Skip to content

Version 1.9.1

Choose a tag to compare

View all tags
@danbaileyza danbaileyza released this 11 Sep 13:47
· 6 commits to main since this release
v1.9.1
a0467a4

Fixed

  • Recognize complete Wordfence root loaders with checksum-verified firewall targets, and accept both AIOS bootstrap filename spellings with the same content checks.
  • Expand pinned official WP-CLI SHA-512 checksums to releases 2.0.0–2.12.0; report why tool verification failed instead of only listing an unknown file.
  • Recognize the guarded JSON environment generated by WP Hide and plain data files with PHP suffixes. Unverified executable uploads remain review findings, but location alone is not an infection indicator. Redux directories are not blanket-excluded.
  • Report actual WP-Cron event, callback and readable system cron file counts. Existing reports remain compatible with the portal's API categories.
  • Add regression cases for loader tampering, generated environment data, cron coverage and uploads review classification.

Validation: 92 standalone checks pass on PHP 7.4 and 8.5. The companion Laravel change groups cron results from 1.9.0+ under Scheduled tasks. Run a fresh scan after updating. Production Redux file contents have not been verified; unverified executable files remain review items.

Assets 3
Loading