Compare commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
d48beb9757 | ||
|
|
4a43572b15 | ||
|
|
20c46d3d26 | ||
|
|
74fdd42561 | ||
|
|
1e4806457e | ||
|
|
da9237171a | ||
|
|
904bf52960 | ||
|
|
8ea7b9f5be | ||
|
|
804a1aae58 | ||
|
|
76e585139e | ||
|
|
f871592d27 | ||
|
|
f1375d3d7d | ||
|
|
72fa8e8901 | ||
|
|
efa84723ee | ||
|
|
39616478c9 | ||
|
|
c1969d4293 | ||
|
|
524b893e65 | ||
|
|
303f31e869 | ||
|
|
20a2a84ee8 | ||
|
|
9127b06836 | ||
|
|
19cb788556 | ||
|
|
e52046437b |
+7
-7
@@ -1,11 +1,11 @@
|
|||||||
{
|
{
|
||||||
"version": "7.23.14",
|
"version": "7.23.37",
|
||||||
"released_at": "2026-08-10T10:42:30+00:00",
|
"released_at": "2026-08-12T16:47:29+00:00",
|
||||||
"package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.23.14/argus-wordpress-defence-7.23.14.zip",
|
"package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.23.37/argus-wordpress-defence-7.23.37.zip",
|
||||||
"sha256": "6b2365b173bd8e583a5d04021d205c773f927217b4870fc3ebff8c298c53367b",
|
"sha256": "f098db975587ed243ce7b2f800917966cf205013b5a8dcd463d32291ed8831df",
|
||||||
"min_php": "7.4",
|
"min_php": "7.4",
|
||||||
"min_wp": "6.0",
|
"min_wp": "6.0",
|
||||||
"critical": true,
|
"critical": false,
|
||||||
"summary": "* Fixed a serious bug: the Firewall could block ordinary visitors just for arriving from an\n everyday link -- for example, a link shared on Facebook, whose own redirect URL happened to\n match a pattern the Firewall treated as suspicious. The underlying cause was broader than that\n one case: 132 of the Firewall's 137 protection rules were checking a visitor's Referer,\n User-Agent, and X-Forwarded-For information -- values a visitor doesn't control -- when they\n should only ever have been checking what a visitor actually submits (search terms, form fields,\n comments, and similar). Those three values are now excluded everywhere except the handful of\n rules that specifically need them (Log4Shell-style attacks are delivered through exactly those\n values, so detection there is unchanged). No settings change needed; this takes effect\n automatically.",
|
"summary": "* Backups can now be restored, not just created and downloaded. Every backup is automatically\n integrity-verified the moment it's created (with a \"Verify\" button to re-check any backup at\n any time), and restoring one first takes an automatic safety backup of your current state so a\n restore is always undoable.\n* Brute-force login attempts that ARGUS has already blocked automatically no longer sit in Findings\n \"Needs Attention\" as if they require action from you.\n* The Threats page now opens with the same at-a-glance summary cards (Threats Blocked Today,\n Malicious IPs, Blocked Requests, Security Events) already shown on Overview.\n* The license status on Overview now shows which domain your Premium license or trial is activated\n for, and a clearer started/renews date range next to the countdown ring.",
|
||||||
"signature": "l3gHdqDlNbkuk88XuJpVOMiAbAMNVoht7lVJ0UgkgvcLgDUTmcnaYS9g6XoHqH6sPTkmLA6TL2SYe3d2d1NOCA=="
|
"signature": "1HQx3QUAGKFXv9X6wvC7AyVdcaW6FeXbf6ELzsE2dq+BBp8LiRKNdzVj3ayWX5oMz8mM8xQGjda1tRxHz20tBQ=="
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user