordpress-defence-7.23.13.zip", "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.23.14/argus-wordpress-defence-7.23.14.zip",
"sha256": "4eb8d3ed1840a45cb006c5830829d89b93a4b71bec70cb92a900b20bb29c7916", "sha256": "6b2365b173bd8e583a5d04021d205c773f927217b4870fc3ebff8c298c53367b",
"min_php": "7.4", "min_php": "7.4",
"min_wp": "6.0", "min_wp": "6.0",
"critical": false, "critical": true,
"summary": "Plugin and theme vulnerability detection is now real when connected to ARGUS Cloud (previously showed \"Check Pending\" indefinitely). No action needed if ARGUS Cloud is already connected -- it starts working automatically.", "summary": "* Fixed a serious bug: the Firewall could block ordinary visitors just for arriving from an\n everyday link -- for example, a link shared on Facebook, whose own redirect URL happened to\n match a pattern the Firewall treated as suspicious. The underlying cause was broader than that\n one case: 132 of the Firewall's 137 protection rules were checking a visitor's Referer,\n User-Agent, and X-Forwarded-For information -- values a visitor doesn't control -- when they\n should only ever have been checking what a visitor actually submits (search terms, form fields,\n comments, and similar). Those three values are now excluded everywhere except the handful of\n rules that specifically need them (Log4Shell-style attacks are delivered through exactly those\n values, so detection there is unchanged). No settings change needed; this takes effect\n automatically.",
"signature": "mhyjsk3Mo/9EDMbmf6JHCS0HPIJZMH7+E2VAaI+1oOdJWMnuD+1nG4SwxromMAXLRpxxslHgPln08T/fuynXAw==" "signature": "l3gHdqDlNbkuk88XuJpVOMiAbAMNVoht7lVJ0UgkgvcLgDUTmcnaYS9g6XoHqH6sPTkmLA6TL2SYe3d2d1NOCA=="
} }