GeDefense WP 8.4.0 - Open Core

GeDefense WP 8.4.0 — Open Core

AGPL-3.0 release of the Open Core security suite for WordPress 6.x / PHP 8.1–8.4. Local-first, no CDN dependencies.

Security

• PHP upload-progress hardening: session.upload_progress.enabled = Off is enforced through the Zeus .user.ini manager, verified against the effective web SAPI, surfaced in the security health dashboard and covered by a regression harness. Preventive defense-in-depth for the announced PHP upload-progress RCE class; it does not replace the official PHP security update.
• Login surface hardening: the LoginPager logo mode hides the fallback title text (text-indent) so the visible surface and assistive output announce one brand name only.

Changed

• ThroneGuard lock surface redesigned: branded auth screen using LoginPager tokens (accent, background, logo, title), viewport-fixed centering, safe-area and prefers-reduced-motion support, accessible error state, password reveal and logout.
• LoginPager centering fixed: #login is viewport-centered with translate(-50%, -50%) and no longer depends on body.login flex rules that later stylesheets can override; responsive width and internal scrolling on short viewports.

Release engineering

• Version 8.4.0 across the plugin entrypoint, VIS_VERSION, WAF compiler (COMPILER_VERSION) and module manifest/trust anchor.
• README (EN/DE/RU/ZH), CHANGELOG, Next.md, ARCHITECTURE, code cartography and legacy-document labelling updated.

Installation

1. Download gedefense-wp-8.4.0.zip.
2. WordPress → Plugins → Add New → Upload Plugin.
3. Select the ZIP, install and activate it (installs to wp-content/plugins/gedefense-wp-core).
4. Requirements: WordPress 6.x, PHP 8.1–8.4. The package includes the local GeoIP dataset and all module assets.

SHA-256: 6ac657ed22bf761cfac57151fe147f14ad27c7446d150a590b00790413a1ba6d

Verify with the attached gedefense-wp-8.4.0.zip.sha256:

sha256sum -c gedefense-wp-8.4.0.zip.sha256

Full changelog: CHANGELOG.md