Skip to content

v1.2.0

Choose a tag to compare

@alvaromarquezweb alvaromarquezweb released this 21 Aug 10:35
· 12 commits to main since this release
da2780e

[1.2.0] - 2026-08-21

Added

  • Generic login errors: optionally replace the login failure message with a neutral one, so it no longer reveals whether the username or the password was wrong.
  • HSTS header: optionally send Strict-Transport-Security (one year, including subdomains). Only sent over HTTPS; enable only on sites fully served over HTTPS.
  • Option to disable the periodic admin email verification screen.
  • Option to disable remote block patterns, so WordPress stops fetching patterns from the wp.org directory.
  • Auto-empty trash: choose how many days trashed items are kept before being permanently deleted (uses EMPTY_TRASH_DAYS; 0 disables the trash).
  • Delete expired transients: a one-click tool to clear expired transient rows from the options table.
  • All new options are disabled by default.