Compare commits

...
4 Commits
Author SHA1 Message Date
tech 5d36e1058f Update signed manifest to 7.23.14 2026-08-10 10:42:30 +00:00
tech b79ead3dcf Update signed manifest to 7.23.13 2026-08-10 09:48:52 +00:00
root b0102ea518 Update signed manifest to 7.23.12 (critical fix) 2026-08-10 01:14:06 +00:00
root 1b8d7950f5 Update signed manifest to 7.23.11 2026-08-10 00:59:55 +00:00
+7 -7
View File
@@ -1,11 +1,11 @@
{ {
"version": "7.23.10", "version": "7.23.14",
"released_at": "2026-08-10T00:39:42+00:00", "released_at": "2026-08-10T10:42:30+00:00",
"package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.23.10/argus-wordpress-defence-7.23.10.zip", "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.23.14/argus-wordpress-defence-7.23.14.zip",
"sha256": "67aa5944071472d15d73b782fd2334962a95a25166ffc225fe21bf5aad23df49", "sha256": "6b2365b173bd8e583a5d04021d205c773f927217b4870fc3ebff8c298c53367b",
"min_php": "7.4", "min_php": "7.4",
"min_wp": "6.0", "min_wp": "6.0",
"critical": false, "critical": true,
"summary": "New: Two-Factor Authentication. Turn it on from Settings to require a code from an authenticator app in addition to your password when logging in, with one-time backup codes for account recovery.", "summary": "* Fixed a serious bug: the Firewall could block ordinary visitors just for arriving from an\n everyday link -- for example, a link shared on Facebook, whose own redirect URL happened to\n match a pattern the Firewall treated as suspicious. The underlying cause was broader than that\n one case: 132 of the Firewall's 137 protection rules were checking a visitor's Referer,\n User-Agent, and X-Forwarded-For information -- values a visitor doesn't control -- when they\n should only ever have been checking what a visitor actually submits (search terms, form fields,\n comments, and similar). Those three values are now excluded everywhere except the handful of\n rules that specifically need them (Log4Shell-style attacks are delivered through exactly those\n values, so detection there is unchanged). No settings change needed; this takes effect\n automatically.",
"signature": "1jTq5xMIiILjJAPrqOJsUfgxdDa/gjM2FXoUctSO1SKmAW1cuWty4i518sh1MQ3bsrYT5vVGcCz6v4ujaDMZBA==" "signature": "l3gHdqDlNbkuk88XuJpVOMiAbAMNVoht7lVJ0UgkgvcLgDUTmcnaYS9g6XoHqH6sPTkmLA6TL2SYe3d2d1NOCA=="
} }