Compare commits

..
9 Commits
Author SHA1 Message Date
tech efa84723ee Update signed manifest to 7.23.23 2026-08-10 16:06:43 +00:00
tech 39616478c9 Update signed manifest to 7.23.22 2026-08-10 15:57:46 +00:00
tech c1969d4293 Update signed manifest to 7.23.21 2026-08-10 15:53:45 +00:00
tech 524b893e65 Update signed manifest to 7.23.20 2026-08-10 15:34:44 +00:00
tech 303f31e869 Update signed manifest to 7.23.19 2026-08-10 15:05:44 +00:00
tech 20a2a84ee8 Update signed manifest to 7.23.18 2026-08-10 14:14:25 +00:00
tech 9127b06836 Update signed manifest to 7.23.17 2026-08-10 11:36:11 +00:00
tech 19cb788556 Update signed manifest to 7.23.16 2026-08-10 11:08:03 +00:00
tech e52046437b Update signed manifest to 7.23.15 2026-08-10 10:55:14 +00:00
+7 -7
View File
@@ -1,11 +1,11 @@
{
"version": "7.23.14",
"released_at": "2026-08-10T10:42:30+00:00",
"package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.23.14/argus-wordpress-defence-7.23.14.zip",
"sha256": "6b2365b173bd8e583a5d04021d205c773f927217b4870fc3ebff8c298c53367b",
"version": "7.23.23",
"released_at": "2026-08-10T16:06:42+00:00",
"package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.23.23/argus-wordpress-defence-7.23.23.zip",
"sha256": "7dff076297018b1037a1fac229a8662622a3bccc414aa863d72633f14fca3950",
"min_php": "7.4",
"min_wp": "6.0",
"critical": true,
"summary": "* Fixed a serious bug: the Firewall could block ordinary visitors just for arriving from an\n everyday link -- for example, a link shared on Facebook, whose own redirect URL happened to\n match a pattern the Firewall treated as suspicious. The underlying cause was broader than that\n one case: 132 of the Firewall's 137 protection rules were checking a visitor's Referer,\n User-Agent, and X-Forwarded-For information -- values a visitor doesn't control -- when they\n should only ever have been checking what a visitor actually submits (search terms, form fields,\n comments, and similar). Those three values are now excluded everywhere except the handful of\n rules that specifically need them (Log4Shell-style attacks are delivered through exactly those\n values, so detection there is unchanged). No settings change needed; this takes effect\n automatically.",
"signature": "l3gHdqDlNbkuk88XuJpVOMiAbAMNVoht7lVJ0UgkgvcLgDUTmcnaYS9g6XoHqH6sPTkmLA6TL2SYe3d2d1NOCA=="
"critical": false,
"summary": "* Premium license management now has its own dedicated \"License\" page (moved out of Settings):\n status, your license key (safely masked), renewal date, and a new option to deactivate a key on\n this site.",
"signature": "nYdrU+A1y0DRqX7xaE1137NT5dGzT3icoZPyD9SNWFYsGGVAb6yrgoJvpfWFskFSjh8+IQgzdiLy96ZOK0VdDQ=="
}