You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
1.3.0 — 2026-08-26
Added
XML-RPC hardening. Optionally keep XML-RPC on but remove its most-abused
methods — pingbacks and system.multicall — along with the X-Pingback
header. A finer alternative to disabling XML-RPC entirely.
Permissions-Policy header. Optionally send a restrictive Permissions-Policy
that disables camera, microphone and geolocation across the whole site.
Custom admin footer. Replace the "Thank you for creating with WordPress"
text at the bottom of the admin with your own (basic HTML and links allowed),
or leave it blank.
Removed
The generic login error message option, now handled by AMW Simple Login.
Notes
All options remain off by default: updating changes nothing until you enable
them.