GPL Really Simple SSL Pro WordPress Plugin V9.4.0

= v9.4.0 =​

• New: Passkey support for Two-Factor Authentication.
• Improvement: More detailed feedback when using CLI commands.
• Improvement: On activation, detect EXTENDIFY_PARTNER_ID constant and run wp rsssl activate_recommended_features.
• Improvement: Standardize RSS onboarding hoster list to brand names.
• Improvement: "Disable user enumeration" now returns 401 Unauthorized (instead of 404 Not Found) for non-authenticated requests to the /wp/v2/users/ endpoint.
• Include SimplyBook in “onboarding” and “other plugins” sections.
• Fix: Validate CIDR ranges before bit-shifting in IP fetcher.
• Fix: Auto-allow Googlebot IPs in Firewall when blocking the United States.
• Fix: Adjust plugin initialization timing to prevent a textdomain warning.

= v9.3.4 =​

• improvement: Added a better handling for Ip subnets cidr in Firewall.
• Fix: Fixed an issue where TOTP codes were not properly validated.
• Fix: Prevent Limit Login Attempts from triggering during WordPress Cron to improve compatibility with other plugins.
• Fix: Fixed an issue where Eventlog was registering a temp block even when the IP was not blocked or whitelisted.
• Fix: Fixed an issue where Limit Login Attempts, temporary blocks were not correctly cleared.

= 9.3.2 =

• Improvement: Added filters to customize Let's Encrypt Wizard behaviour
• Fix: Removed default checkbox behaviour from configuration settings.
• Fix: Fixed an issue where a loop occured when password protected page was created and custom-login enabled.
• Fix: handle multiple tooltip reasons for disabled select fields
• Fix: Preventing double lines to occur in the advanced-headers.php file

= v9.3.1 =
* Fix: In some occasions an error could occur while logging out when the custom login-url was enabled.

= 9.2.0 =

• Improvement: limited the number of header test requests for CSP learning mode
• Improvement: If 404 errors are detected on the site’s homepage, we prevent the 404 blocker from being activated to prevent unwanted lockouts.
• Improvement: Two-Factor Authentication now works with custom login screens.
• Improvement: Updated endpoint version.
• Improvement: disabling file permissions check will now correctly reset the file permissions list.
• Fix: In some situations, header settings were lost after temporarily deactivating the plugin.
• Fix: In some cases the review notice was not properly dismissible.
• Fix: Added nonce check to certificate re-check button.
• New: File change detection. This feature will keep track of suspicious file changes outside of regular updates.

Really Simple SSL Pro v9.1.3

• Improvement: Width Vulnerabilities -> configuration
• Improvement: 2Fa lockout notice
• Improvement: catch use of short init in advanced-headers file
• Improvement: string improvements and translator comments
• Improvement: Bitnami support for rsssl_find_wordpress_base_path()
• Improvement: integrate Site health notifications with Solid Security
• Improvement: Enhanced random password generation in Rename Admin User feature
• Improvement: Always return string in wpconfig_path() function
• Improvement: Removes configuration options for a user in edit user.
• Fix: Remove duplicate site URL.
• Fix: ensure rsssl_sanitize_uri_value() function always returns a string, to prevent errors.
• Fix: multisite users who have enabled roles couldn’t use the 2fa if an other role than theirs has been forced.
• Fix: The ‘Skip Onboarding’ button presented an undefined page after selecting the email method as an option.

Really Simple SSL Pro Release Note version V9.1.2.1
* Improvement: improved error handling

Really Simple SSL Pro Release Note version v9.1.2

• Improvement: improved error handling