WP Cerber Security

Versión 9.10

• Seguridad Two-factor authentication is now protected against PIN distributed brute-force attacks with per-account rate limiting. Each account can receive at most 5 new 2FA challenges per rolling hour and 10 per rolling 24 hours.
• Seguridad When an account exceeds a 2FA challenge limit, WP Cerber blocks new sign-ins to that account for 24 hours and notifies the account owner of a possible password compromise.
• Seguridad Hostnames obtained through reverse DNS lookups are now treated as untrusted data and escaped every time they are displayed in the admin area.
• Seguridad Fixed a REST API user enumeration bypass. With "Block access to users' data via REST API" enabled, visitors blocked from the standard users route could still get the user list by changing the letter case or adding a trailing backslash or newline.
• Corregido A `rest_route` query parameter passed as an array, such as `?rest_route[]=x`, caused an uncaught `TypeError` (HTTP 500) in `CRB_Request::get_rest_api_path()`. WP Cerber now leaves such requests to WordPress, as on a site without WP Cerber.
• Corregido The "BLOCKED" and "PROHIBITED" user status labels and the red highlighting of usernames were missing on the WordPress "Users" admin page after a change in the WordPress Users table markup. They are displayed again.
• Corregido The GDPR personal data export now reports Activity log read errors. Previously, a database error could make the export state that no activity was logged or end the export early.
• Corregido The GDPR personal data erasure no longer confirms that data was erased when a database error prevents WP Cerber from verifying that Activity log records were removed.
• Mejorado WP Cerber now recognizes the core REST API users routes the same way WordPress dispatches them: regardless of letter case, with trailing slashes and backslashes removed, and with one trailing newline allowed. All requests that were blocked before remain blocked.

Versiones anteriores

• 9.9.5: 4 mejorado, 5 corregido
• 9.9.3: 9 corregido
• 9.9: 3 nuevo, 2 mejorado, 2 corregido