Every recorded version, newest first, with what changed in each one.
Latest 6.4.0· Oct 27, 20267 versionsSince Aug 2026
2026 · 7 versions
6.4.0
Latest
11 improvements10 fixes
Improved
Update malware signatures
Improve Hub experience
Sanitize dangerouslySetInnerHTML content using DOMPurify with allowed tags and attributes
Ensure session locking does not bypass idle-timeout validation
Improvements to Audit Logging in both API and plugin
Add an option to synchronize plugin configs with the Hub
Improve page skeleton loader
Update Hub Connector submodule
Banning location improvements
Activity Log improvements
Style improvements on Setup Wizard page
Fixed
Warnings on Defender WP CLI
Schedule Scan and Reporting feature not working on multisite
XML-RPC showing as forbidden
Fix an error due to failure in downloading the MaxMind DB
Many requests from "Defender Self Ping"
Pro is missing from Defender Card title in Settings > Other Settings page
Info tooltips don't open from the keyboard
Apostrophe appears as wrong HTML characters in strong password custom message
Docs button does not navigate to the relevant documentation section
Custom app title and Custom authentication emails toggles don't save changes
6.3.0
14 improvements9 fixes
Improved
Update malware signatures
Make Scan settings uneditable while scanning is in progress
Upgrade node packages
Display country name tooltip on country flag hover in Firewall Logs
Reduce the plugin archive size by removing legacy code in some files
Translation improvements
Display scan details of issue with a suspicious code with automatic scrolling
Update support and product roadmap links
DOM improvements when Pwned/Strong passwords are enabled
Style improvements on Issues page
Scan progress bar improvements
Placeholder copy for Files, folders and file types field
Show count of lockouts in the notice within Malicious Bot detector
Improve config applying message
Fixed
Unlock Pro features on free plan for sites hosted by WPMU DEV
Passing null to parameter #1 on class-malicious-bot.php
Audit logs are causing an error when updating menu items
Defender blocking entire America if Armenia is blocked in geoblocking
Messaging missing for the config file imports
Defender > Strong passwords option breaks the WP Application Password
Dropdown scroll issue in smaller screens
Overlapping modals on Dashboard page
Minor code improvements
6.2.4
3 fixes
Fixed
Username does not appear in some Audit Log events
Audit module stores un-interpolated {{user_login}} in some logs
Minor improvements in vulnerability detection
6.2.3
3 improvements5 fixes
Improved
Improved Audit Log UI across Dashboard and Audit Log pages
Added a "Save your API keys to load" preview state for Bot Protection CAPTCHA settings
Updated the event type label in the detailed Audit Log view from 'Content' to 'Context'
Fixed
Resolved an issue where audit log events from multi-event requests were not synchronizing to the Hub
Fixed a UI layout issue when editing Nginx configuration under Hardening > Prevent Information Disclosure
Addressed a deprecation notice for Webauthn::verify_response
Fixed a visual bug where the "Learn how we detect your IP" link overlapped the background border at 1280px screen widths
Minor code improvements
6.2.2
1 fix
Fixed
Streamlined schema method by removing bootstrap trait
6.2.1
1 fix
Fixed
2FA > Web Authentication method binds credential verification to the target user (props: Tai)
6.2.0
1 new10 improvements20 fixes
New
Audit Log for Free Hub and WP.org users
Improved
Compatibility with WordPress 7.1
Replace PHP-DI third-party package with custom lightweight DI Container
Display the Audit Log Storage retention setting
Handle UI state when all scan types are disabled on the Settings page
Update WPMU DEV domain in Audit service codebase
Validate secret-key API response before writing to wp-config.php
Improve toast message when attempting to disable the last enabled Malware Scan type
Remove dash-notice submodule
Ensure all scan status messages are displayed during scan progress
Improving user communication while the site is connecting to the Hub
Fixed
Clicking on 'View Logs' link does not filter Firewall Logs after the redirect
Security improvements on Hub-Connector (props: Jakub Herman)
Prevent adding duplicate recipient email addresses in Reports and Alerts
Changing the default report template should not affect existing recipient(s) preferences
Fix responsive layout issues on Dashboard, Two-Factor Auth and Other Settings plugin pages
Reverting to Defender 5 causes JavaScript errors on the Notifications page
Recipients don't receive email for all types of 'Firewall Alert' when a firewall lockout is enabled and triggered for XSS, Fake Bot, or 'Non-installed plugin lockout'
Logs are displayed without timezone on Audit and Firewall log pages
Improve Malware Alert and Report flow for 'always_send' and 'error_send' params
Email notifications title issue with apostrophes
The scheduled time notice does not show after the Free upgrade
Defender Welcome Modal is displayed in wrong version
3 strings were not imported for translation due to emoji
Unable to access the Custom Rules page
Force Authentication is not restricted to roles enabled under User Roles
Settings page layout breaks at 1280px with horizontal scrollbar
Incorrect 'Enable Bot Protection' modal on disabled reCAPTCHA toggles
Pagination remains visible after ignoring all files and only disappears after clicking a page
Defender Audit Logs creates incorrect and duplicate entries when updating General Settings
Minor code improvements
Changelog published by the developer, in their original language.
