Release v1.2.5
LaunchGuard Pro v1.2.5
Latest versionWhat's new in v1.2.5
LaunchGuard Pro v1.2.5 was released on . WordPress plugin for creating coming soon pages using pre-built templates with quick setup. See the full changelog below and compare with the complete version history.
Release details
Released
1.1 MB
File available
Changelog
Other
- ### Security
- Enforced TLS certificate validation on all licensing and update requests; the previous fallback could allow a network attacker to control the update package
- Hardened every licensing payload against PHP object injection by restricting unserialization to plain data
- Replaced the shared, non-expiring password protection cookie with per-visitor random tokens that expire server side and are revoked on logout or password change
- Access passwords are now stored as a hash instead of clear text, and are excluded from settings exports
- Custom template CSS/JS and SEO head markup now require the unfiltered_html capability
- Visitor IP addresses are read from REMOTE_ADDR only and are no longer taken from spoofable forwarded headers
- Analytics values are escaped before being rendered in the admin dashboard
- Geolocation lookups now use HTTPS and can be disabled with the launchguard_enable_geolocation filter
Fixed
- a coming soon / maintenance mode bypass that allowed any visitor to reach the site by adding an Elementor query argument or referrer to the request
Added
- brute force throttling to the password protection endpoint
- nonce verification and rate limiting to the public analytics tracking endpoints
- nonce verification to the analytics data, export, migration, and site logo admin endpoints
- a capability check to the license activation and deactivation handlers
Removed
- the license check fallback that treated any stored value as a valid license
- the obfuscated base64 helpers in the license base class
Improved
- Uninstalling now drops the analytics tables so visitor data is not left behind
Compatibility
- Requires WordPress
- 6.0
- Tested up to
- 7.1
- Requires PHP
- 7.4
Verified safe
LaunchGuard Pro v1.2.5 scanned clean with no security threats detected.
View full scan report