Release v2.7.1
Secupress Pro v2.7.1
What's new in v2.7.1
Secupress Pro v2.7.1 was released on . Like many Security Plugins, SecuPress has a bunch of awesome features. See the full changelog below and compare with the complete version history.
Release details
Released
7.1 MB
File available
Changelog
Other
- 25 Sep 2026
- Security Fix: Directory traversal in the class file loader (administrators).
Added
- Firewall Learning Mode for 8G (observe signatures, review hits, allow globally or per URL prefix, auto-calibrate).
Improved
- WAF revamp: 8G signatures are now optional per filter, with local exceptions.
- Block Bad Referers is now available in Free.
- Hide WP, WooCommerce and PHP session cookies from the Support ID.
- Malware scanner still lists malware files when WP core checksums are missing, and matches "file" signatures on the filename.
- Deactivating a wp-config module no longer leaves the file or the setting in a bad state.
- Anti-spam comment delay now finds the comment form via the WordPress core field, so custom theme form IDs no longer break the timer.
Fixed
- Mixed content replacement now handles namespaced XML/SVG.
- Authors and other lower roles could not edit or create content with Stop User Enumeration.
- Apache bad URL access rules were missing the "-" substitution, so flags were ignored.
- "Expired license" displayed incorrectly on the dashboard widget.
- PHP warning when headers are already sent.
- Undefined variable notice in the System Status widget.
- reset() call on the pointers tour steps.
Compatibility
- Requires WordPress
- 5.5
- Tested up to
- 7.1.3
- Requires PHP
- 7.3
Verified safe
Secupress Pro v2.7.1 scanned clean with no security threats detected.
View full scan report