Title: Security Ninja – WordPress Security & Firewall Author: cleverplugins Published: 30 ສິງຫາ 2016 Last modified: 13 ສິງຫາ 2026 --- ຄົ້ນຫາປລັກອິນ ![](https://ps.w.org/security-ninja/assets/banner-772x250.png?rev=3492847) ![](https://ps.w.org/security-ninja/assets/icon-256x256.gif?rev=2312630) # Security Ninja – WordPress Security & Firewall ໂດຍ [cleverplugins](https://profiles.wordpress.org/cleverplugins/) [ດາວໂຫຼດ](https://downloads.wordpress.org/plugin/security-ninja.5.296.zip) * [ລາຍລອຽດ](https://lo.wordpress.org/plugins/security-ninja/#description) * [ການຣີວິວ](https://lo.wordpress.org/plugins/security-ninja/#reviews) * [ການຕິດຕັ້ງ](https://lo.wordpress.org/plugins/security-ninja/#installation) * [ການພັດທະນາ](https://lo.wordpress.org/plugins/security-ninja/#developers) [ການຊ່ວຍເຫຼືອ](https://wordpress.org/support/plugin/security-ninja/) ## ຄຳອະທິບາຍ Security Ninja is a lightweight **WordPress security plugin** that helps protect your site from common attacks and security mistakes – without turning your dashboard into a cockpit. **Web Application Firewall (WAF)** (based on the 8G ruleset) to block common malicious requests, plus 50+ security checks, a full vulnerability scanner, and a core integrity scanner to spot risky settings and unexpected file changes. Upgrade to Pro for Cloud Firewall, malware scanning/cleanup, login brute-force protection and 2FA, export/webhooks, and scheduled scans. This plugin can be downloaded for free without any paid subscription from [the official WordPress repository](https://wordpress.org/plugins/security-ninja/). **Included for free** – **Basic Firewall (8G-based)** – Blocks common malicious requests and bot noise before it becomes a problem. – **50+ Security Tests** – Fast audit of common WordPress security misconfigurations. – **Vulnerability Scanner**– Highlights known issues in plugins/themes so you can patch faster. – **Core Scanner**– Detect modified or unexpected files in WordPress core folders. – **Basic Events Logger** – Logs **firewall events** and **login attempts (successful/failed)**. –** AI Security Advisor (WordPress 7)** – AI-generated audit summaries and guided follow- ups from your scans, using WordPress AI Connectors (you choose the LLM provider). Optional WordPress Abilities let other AI tools on your site read test summaries, attack activity, and your latest saved report. **Pro adds** – **Cloud Firewall & advanced WAF** – Block 600+ million known bad IPs, country blocking, IP management, and stronger firewall controls (free includes the 8G-based firewall). – **Advanced Malware Scanner** – Detect and clean malicious code and suspicious files. – **Login protection & 2FA** – Limit failed logins, rename the login URL, and add two-factor authentication. – **One-click Fixes** – Harden WordPress from the Fixes page (XML-RPC, file editor, headers, and more). – **Full Events Logger** – Export logs, scheduled email reports, webhooks (e.g. Slack/Discord), and deeper alerting. – **Scheduled scans & reporting** – Automated security scans and reports. **Key Features** Security Ninja is a lightweight **WordPress firewall plugin** and security toolkit designed to help you find misconfigurations, block common attacks, and stay ahead of known vulnerabilities – without slowing your site down. **Comprehensive WordPress Security Testing** Security Ninja performs 50+ advanced security tests to identify issues before attackers exploit them. This includes: * **Login and password checks** – Audits weak passwords and related settings (Pro adds failed-login limits, rename login, and 2FA). * **File integrity monitoring** – Detects unauthorized changes to WordPress core files, themes, and plugins. * **Database security checks** – Identifies weak database permissions and potential SQL injection threats. * **User role audits** – Ensures no unauthorized administrator accounts exist. * **Security misconfiguration scans** – Identifies and fixes weak settings that could compromise security. **Enhanced Vulnerability Scanner** Proactively alerts you to known vulnerabilities in plugins and themes so you can patch before they are exploited. **Core Scanner – WordPress Installation Integrity** Ensures your WordPress installation remains untampered and free of unauthorized files. * **Full core file integrity check** – Scans every file in core WordPress folders for modifications. * **Unknown file detection** – Flags extra or unexpected files in core directories. * **Built-in file viewer** – Review flagged files in the dashboard. * **Restore or delete** – Restore altered core files with one click, or remove suspicious unknowns. **Advanced Malware Scanner – Detect & Remove Malware Instantly (PRO)** Security Ninja includes a high-performance malware scanner that automatically checks your WordPress core, plugins and themes for: * **Malicious scripts and backdoors** – Identifies hidden malware and harmful injections. * **Trojan and virus detection** – Scans for suspicious PHP and JavaScript entries. * **One-click malware removal** – Instantly quarantine and delete infected files. **WordPress Firewall & Real-Time Threat Protection** Security Ninja includes a **basic firewall for free** (8G-based) to block common malicious requests. Upgrade to Pro for more advanced WAF controls. * **Basic protection (Free)** – 8G rules block many common exploit patterns and abusive requests. * **Advanced protection (Pro)** – Cloud Firewall, country blocking, IP lists, and additional intelligence/automation. * **Login brute-force protection (Pro)** – Limit failed logins and harden the login flow (not included in the free firewall). **Automatic service whitelisting (Pro)** Cloud Firewall (Pro) whitelists known third-party service IPs so remote maintenance, optimization, and monitoring tools are less likely to be blocked. No manual IP entry is required for these built-in lists. * **WP Compress** – image optimization and compression service * **MonSpark** – uptime and website monitoring * **Modular DS** – remote site management * **WPMU DEV** – hosting and management platform * **Divi Dash** – Elegant Themes site management * **Fastpixel** – optimization service * **Broken Link Checker** – link checking service * **GetTerms** – cookie consent scanner (getterms.io) **Optional one-click whitelists** (Firewall IP Management; enable per service): –** ManageWP** – enabled by default on new installs – **WP Rocket** – caching and optimization–** UptimeRobot** – uptime monitoring – **Uptimia** – uptime monitoring You can still add your own IPs and CIDR ranges manually on the IP Management screen. **Login Security & Two-Factor Authentication (2FA) (PRO)** Your WordPress login page is a primary target for hackers. Security Ninja enhances login security with: * **Two-Factor Authentication (2FA)** – Requires additional verification for safer logins. * **Brute-force attack protection** – Limits failed login attempts to block unauthorized access. * **Rename login** – Getting a lot of requests to your login form? Hide it for spammers. **One-Click Security Fixes & WordPress Hardening (PRO)** Manually fixing security issues is time-consuming. Security Ninja provides one-click hardening to: * **Disable XML-RPC** – Blocks common DDoS attacks and brute-force exploits. * **Restrict file editing** – Prevents unauthorized theme and plugin modifications. * **Hide PHP error messages** – Stops hackers from exploiting sensitive error details. And many more fixes to harden your WordPress security! **Events Logger / Activity Tracking** Security Ninja includes a **basic events logger for free** so you can see what’s happening on your site. * **Free:** firewall events and login attempts (successful/failed) in the dashboard. * **Pro:** export security logs, scheduled email reports, webhooks (e.g. Slack/ Discord), and deeper alerting. **Automated Security Scans & Reports (PRO)** Security Ninja performs scheduled security scans and sends reports directly to your inbox. * Set up daily, weekly, or monthly security scans. * Receive email alerts about vulnerabilities and malware infections. * Analyze detailed reports to keep your website secure. **Block Spam & Malicious Bots Instantly (PRO)** Hackers and spammers use bots to exploit WordPress websites. Security Ninja prevents: * **Fake registrations and spam comments** – Stops bots from even getting to your site. * **Malicious bot attacks** – Blocks scripts attempting to hack your site. * **Unwanted traffic** – Reduces server load by preventing unnecessary bot access. **AI Security Advisor – from scan results to clear next steps (WordPress 7)** Understanding a security scan shouldn’t feel like homework. **AI Security Advisor** uses your connected LLM (via **WordPress 7 AI Connectors**) to turn Security Ninja findings into a readable audit: executive summary, prioritized improvements, and suggested follow-up prompts-not an open-ended chatbot. Reports draw on Security Tests, the Vulnerability Scanner, Core Scanner, recent firewall/login events, and on Pro sites Malware Scanner results when available. Saved reports stay on your site until you remove them. **What you need** AI Security Advisor is included in the free plugin but requires** WordPress 7**. You connect the AI/LLM provider yourself under **Settings Connectors** in WordPress; Security Ninja does not host or supply API keys. **WordPress Abilities (optional)** On WordPress 7, Security Ninja can register read-only **Abilities** so other AI tools on the same site can fetch a test summary, 7-day attack activity, or your latest saved audit-useful if you use multiple AI integrations. Report generation and follow-ups on the Security Advisor page work independently of this. **Privacy, in everyday language** Only non-identifying security context (test results, scan status, event counts-not personal data) is sent to your chosen AI provider to build a report. If you are not on WordPress 7 yet, you will see a notice on the AI Security Advisor screen; the rest of Security Ninja continues to work as usual. **Join thousands of satisfied users who trust Security Ninja to keep their websites safe. Start protecting your online presence today.** ### Extensions **MainWP** – Manage Security Ninja across many sites from one MainWP Dashboard. Security Ninja on each child site includes MainWP integration built in (no extra plugin on child sites). * **Free addon** – [Security Ninja for MainWP](https://wordpress.org/plugins/security-ninja-for-mainwp/)( WordPress.org): view test results and vulnerabilities per site, trigger remote security scans, and sync fresh results. Works with child sites on free or Pro Security Ninja; data shown matches what each site’s installed version provides. * **Premium addon** – Adds a combined events log across all connected sites, search/ filter for security events, and remote white-label control on Pro child sites. Requires Security Ninja Pro on child sites for log and white-label features. Available from your [WP Security Ninja account](https://wpsecurityninja.com/account/); see [MainWP integration](https://wpsecurityninja.com/mainwp/) for details. https://wordpress.org/plugins/security-ninja-for-mainwp/ > **Security Ninja Pro** adds Cloud Firewall (600+ million known bad IPs), country > blocking, advanced WAF controls, Malware Scanner, login protection (failed-login > limits, rename login, 2FA), One-click Fixes, full Events Logger (export, webhooks, > scheduled reports), and scheduled scans. The free plugin already includes the > 8G firewall, 50+ security tests, Vulnerability Scanner, Core Scanner, basic Events > Logger, and AI Security Advisor on WordPress 7. An all-in-one security solution for any site. With premium support and continuous updates Security Ninja **Pro** is a perfect tool to keep your site safe. [See what the PRO version offers](https://wpsecurityninja.com/?utm_source=wordpressorg&utm_medium=content&utm_campaign=readme&utm_content=see-what-pro-offers) Automatically block **600+ million bad IPs** with one click! [Security Ninja Pro Firewall](https://wpsecurityninja.com/?utm_source=wordpressorg&utm_medium=content&utm_campaign=readme&utm_content=cloud-firewall) will help you stay one step ahead of bad guys by using the collective know-how of millions of attacked sites, and ban bad guys before they even open your site. > Read more about Pro features on the [Security Ninja website](https://wpsecurityninja.com/?utm_source=wordpressorg&utm_medium=content&utm_campaign=readme&utm_content=readmoreaboutpro) **What others say about the plugin** * [Kinsta](https://kinsta.com/blog/wordpress-security-plugins/) * [Hostinger](https://www.hostinger.com/tutorials/wordpress-security-plugins) * [Cloudways](https://www.cloudways.com/blog/best-wordpress-security-plugins/) * [AppSumo](https://appsumo.com/products/wp-security-ninja/) * [Freemius](https://freemius.com/blog/security-best-practices-developing-plugins-themes/) * [WP Mayor: “Easy-to-Use WordPress Security Plugin”](https://wpmayor.com/security-ninja-review-wordpress-security-plugin/) * [WPMarmite](https://wpmarmite.com/en/compare/best-wordpress-security-plugins/security-ninja/) * [WPExplorer](https://www.wpexplorer.com/) * [WPLift](https://wplift.com/) * WP Loop * [InfluenceWP](https://influencewp.com/) * [G2](https://www.g2.com/products/wp-security-ninja/reviews) **Tests** * The tests include: * brute-force attack on user accounts to test password strength * numerous installation parameters tests * file permissions * version hiding* 0-day exploits tests * debug and auto-update modes tests * database configuration tests * Apache and PHP related tests * WP options tests * security headers and related server response checks * The full suite covers 50+ checks across WordPress core/plugins/themes, user accounts and passwords, file permissions, debug modes, database configuration, PHP settings, security headers, and more. Open Security Ninja in your dashboard for the complete list with explanations and fix guidance. **License info** * [jQuery Cookie Plugin, Copyright 2013 Klaus Hartl](https://github.com/carhartl/jquery-cookie) * The vulnerability scanner uses data from the [National Vulnerability Database – NVD](https://nvd.nist.gov/) * This product includes IP2Location LITE data available from [https://lite.ip2location.com](https://lite.ip2location.com). * This plugin uses the [Persist Admin notice Dismissals](https://github.com/collizo4sky/persist-admin-notices-dismissal) by Collins Agbonghama @collizo4sky * Firewall rules are based on 8G Firewall by Jeff Starr – https://perishablepress. com/8g-blacklist/ #### How can I report security bugs? You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. [Report a security vulnerability.](https://patchstack.com/database/vdp/security-ninja) ## ການຕິດຕັ້ງ #### Installing from WordPress 1. Open WordPress admin, go to Plugins, click Add New 2. Enter “Security Ninja” in search and hit Enter 3. Plugin will show up as the first on the list, click “Install Now” 4. Activate & go to Tools – Security Ninja to make your site more secure #### Installing Manually 1. Download the plugin. 2. Unzip it and upload to _wp-content/plugin/_ 3. Open WordPress admin – Plugins and click “Activate” next to the plugin 4. Activate & go to Security Ninja to make your site more secure ## ຄຳຖາມທີ່ພົບເລື້ອຍ ### Does the free version include a WordPress firewall (WAF)? Yes. Security Ninja includes a **basic Web Application Firewall (WAF) for free**, based on the 8G ruleset. It blocks common malicious requests and reduces bot noise. ### Does Security Ninja protect against brute force attacks and login attempts? **Pro** includes login brute-force protection (failed-login limits), rename login, and 2FA. The **free** version records login attempts (successful/failed) in the Events Logger and runs security tests that check password strength-it does not block repeated failed logins on its own. ### Does Security Ninja include a WordPress vulnerability scanner? Yes. The **Vulnerability Scanner is fully available in the free version** and helps you identify known vulnerabilities in plugins/themes so you can patch quickly. ### Who is this plugin for? Site owners, agencies, and developers who want a lightweight WordPress security plugin to harden sites and catch problems early. ### Will this plugin slow down my site? In normal operation, no. Some scans can temporarily use more resources while they run. ### What changes will Security Ninja make to my site? Security Ninja runs checks and shows recommendations. Some Pro features can add active protection layers (firewall/WAF controls, login protection), which you can configure. ### What if I encounter issues with the plugin? While we strive for universal compatibility, if you face any issues, our support team is ready to assist. Visit our [support forum](https://wordpress.org/support/plugin/security-ninja) to open a new thread, and we’ll help you as soon as possible. ## ການຣີວິວ ![](https://secure.gravatar.com/avatar/ff28b16a8380c2c1752b44c8bccb3111899ad1abdbb498606e24305a8959bbac? s=60&d=retro&r=g) ### 󠀁[Works well as a base security plugin](https://wordpress.org/support/topic/works-well-as-a-base-security-plugin/)󠁿 [bubdev](https://profiles.wordpress.org/bubdev/) 2 ສິງຫາ 2026 WP Security Ninja stands out with a balanced and clear mix of features. It works well as an all-in-one solution but remains simple enough to combine with tools like Patchstack without feeling overwhelming. I haven’t seen that with any other plugin. ![](https://secure.gravatar.com/avatar/8155bdab580f5c0388f30a55c3aba08fb29f24e1f379c5a83402735bd7c5cc48? s=60&d=retro&r=g) ### 󠀁[Amazingly user-friendly security plugin](https://wordpress.org/support/topic/amazingly-user-friendly-security-plugin/)󠁿 [joshuarbeal](https://profiles.wordpress.org/joshuarbeal/) 21 ມັງກອນ 2026 Thank you, Security Ninja! Your plugin is easy to use, provides clear reports of activity, and includes built-in tools that make security a lightweight task. I look forward to incorporating this into future websites. ![](https://secure.gravatar.com/avatar/5724f2d2f357ac934836583c6ab4e0ec52fb4228ea07bac5c76d14d43322c3d5? s=60&d=retro&r=g) ### 󠀁[Devenu payant](https://wordpress.org/support/topic/devenu-payant/)󠁿 [nadeistos](https://profiles.wordpress.org/nadeistos/) 26 ສິງຫາ 2025 1 ການຕອບກັບ Pas le choix que de payer… et très cher pour ce que ca apporte ! tant pis, ca sera sans moi ![](https://secure.gravatar.com/avatar/eeb7ea6f439bfc9fc4ad60178cbb342b23687095d4d79faa400c775ef85d7d1d? s=60&d=retro&r=g) ### 󠀁[A good plugin to check your security settings with](https://wordpress.org/support/topic/no-free-version-anymore/)󠁿 [josflachs](https://profiles.wordpress.org/josflachs/) 29 ກໍລະກົດ 2025 I like security ninja, and use it on all my sites to check security. It’s really great! The nice thing about this plugin is that it gives you a report of all security settings that need to be improved, and (this is where it stands out) gives you a detailed explanation how to do that.I rate it one star because of the irritating nag screens. ![](https://secure.gravatar.com/avatar/075ac5f9288dcc22b6bbf5058a062225573fe524cde7be8cc6953bcd97d88fee? s=60&d=retro&r=g) ### 󠀁[Force you to go through licensing for freeware update](https://wordpress.org/support/topic/force-you-to-buy-a-license-for-freeware-upgrade/)󠁿 [traqbar](https://profiles.wordpress.org/traqbar/) 30 ພຶດສະພາ 2025 1 ການຕອບກັບ I have been using it for a while to occasionally check out security. But then the latest update is forcing you to bgo through a licensing system. Totally not what is expected with Wordpress plugins – it is expected you have a choice to upgrade to premium through an external website. Now they interrupt the plugin updating system. It has already been annoying with the licensing system they use, but just about bearable. Now it is too far down the plughole and will be removed, it is hyper-aggressive and very uncomfortable to have around. ![](https://secure.gravatar.com/avatar/d5d85d79f79baba4f5b9a619c51000a67c90c4a228473a9b3d30773859ec200e? s=60&d=retro&r=g) ### 󠀁[Free version is useless](https://wordpress.org/support/topic/free-version-is-useless-97/)󠁿 [Skylabb](https://profiles.wordpress.org/skylabb/) 29 ສິງຫາ 2024 4 ການຕອບກັບ The only thing you can run is “Test your website security” which tells you where the vulnerabilities are. My site is hacked and want to find where the malware is, [ ອ່ານການຣີວິວທັງໝົດ 100 ລາຍການ ](https://wordpress.org/support/plugin/security-ninja/reviews/) ## ຜູ້ຮ່ວມພັດທະນາ ແລະ ຜູ້ພັດທະນາ “Security Ninja – WordPress Security & Firewall” ແມ່ນຊອຟແວໂອເພັນຊອດ (Open Source). ບຸກຄົນຕໍ່ໄປນີ້ໄດ້ມີສ່ວນຮ່ວມໃນການພັດທະນາປລັກອິນນີ້. ຜູ້ຮ່ວມພັດທະນາ * [ cleverplugins ](https://profiles.wordpress.org/cleverplugins/) * [ Lars Koudal ](https://profiles.wordpress.org/lkoudal/) * [ Freemius ](https://profiles.wordpress.org/freemius/) “Security Ninja – WordPress Security & Firewall” ໄດ້ຖືກແປເປັນ 9 ພາສາທ້ອງຖິ່ນ. ຂໍ ຂອບໃຈ [ທີມງານຜູ້ແປ](https://translate.wordpress.org/projects/wp-plugins/security-ninja/contributors) ສຳລັບການປະກອບສ່ວນຂອງເຂົາເຈົ້າ. [ແປ “Security Ninja – WordPress Security & Firewall” ເປັນພາສາຂອງເຈົ້າ.](https://translate.wordpress.org/projects/wp-plugins/security-ninja) ### ສົນໃຈຮ່ວມພັດທະນາບໍ່? [ເບິ່ງລະຫັດ](https://plugins.trac.wordpress.org/browser/security-ninja/), ກວດເບິ່ງ [ຄັງເກັບ SVN](https://plugins.svn.wordpress.org/security-ninja/), ຫຼື ຕິດຕາມ [ບັນທຶກການພັດທະນາ](https://plugins.trac.wordpress.org/log/security-ninja/) ຜ່ານ [RSS](https://plugins.trac.wordpress.org/log/security-ninja/?limit=100&mode=stop_on_copy&format=rss). ## ບັນທຶກການປ່ຽນແປງ #### 5.296 * 2026-08-06 * FIX: After activating the plugin, redirect to the main Security Ninja page instead of the setup wizard so Freemius license entry is not skipped. Wizard opens after license activation when setup is still incomplete. #### 5.295 * 2026-08-03 * FIX: AI Security Advisor – Scheduled Core Scanner (and other background scans) no longer fatal with “Wf_Sn_Ai_Advisor_Reevaluate_Notice class not found” during WP-Cron, which could abort the rest of the cron run. Thank you Michael. * FIX: Malware Scanner – A failed or incomplete AJAX scan no longer shows as clean(“ No suspicious files found”). Failed steps stop the chain, mark the run incomplete, and show a clear warning instead of a false clean banner. Thank you Haseeb. #### 5.294 * 2026-08-02 * FIX: Vulnerability Scanner – Local vulnerability database files are stored compressed so host malware scanners no longer false-positive on known-issue descriptions( e.g. wp-config). Thank you Lee. * FIX: Compatibility – Imposter-prefixed vendor autoload no longer claims unprefixed chillerlan namespaces, fixing a fatal when LatePoint (and similar plugins) generate booking QR codes. Thank you Daniel. * FIX: Core Scanner – Scheduled (cron) scans no longer fail with “Insufficient permissions”. Manual scans were fine; background runs now complete as expected. Thank you Mirco. * IMPROVED: Cloud Firewall – Faster visitor checks with less DNS and disk work on each page load. * IMPROVED: Vulnerability Scanner – Lighter scheduled vulnerability list updates with lower memory use. * FIX: AI Security Advisor – Prevent a critical error on Overview when WordPress AI Client connector checks fail (e.g. TypeError from getModelMetadataMap). Admin stays usable; thank you Tyson. * FIX: AI Security Advisor – WordPress Abilities register on plugin load so REST and other AI tools can discover them reliably. * FIX: AI Security Advisor – Abilities load their data when invoked outside the Advisor screen (no fatal on REST/MCP calls). * IMPROVED: AI Security Advisor – WordPress Abilities exposure is on by default for new installs (can be turned off in AI settings). * FIX: Vulnerability Scanner – Admin menu badge and other admin hot paths no longer load the full vulnerability database on every wp-admin request (could time out/ 502 on slower hosts). Counts are served from cache; scans run in the background via WP-Cron. Thank you Christopher. * FIX: Vulnerability Scanner – Opening Security Ninja no longer sync-downloads the vulnerability database when files are missing; updates are scheduled in the background. Pending scans no longer show a false “no vulnerabilities” message. * IMPROVED: Vulnerability Scanner – Plugin/theme and vulnerability-database updates keep the last known results until the background rescan finishes (no empty badge gap). * IMPROVED: Cloud Firewall – Logged-in admins skip expensive ban checks in wp-admin and admin-ajax; local banned-IP list is cached per request. * IMPROVED: sn-global.js loads only on Security Ninja admin pages; AI Security Advisor class files load on demand instead of every request. * IMPROVED: Cloud Firewall (Pro) – Added GetTerms cookie scanner IP (45.55.125.144) to the built-in automatic whitelist (always on; no checkbox required). Thank you Jamie. * FIX: Cloud Firewall (Pro) – “Only block these countries from login functionality” now works when “Prevent Banned IPs from Accessing the Site” is ON. Previously, country login-only could still full-site block via the visitor check path. Thank you Jamie. #### 5.293 * 2026-07-22 * NEW: File Viewer – Safely preview common images (PNG, JPG, JPEG, GIF, WebP, ICO) from Core and Malware Scanner results. SVG is not supported. Images are verified before display and shown only in the admin viewer (they are not executed). * FIX: File Viewer – Extensionless and rotated log files such as error_log and error_log.1 open more reliably, including case-insensitive name matching. * IMPROVED: File Viewer – Very large text/log files show a truncated preview instead of failing when over the size limit. * IMPROVED: Core Scanner – The View File button only appears when the file can actually be opened in the viewer. * IMPROVED: Security Tests – The unused-themes check no longer treats keeping an extra default WordPress (Twenty*) theme as required. Any inactive theme can be flagged for removal, matching the auto-fixer behavior. Thank you for the feedback. * FIX: Fixes – Disable Username Enumeration no longer blocks URLs with parameters like book_author= (e.g. store search). It now matches only the WordPress author = parameter, and skips the block for logged-in users. #### 5.292 * 2026-07-15 * IMPROVED: Translations – Full POT refresh and locale sync. * IMPROVED: Translations – 2FA email and login strings covered in language packs( Spanish included). * IMPROVED: White Label (Pro) – HTML emails use your plugin icon (when set) in branding. * FIX: 2FA (Pro) – Login “Back to site” link uses the correct text domain so it can be translated. * IMPROVED: 2FA (Pro) – Custom intro and enter-code texts from Login Protection now appear on the 2FA login screen. * IMPROVED: 2FA (Pro) – Email verification codes now use the same shared email template as other Security Ninja emails. * FIX: 2FA (Pro) – Email “Time:” label is properly registered for translation. * NEW: Prettier interface for confirmations and overlays across free and Pro — replaces browser confirm/alert on Tools, scanners, Firewall, Events, AI Advisor, 2FA, and more. Escape closes, backdrop cancels, Enter confirms. * NEW: Optional notes/labels on manual IP whitelist and blacklist entries (IP Management), including CIDR ranges. Notes are limited to 150 characters and stored separately so existing installs and list matching stay compatible. * IMPROVED: Settings import/export and MainWP sync include IP notes when present. * FIX: AI Security Advisor – Omit temperature from WordPress AI connector requests so providers that reject sampling parameters (e.g. newer Claude models) work reliably. Thank you Tyson. * IMPROVED: Update Freemius SDK. * IMPROVED: readme.txt – Shortened short description, description, and changelog to meet WordPress.org length limits. * FIX: Cloud Firewall (Pro) – Avoid PHP warning when REMOTE_ADDR is missing during cron blocklist sync. Thank you Tom. #### 5.291 * 2026-07-06 * NEW: Overview tab – AI Security Advisor card, next best actions, what changed since your last AI review, and quick action links to key modules. * NEW: Security Advisor – Suggested next steps and “what changed since last report” panels use scan snapshots without an extra AI call. * FIX: AI Security Advisor – Database upgrade on update adds the snapshot column to existing AI report tables so comparisons work on upgraded sites. * FIX: 2FA (Pro) – Email code verification works when you press Verify or Enter. * IMPROVED: 2FA (Pro) – Login verification updates apply immediately after plugin updates. * IMPROVED: 2FA (Pro) – Administrator is pre-selected under Required Roles when 2FA is not yet enabled; clearer grace period help for required roles. * FIX: AI Security Advisor – Your selected AI connector applies when you generate a report. * IMPROVED: AI Security Advisor – Model selection follows WordPress AI Client settings. * FIX: Setup wizard – Opens automatically on first install only. * IMPROVED: Cloud Firewall (Pro) – Added more WP Compress service IPs to the built- in automatic whitelist (always on; no checkbox required). * FIX: Cloud Firewall – Filter Suspicious Queries no longer false-positives on s2Member loader URLs. * NEW: Cloud Firewall (Pro) – MonSpark uptime monitoring IPs are included in the built-in automatic whitelist (always on; no checkbox required). Thank you Heath. * IMPROVED: Core Scanner – Detects unexpected files in the WordPress root and hidden dotfiles in wp-admin and wp-includes. * NEW: Malware Scanner (Pro) – Flags suspicious plugin and theme folder structure when wordpress.org checksums are unavailable (review recommended, separate from malware signatures). * IMPROVED: Malware Scanner (Pro) – Clearer integrity messaging; structural findings included in issue counts, whitelist, scheduled reports, and AI advisor context. * IMPROVED: Core Scanner – OS metadata files (e.g. .DS_Store) are excluded from scan results. * IMPROVED: Core Scanner – Severity levels (critical, warning, notice) with guidance for phpinfo and dev-tool files; table-based results UI. * IMPROVED: Core Scanner – Live scan results without page reload; summary stats; Overview Core Integrity widget. * IMPROVED: White Label (Pro) – Security Advisor and Overview use your white label plugin name in the UI and AI reports. Thank you Davina. * IMPROVED: Visitor Log (Pro) – Cleaner Refresh button on the visitor log page. * IMPROVED: Core Scanner – Summary strip with scan context, status banner, and last-scan metadata; delete or restore individual rows without a full rescan. * IMPROVED: Core Scanner – Findings action buttons match Malware Scanner styling( View File, Diff, Restore, Delete). * IMPROVED: Malware Scanner (Pro) – Issue counter on the Malware tab when suspicious files are found. * IMPROVED: Malware Scanner (Pro) – Summary strip with last-scan context, status banner, and Whitelist all; streamlined results header. * IMPROVED: Malware Scanner (Pro) – Findings use the same table layout as Core Scanner (file, severity, guidance, actions) with location group headers. * IMPROVED: Core Scanner and Malware Scanner – Cleaner findings list layout. #### 5.290 * 2026-06-30 * NEW: 2FA (Pro) – Optional mode: enable 2FA without requiring any role; leave all required roles unchecked for opt-in only (with an admin notice when saved). * NEW: 2FA (Pro) – Users can enable 2FA from their profile (authenticator app or email, when allowed) even if their role is not required. * NEW: 2FA (Pro) – Admins can allow authenticator app and/or email; users choose their method at login when both are enabled (preference is remembered). * IMPROVED: 2FA (Pro) – Required roles can be fully unchecked and stay saved (previously Administrator was forced back on). * IMPROVED: 2FA (Pro) – Grace period “Skip for now” applies only to role-required users who have not voluntarily enrolled. * IMPROVED: 2FA (Pro) – Grace period can be set to 0 days to enforce setup immediately. * IMPROVED: Wizard – CSS on installation. … Entire changelog can be seen here: [https://wpsecurityninja.com/changelog/](https://wpsecurityninja.com/changelog/) ## ຂໍ້ມູນກຳກັບ (Meta) * ເວີຊັນ **5.296** * ອັບເດດຫຼ້າສຸດເມື່ອ **16 ຊົ່ວໂມງ ທີ່ຜ່ານມາ** ທີ່ຜ່ານມາ * ການຕິດຕັ້ງທີ່ໃຊ້ງານຢູ່ **7,000+** * ເວີຊັນ WordPress ** 4.7 ຫຼື ສູງກວ່າ ** * ທົດສອບເຖິງເວີຊັນ **7.0.4** * ເວີຊັນ PHP ** 7.4 ຫຼື ສູງກວ່າ ** * ພາສາ * [Bulgarian](https://bg.wordpress.org/plugins/security-ninja/), [English (US)](https://wordpress.org/plugins/security-ninja/), [German](https://de.wordpress.org/plugins/security-ninja/), [Italian](https://it.wordpress.org/plugins/security-ninja/), [Korean](https://ko.wordpress.org/plugins/security-ninja/), [Spanish (Colombia)](https://es-co.wordpress.org/plugins/security-ninja/), [Spanish (Ecuador)](https://es-ec.wordpress.org/plugins/security-ninja/), [Spanish (Spain)](https://es.wordpress.org/plugins/security-ninja/), [Spanish (Venezuela)](https://ve.wordpress.org/plugins/security-ninja/), ແລະ [Vietnamese](https://vi.wordpress.org/plugins/security-ninja/). * [ແປເປັນພາສາຂອງເຈົ້າ](https://translate.wordpress.org/projects/wp-plugins/security-ninja) * ແທັກ * [firewall](https://lo.wordpress.org/plugins/tags/firewall/)[malware](https://lo.wordpress.org/plugins/tags/malware/) [security](https://lo.wordpress.org/plugins/tags/security/)[vulnerability](https://lo.wordpress.org/plugins/tags/vulnerability/) [WAF](https://lo.wordpress.org/plugins/tags/waf/) * [ມຸມມອງຂັ້ນສູງ](https://lo.wordpress.org/plugins/security-ninja/advanced/) ## ການໃຫ້ຄະແນນ 4.7 ຈາກທັງໝົດ 5 ດາວ. * [ ການວິຈານ 5 ດາວ ຈຳນວນ 90 ລາຍການ ](https://wordpress.org/support/plugin/security-ninja/reviews/?filter=5) * [ ການວິຈານ 4 ດາວ ຈຳນວນ 1 ລາຍການ ](https://wordpress.org/support/plugin/security-ninja/reviews/?filter=4) * [ ການວິຈານ 3 ດາວ ຈຳນວນ 0 ລາຍການ ](https://wordpress.org/support/plugin/security-ninja/reviews/?filter=3) * [ ການວິຈານ 2 ດາວ ຈຳນວນ 2 ລາຍການ ](https://wordpress.org/support/plugin/security-ninja/reviews/?filter=2) * [ ການວິຈານ 1 ດາວ ຈຳນວນ 7 ລາຍການ ](https://wordpress.org/support/plugin/security-ninja/reviews/?filter=1) [ການທົບທວນຂອງທ່ານ](https://wordpress.org/support/plugin/security-ninja/reviews/#new-post) [ເບິ່ງທັງໝົດ ການຣີວິວ](https://wordpress.org/support/plugin/security-ninja/reviews/) ## ຜູ້ຮ່ວມພັດທະນາ * [ cleverplugins ](https://profiles.wordpress.org/cleverplugins/) * [ Lars Koudal ](https://profiles.wordpress.org/lkoudal/) * [ Freemius ](https://profiles.wordpress.org/freemius/) ## ການຊ່ວຍເຫຼືອ ມີຄຳຖາມ ຫຼື ຕ້ອງການຄວາມຊ່ວຍເຫຼືອບໍ່? [ເບິ່ງຟໍຣັມການຊ່ວຍເຫຼືອ](https://wordpress.org/support/plugin/security-ninja/) ## ບໍລິຈາກ ເຈົ້າຕ້ອງການສະໜັບສະໜູນການພັດທະນາຂອງປລັກອິນນີ້ບໍ່? [ ບໍລິຈາກໃຫ້ປລັກອິນນີ້ ](https://wpsecurityninja.com/)