2.8

What's Changed

• Adds one-time backup codes as a recovery method for Two-Factor Authentication by @sinisterk1d in #215
• Audit trail: search, filters, CSV export by @sinisterk1d in #218
• Set PHP 7.4 as the minimum supported version by @sinisterk1d in #212
• Migrate e2e test suite from Cypress to Playwright by @sinisterk1d in #214
• Release 2.7.5 and gate the path to wordpress.org by @sinisterk1d in #220
• Release 2.8 by @sinisterk1d in #221
• Unblock the 2.8 release by @sinisterk1d in #222

Full Changelog: 2.7.4...2.8

2.7.4

What's Changed

• 2.7.4 by @sinisterk1d in #211
• Add "Disable XML-RPC" hardening option; fix fatal error on non-array API messages by @sinisterk1d in #213

Full Changelog: 2.7.3...2.7.4

2.7.3

What's Changed

• 2.7.3 by @sinisterk1d in #210

New Contributors

• @sinisterk1d made their first contribution in #210

Full Changelog: 2.7.2...2.7.3

2.7.2

What's Changed

• 2.7.2 by @thraxte in #206

Full Changelog: 2.7.1...2.7.2

2.7.1

What's Changed

• Introduce plugin-specific WAF key encryption (SUCURI_PLUG_* scheme) by @thraxte in #204

New Contributors

• @thraxte made their first contribution in #204

Full Changelog: 2.7...2.7.1

2.7

What's Changed

• Fix npm vulnerabilities by @gruiz1-godaddy in #197
• Fixes readiness warnings/errors by @gruiz1-godaddy in #198
• Update how we store API key by @gruiz1-godaddy in #201

Full Changelog: 2.6...2.7

2.6

2.5

• Brand new permissions library.
• Fixes to the WAF communication/clearing cache logic.
• Improvements to our audit logs (clearing cache).

2.5

2.5

• Add support for two-factor authentication.

2.4

2.4

• Update list of files to ignore in integrity check.

2.3

2.3

• Add theme toggle switch.
• Remove an unnecessary section for users without WAF key.