tech
released this
2026-09-17 10:42:47 +00:00
| 13 commits to main since this release
- Security hardening: this site's IP-based protections (firewall, brute-force login protection,
REST/API abuse protection, WooCommerce checkout guard, two-factor) now correctly recognise real
visitor IP addresses when this site runs behind a reverse proxy, load balancer, or CDN, using the
same trusted-proxy configuration already available under Form Protection. Previously, sites in
that setup could see every visitor as the same address, weakening these protections.
- Hardened the replay protection added in 7.39.0 further: it now remembers a short history of
recently-applied WAD actions instead of only the single most recent one.
Downloads