WP Cerber Security Pro v9.10 Plugin
WP Cerber Security Pro is a powerful and reliable WordPress security plugin that helps protect your website against spam, malware, and hacker attacks. With its advanced security features and fast, reliable design, WP Cerber Security Pro is the ultimate tool for keeping your website safe and secure.
Core Features of WP Cerber Security Pro Plugin
- Antispam protection: WP Cerber Security Pro helps protect your site against spam comments, registrations, and contact form submissions.
- Malware scanning: The plugin includes a powerful malware scanner that helps identify and remove any malicious code that may be present on your website.
- Hack protection: WP Cerber Security Pro includes a range of security measures designed to prevent hackers from gaining access to your site.
- Advanced security options: The plugin provides a range of advanced security options, such as 2FA authentication, limited login attempts, and IP blocking, to help you further secure your website.
- User-friendly interface: The plugin has a user-friendly interface that makes it easy to set up and manage your website’s security settings.
- Reliable and fast: WP Cerber Security Pro is designed to be fast and reliable, ensuring that your website’s security is always up-to-date and effective.
What’s New (Changelog) in WP Cerber Security Pro v9.10
= 9.10 =
Security: Two-factor authentication is now protected against PIN distributed brute-force attacks with per-account rate limiting. Each account can receive at most 5 new 2FA challenges per rolling hour and 10 per rolling 24 hours.
Security: When an account exceeds a 2FA challenge limit, WP Cerber blocks new sign-ins to that account for 24 hours and notifies the account owner of a possible password compromise.
Security: Hostnames obtained through reverse DNS lookups are now treated as untrusted data and escaped every time they are displayed in the admin area.
Security: Fixed a REST API user enumeration bypass. With "Block access to users' data via REST API" enabled, visitors blocked from the standard users route could still get the user list by changing the letter case or adding a trailing backslash or newline.
Fixed: A `rest_route` query parameter passed as an array, such as `?rest_route[]=x`, caused an uncaught `TypeError` (HTTP 500) in `CRB_Request::get_rest_api_path()`. WP Cerber now leaves such requests to WordPress, as on a site without WP Cerber.
Fixed: The "BLOCKED" and "PROHIBITED" user status labels and the red highlighting of usernames were missing on the WordPress "Users" admin page after a change in the WordPress Users table markup. They are displayed again.
Fixed: The GDPR personal data export now reports Activity log read errors. Previously, a database error could make the export state that no activity was logged or end the export early.
Fixed: The GDPR personal data erasure no longer confirms that data was erased when a database error prevents WP Cerber from verifying that Activity log records were removed.
Improved: WP Cerber now recognizes the core REST API users routes the same way WordPress dispatches them: regardless of letter case, with trailing slashes and backslashes removed, and with one trailing newline allowed. All requests that were blocked before remain blocked.
Similar Plugins