2.7.3
Latest3 new2 improvements2 fixes3 changes
New
- Firewall Learning Mode can list decided words and switch them between allow and block.
- Stop User Enumeration also blocks the core users REST route and author sitemaps (WordPress, Yoast SEO, Rank Math, All in One SEO).
- User Creation Protection (Pro) adds a "Content from Fake Accounts" admin view, highlights related rows, and shows a front banner to editors when fake-account content would be hidden.
Improved
- Limit Login Attempts also counts failed XML-RPC logins.
- Background async processes are forked correctly between Free and Pro builds, to fix (again) a possible fatal error “Call to undefined method ::is_queued” if WooCommerce loads an older async lib (file monitoring, bad plugins, bad themes).
Fixed
- IPv6 validation was too permissive.
- Firewall rules were not always read correctly from the rules data.
Changes
- 22 Oct 2026
- Critical: PHP Version scanner treats a known PHP build older than October 21, 2026 as critical and can re-run silently when that date is detected.
- Critical: UpdraftCentral backdoor check better detects compromised administrator accounts and links to affected users when possible.