Compare commits

...
2 Commits
Author SHA1 Message Date
tech 5d36e1058f Update signed manifest to 7.23.14 2026-08-10 10:42:30 +00:00
tech b79ead3dcf Update signed manifest to 7.23.13 2026-08-10 09:48:52 +00:00
+6 -6
View File
@@ -1,11 +1,11 @@
{ {
"version": "7.23.12", "version": "7.23.14",
"released_at": "2026-08-10T01:13:58+00:00", "released_at": "2026-08-10T10:42:30+00:00",
"package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.23.12/argus-wordpress-defence-7.23.12.zip", "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.23.14/argus-wordpress-defence-7.23.14.zip",
"sha256": "fc714a48cd2867c9ae2b2cc4e3596de916ab7e83ddeb9ff46080264d73856fc5", "sha256": "6b2365b173bd8e583a5d04021d205c773f927217b4870fc3ebff8c298c53367b",
"min_php": "7.4", "min_php": "7.4",
"min_wp": "6.0", "min_wp": "6.0",
"critical": true, "critical": true,
"summary": "Fixed a serious bug where the Firewall could block your own access to ordinary admin pages (Dashboard, Users, Plugins, and others). If you were locked out, this update resolves it automatically.", "summary": "* Fixed a serious bug: the Firewall could block ordinary visitors just for arriving from an\n everyday link -- for example, a link shared on Facebook, whose own redirect URL happened to\n match a pattern the Firewall treated as suspicious. The underlying cause was broader than that\n one case: 132 of the Firewall's 137 protection rules were checking a visitor's Referer,\n User-Agent, and X-Forwarded-For information -- values a visitor doesn't control -- when they\n should only ever have been checking what a visitor actually submits (search terms, form fields,\n comments, and similar). Those three values are now excluded everywhere except the handful of\n rules that specifically need them (Log4Shell-style attacks are delivered through exactly those\n values, so detection there is unchanged). No settings change needed; this takes effect\n automatically.",
"signature": "nhsBT03beb8y42PGfKZP/VeGBa+sbFS/J2NnyWWbFxGs7dH8zOEMxnTwum3vkOlcPzb/swGMyg5dBBrb+FDlBQ==" "signature": "l3gHdqDlNbkuk88XuJpVOMiAbAMNVoht7lVJ0UgkgvcLgDUTmcnaYS9g6XoHqH6sPTkmLA6TL2SYe3d2d1NOCA=="
} }