From d33ab11b778a251471e57cefaa5a03dc4ea059f2 Mon Sep 17 00:00:00 2001
From: Luis Melo <tech@weboria.eu>
Date: Thu, 13 Aug 2026 10:53:46 +0000
Subject: [PATCH] Update signed manifest to 7.23.49

---
 manifest.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/manifest.json b/manifest.json
index c9a1e46..4833a08 100644
--- a/manifest.json
+++ b/manifest.json
@@ -1,11 +1,11 @@
 {
-    "version": "7.23.48",
-    "released_at": "2026-08-13T10:52:35+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.23.48/argus-wordpress-defence-7.23.48.zip",
-    "sha256": "50e2391f7f1f3cf36f0b7097c38b569ec12a0cc9bfe388329f767f5548edf543",
+    "version": "7.23.49",
+    "released_at": "2026-08-13T10:53:46+00:00",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.23.49/argus-wordpress-defence-7.23.49.zip",
+    "sha256": "15f149922645b12665d6ff0261bf4ea0432f26bffb735220957cf5794d06e63c",
     "min_php": "7.4",
     "min_wp": "6.0",
     "critical": false,
-    "summary": "* Hardened login against username enumeration: a failed login attempt now always shows the same\n  generic message, whether or not the username you tried actually exists on this site.",
-    "signature": "hr5xP0f7D3U/BJ6a9nsGIyKtZFIrg7ljsENNaY1+oEpaA7iWCmEmFMvJRkQ6iMCAxBlMH4qIqaPWoGuI6qLaCw=="
+    "summary": "* Closed a way an unauthenticated visitor could still probe usernames through the site's REST API,\n  even with the login page already hardened against this.",
+    "signature": "wX0aZAPFwvx4nnzAykVrqVNvGZcBN8gZUuuZkNtSqssYUaJm58jNmRGiYCK7TK0DyqYfuo64CbWVlefh458wDg=="
 }