ARGUSandClaude Sonnet 5
35efd3e485
Real changes since 1.0.0, all live-verified before this release: - Firewall: rule corpus expanded 19 -> 43 rules, real OWASP-CRS-equivalent coverage (XXE, SSRF, session fixation, Log4Shell/JNDI, scanner-tool detection, deeper SQL injection/XSS/PHP-injection). - Fixed a real bug: a quarantined file's severity badge and its content analysis score could disagree with no explanation (e.g. a benign file showing CRITICAL next to Score 0); both are now derived consistently and shown together. - ARGUS now always keeps itself updated, and can optionally do the same for every other installed plugin and theme (Settings, on by default) -- uses WordPress's own native update system, nothing custom. - Global Threat Intelligence is now opt-in, not automatic -- a single click on its own page, with an honest, specific description of exactly what's shared (an IP address, a reason code, a confidence score, a country). Previously connected automatically on activation. - New first-run Welcome screen after activation: confirms what's already protecting the site, and surfaces the few real optional choices in one place. - Dashboard: running version now visible in the header; new "IPs Tracked" and "ANIS Protections" metrics. - Full WordPress.org Plugin Directory readiness audit performed against this codebase. Two real compliance issues found and fixed (see above: Global Threat Intelligence's default, and the self-update mechanism, which is excluded from this build entirely -- WordPress.org prohibits a plugin from using any update channel other than its own, even an inert one). This release is still self-distributed, not a WordPress.org submission -- that remains a future step. Verified before publishing: this exact ZIP was installed, activated (14 admin pages loaded clean, zero PHP errors/warnings), and uninstalled (zero leftover database tables or options) in a fresh, disposable WordPress + MySQL environment. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
64 lines
2.6 KiB
Plaintext
64 lines
2.6 KiB
Plaintext
=== ARGUS WordPress Defence ===
|
|
Contributors: argus
|
|
Tags: security, firewall, malware, vulnerability, backup
|
|
Requires at least: 6.0
|
|
Tested up to: 7.0
|
|
Requires PHP: 7.4
|
|
Stable tag: 7.23.0
|
|
License: GPLv2 or later
|
|
License URI: https://www.gnu.org/licenses/gpl-2.0.html
|
|
|
|
Automatic, intelligent WordPress security. A local firewall, malware and file-integrity scanning,
|
|
vulnerability protection, and scheduled backups -- protecting your site with zero manual
|
|
configuration required.
|
|
|
|
== Description ==
|
|
|
|
ARGUS Defence protects your WordPress website automatically:
|
|
|
|
* **Firewall** -- blocks malicious requests (SQL injection, cross-site scripting, and more) before
|
|
they reach your site.
|
|
* **Scanner** -- regularly checks WordPress core, plugins, and themes for suspicious files and
|
|
integrity changes.
|
|
* **Vulnerability Protection** -- automatically checks your installed components against known
|
|
security issues.
|
|
* **Backups** -- scheduled recovery points for your website, stored securely.
|
|
* **Global Threat Intelligence** -- continuously updated, automatically connected, no setup
|
|
required.
|
|
|
|
Everything works out of the box. There is nothing to configure to get protected.
|
|
|
|
== Installation ==
|
|
|
|
1. Upload the plugin to your WordPress site (or install directly from the WordPress admin).
|
|
2. Activate the plugin.
|
|
3. That's it -- ARGUS Defence begins protecting your site automatically.
|
|
|
|
== Frequently Asked Questions ==
|
|
|
|
= Do I need to configure anything? =
|
|
|
|
No. ARGUS Defence is designed to work automatically. Advanced settings are available for
|
|
administrators who want them, but nothing is required to get protected.
|
|
|
|
= Will this slow down my website? =
|
|
|
|
No. ARGUS Defence's firewall and scanning run efficiently in the background, and the optional
|
|
page-cache feature can make your site faster, not slower.
|
|
|
|
= How do I update the plugin? =
|
|
|
|
Like any other WordPress.org plugin: you'll see an update notification right in your WordPress
|
|
dashboard whenever a new version is available, and you can update it in one click from there.
|
|
|
|
== Changelog ==
|
|
|
|
= 7.23.0 =
|
|
* Firewall: broadened local rule coverage (XXE, SSRF, session fixation, Log4Shell/JNDI, scanner-tool
|
|
detection, and deeper SQL injection / XSS / PHP injection signatures).
|
|
* Scanner: fixed a case where a quarantined file's severity label and its content-analysis score
|
|
could disagree; both are now always shown together and derived consistently.
|
|
* Console: the running plugin version is now shown in the admin header.
|
|
* First production release: firewall, scanner, quarantine, vulnerability protection, backups,
|
|
cache & performance, and automatic global threat intelligence.
|