Changelog do Hide My WP Ghost

Correção

• Editing a custom post type that uses the built-in Categories/Tags taxonomy no longer crashes the Block Editor with "Cannot read properties of undefined"
• Block Editor no longer crashes with "Cannot read properties of undefined" when Hide User Enumeration is on; the users REST endpoint is now hidden from anonymous visitors only, so logged-in Editors and Authors can still edit posts and custom post types

Correção

• Cloud Activity Log entries are now sent in the background, so a slow logging server can no longer delay backend requests, including the Block Editor and other REST calls
• Force 2FA Setup no longer redirects custom user roles that can't access their profile to a setup screen they are unable to open
• Settings page navigation menu no longer loses its layout on sites where another plugin or theme restricts the allowed HTML tags; the menu now keeps its own classes and attributes regardless of the site's wp_kses filters

Correção

• WP-CLI commands no longer emit a PHP 8.5 Undefined array key hostname warning

Correção

• Temporary Login page no longer triggers a fatal error when opened for a user that was deleted or expired
• Two-Factor email setup and Magic Login no longer emit PHP warnings when the requested user no longer exists

Correção

• Some sites could show a blank page when source code optimization was enabled; the header/tag find & replace is now fail-safe and never blanks the output on a regex error
• Prefetch/speculation rules cleanup now removes the wp-admin and wp-*.php entries without leaving the rules JSON invalid

Correção

• WPML/Polylang with a custom or renamed REST API path: WPML Advanced Translation Editor and other REST API calls no longer fail with a network error in the admin
• REST API requests made through the ?rest_route= form are no longer mistakenly treated as normal page requests and blocked
• Renamed REST API path: legacy, cached and external clients still calling the default wp-json path are now recognized correctly instead of being 404'd
• Compatibility module for WPML: the Advanced Translation Editor sync routes and WPML/ICL admin-ajax requests are no longer rewritten with the active language prefix

Correção

• Compatibility with WPML and Polylang: static asset URLs (wp-content, wp-includes) no longer get the language prefix prepended (e.g. /en/wp-content/...) when "Change Relative URLs to Absolute URLs" is enabled
• Password-protected pages (built-in WordPress post password) now submit correctly on Nginx and other servers without server-level rewrites when the login URL is customized
• Refreshed knowledge base links across admin notices to point to the new documentation
• Minor bugs and typos

Correção

• Dark Mode popup remained white, and some settings fields were too dark
• Login Page Design now works in Disable mode
• Firewall whitelist IPs and paths now work in disabled mode when the Firewall is activated
• Minor bugs and typos

Correção

• Friendly time display (e.g. "3 hours ago") now renders correctly in all translated languages
• Dropdown and Help icon in the RTL languages

Correção

• GeoMap country circle counts now match Security Threats Log counts for the same 7-day window
• Security Threats counting for the last 7 days on widget now matches the log totals (timezone-aligned day buckets)
• Passkey login spinner not showing due to missing classList calls
• Country codes missing from threats log rows now resolved on-the-fly from GeoIP when cron is not running
• Resolved robots.txt warning when user agents are blocked

Correção

• Sorting and filtering in the Events Log & Security Threats Log
• Rules and Threats filters to work with WP Multisite subpaths structure
• Temporary login user edit link on WP Multisite
• Compatibility with Woocommerce 10.6
• Compatiibility with the Blocksy theme
• Optimize the plugin speed

Correção

• Security Log and Events Log not recording properly
• Optimize user logged in verification
• Don't show the 2FA and Magic Login form when the Safe URL parameter is set
• Prevent logging out when the paths are changed
• Sending the code too often on 2FA Email verification. The code can be resent only every 30 seconds.
• Remove unused JS, CSS and fonts
• Compatiibility with the new WP 6.9.4

Correção

• Small bugs and typos

Correção

• Firewall rules to work with the new WordPress 6.9.2 update

Correção

• Fatal error on log table creation when the plugin is activated
• Safe URL parameter on login form to prevent 2FA from showing when is activated

Correção

• Brute Force compatibility with Elementor Pro on form submit
• Update Google reCaptcha JavaScript to work with Woocommerce Ajax

Correção

• Remove the wp-*.php and admin path from prefetch paths in WP 6.9
• Small bugs and warnings

Correção

• Update check error

Correção

• Function _load_textdomain_just_in_time was called incorrectly

Correção

• File security when the rewrite rules are not loaded correctly
• Prevent Brute Force from updating the warning text without space when switched off
• Prevent PHP warning when IP address unknown in Brute Force IP check
• Load i18n on login page for password-strength-meter messages when the Clean Login option is activated
• Detect if parent theme has caps when child theme is activated
• Dynamic file mapping to load through index.php for better compatibility with all server types

Correção

• Brute Force error in comments when no recaptcha option is selected
• WP Multisite root directory for custom WP directory installation

Correção

• Headers check on Brute Force to get the real IP behind Proxy
• Admin layout issue when other plugins notification is loading in Wp Ghost settings
• Remove newlines from the rewrite rules

Correção

• Brute Force compatibility and bugs
• Include parent theme in the custom theme name list if the child theme is loaded

Correção

• Get the real IP address behind proxy

Correção

• Paths changed in dynamically loaded CSS and JS files
• Prevent redirecting URLs to hidden paths on config rules issue
• Prevent hiding the wp-admin on config rules issue
• Prevent changing the wp-admin on config rules issue

Correção

• Config update issue when saving the whitelist from Level Of Security

Correção

• Prevent changing the login path in posts slug
• Advanced Pack install domain not found error

Correção

• Layout and improved functionality

Correção

• Litespeed cache plugin compatibility and set /cache/ls directory by default
• Whitelist website IP address on REST API disable to be able to be accessed by the installed plugins