Loginizer Pro history.

* [Security] Fixed a security issue in the HybridAuth library used by Social Login. [Reported by Nathan Cross (CyberBadger)] * [Feature Pro] Passkeys: You can now log in to your website using passkeys, making authentication faster, easier, and more secure without the hassle of passwords. * [Improvement Pro] Microsoft Social Login now identifies users by their Microsoft account ID instead of their email. The first Microsoft login to an account, or a registration, is now confirmed with a code sent to the user's email. * [Improvement] Social Login error messages are now escaped before being shown on the login page. * [Improvement] The Backuply install option now requires the install plugins capability. * [Bug-Fix Pro] Resetting the 2FA app secret key is now only possible from the 2FA settings page, that has been fixed. * [Bug-Fix Pro] 2FA emergency codes were not always removed after use, that has been fixed. * [Bug-Fix Pro] Username enumeration protection was not blocking all variations of the REST users endpoint, that has been fixed. * [Bug-Fix Pro] Users were not able to save their account settings on the Ultimate Member account page, that has been fixed. * [Bug-Fix] Social Login now refuses a login when the provider returns an invalid email, instead of sanitizing it. * [Bug-Fix] Login notification email was causing a fatal error when Really Simple Security 2FA was used, that has been fixed. * [Bug-Fix] Security settings page input fields would show empty fields when saved, this has been fixed.

* [Improvement Pro] Added Code Signing: Every update now verifies the code signature to ensure secure updates.

* [Pro Feature] User enumeration protection, hiding unauthenticated access to username lists. * [Improvement Pro] Passwordless login, now have option to disable username based login and only allow login through email. * [Improvement Pro] The plugin now comes with Italian translations(it_IT). * [Bug-Fix Pro] Passwordless login, was not honoring Remember me on login, this has been fixed. * [Bug-Fix] There was a race condition happening in Bruteforce protection, that has been fixed.

* [Bug-Fix Pro] There was an issue in Limit Concurrent Attempts, where session was getting destroyed, this has been fixed. * [Bug-Fix] Microsoft Graph Social Login, had some issues that has been fixed. * [Bug-Fix] Blacklist check function was generating warnings, that has been fixed. * [Bug-Fix] There was some PHP 7.0 related button UI issues, those has been fixed.

* [Improvement Pro] Admin slug htaccess rule, now handles the new slug not having / at the end in the URL. * [Improvement] When 2FA is enabled, email notifications will be sent only after successful 2FA verification for both Loginizer and Really Simple Security.

* [Improvement Pro] Two Factor Authentication : Enforced 2FA option added for all users. * [Improvement Pro] Country Block : Admin users now can see details of the blocked IP(s). * [Improvement Pro] Country Block : End user IP address added on blocked page. * [Improvement Pro] Login page detection has been improved. * [Bug-Fix Pro] Country Block : blocked page was being cached, that has been fixed. * [Task] Tested with WordPress 7.0.

* [Bug-Fix] There was an issue with URL decoding, this has been fixed.

* [Feature Pro] Country Blocking: Block IPs from specific countries to restrict access to your website. * [Improvement Pro] Captcha Compatibility: Added Captcha support for Contact Form 7 and WPForms. * [Improvement] Brute Force Optimization: Improved blacklist/whitelist handling for up to 50% better performance. * [Bug-Fix] There was an issue with Captcha for WooCommerce Block checkout, that has been fixed.

* [Improvement Pro] 2FA via Email now supports HTML content type for the content of the email. * [Improvement Pro] Added an option to choose the location of Captcha on WooCommerce checkout page. * [Improvement Pro] Trunstile captcha now supports Flexible size. * [Bug-Fix Pro] There was an issue with TwitchTV social login, that has been fixed. * [Bug-Fix] There was an issue with redirection if redirect_to was set on login, this has been fixed. * [Bug-Fix] There was a notice with a Promo notice that has been fixed.

* [Improvement] Loginizer now supports Captcha for Block based WooCommerce checkout. * [Improvement] Registration through Social Login now sends registration email, following the WordPress registration flow. * [Task] Making Passwordless login compatible with a use case where a CLI request attempts to login. * [Task] Tested with WordPress 6.9. * [Bug-Fix] There was a minor issue with IP checker that has been fixed.