tech
released this
2026-09-16 13:42:27 +00:00
| 21 commits to main since this release
- Comments that Form Protection identifies as automated spam are now sent straight to your
Spam folder instead of sitting in Pending Review, so fewer spam comments need manual cleanup.
Comments that only look unusual, rather than clearly automated, still go to Pending Review as
before.
Downloads
tech
released this
2026-09-16 08:17:21 +00:00
| 22 commits to main since this release
- Updated the Privacy Policy suggestion (Settings > Privacy) to clearly describe what WAD syncs
and can remotely do when you connect this site to a WAD account, and to more accurately describe
how long a banned IP address is kept after a ban is lifted.
- Banned IP addresses are now automatically cleaned up 90 days after a ban is lifted, instead of
being kept forever.
- Uninstalling the plugin now also removes your WAD pairing information, so nothing is left behind.
- Hardened WAD's remote-action channel against a very old, previously-seen action being replayed.
Downloads
tech
released this
2026-09-15 16:58:34 +00:00
| 23 commits to main since this release
- If connected to WAD, you can now unban an IP, and add or remove a trusted IP from your
allowlist, directly from the WAD portal -- and your Firewall tab there now also shows which
rules have been active in the last 24 hours. Your ban list on WAD also now always reflects your
site's real, current bans (it previously only showed sample data).
Downloads
tech
released this
2026-09-15 16:45:40 +00:00
| 24 commits to main since this release
- Hardening for the WAD remote settings added in 7.37.0: a remotely-adjusted custom login URL now
goes through the exact same safety checks as changing it here in wp-admin (it can no longer be
set to something that collides with a reserved WordPress path), and a value of the wrong type
for a setting is rejected instead of applied.
Downloads
tech
released this
2026-09-15 13:21:23 +00:00
| 25 commits to main since this release
- If connected to WAD, you can now see and manage a lot more remotely: run a security scan,
restore or permanently delete a quarantined file, re-check for vulnerable plugins/themes, purge
your page cache, and adjust Bot Protection, Form Protection, Cache & Performance, and general
Settings -- all from the WAD portal, the same way it already worked for Backups and WAF mode.
Downloads
tech
released this
2026-09-15 11:03:23 +00:00
| 26 commits to main since this release
- If connected to WAD, your Sites list there now always shows your real, current plugin version --
previously it could get stuck showing an older version after an update.
Downloads
tech
released this
2026-09-15 10:48:21 +00:00
| 27 commits to main since this release
- If connected to WAD, changes made there (like switching WAF mode, or a backup action) now
apply within about a minute instead of up to an hour.
Downloads
tech
released this
2026-09-15 09:39:47 +00:00
| 28 commits to main since this release
- Your WAD ID now shows up as soon as WAD connection is enabled, even before it's linked to an
account -- previously it only appeared after fully connecting.
Downloads
tech
released this
2026-09-15 09:00:16 +00:00
| 29 commits to main since this release
- If connected to WAD, you can now see and manage your backups remotely -- create a backup,
restore or delete an existing one, and adjust the automatic schedule, all from the WAD portal.
Nothing changes about how backups work locally; this just adds a remote view and controls on
top of the same feature you already have here in wp-admin.
Downloads
tech
released this
2026-09-15 07:59:21 +00:00
| 30 commits to main since this release
- WAD connection: your Installation ID is now shown clearly on the WAD Settings panel with a
one-click copy button, and connecting no longer requires pasting a separate connection key --
just start the connection on WAD and confirm a short code shown here, right in your WordPress
admin.
- This also makes WAD able to support more remote actions over time (like managing backups),
beyond just the WAF mode setting.
Downloads