Release v5.304
Security Ninja Premium v5.304
What's new in v5.304
Security Ninja Premium v5.304 was released on . Trusted by 100,000+ WordPress Sites The All-In-One WordPress Security Plugin Block attacks. See the full changelog below and compare with the complete version history.
Release details
Released
7.1 MB
File unavailable
Changelog
Other
- 2026-10-01
Added
- Translations - Portuguese (Brazil).
- Early Firewall (Pro, beta) - Optional mode that can run the firewall before WordPress loads via PHP auto_prepend_file. Existing sites stay on WordPress hooks until you enable it. Site-local only (not Tools import/export or MainWP). Beta limitations: not available on multisite or IIS; competing security WAFs are refused (guided migration); non-WAF prepends require confirmation; disable removes Security Ninja markers only and keeps prior prepend details for manual recovery.
- Setup wizard (Pro, first run) - Optional Early Firewall step after Activate Firewall. Skip keeps the current WordPress-hooks firewall.
- Admin notice (Pro) - Dismissible heads-up on existing sites that Early Firewall is available. No automatic install.
- Events Logger (Pro) - Download the event log as CSV from the Events tab (capability + nonce + license gated, streamed in chunks for large logs). Thank you Tim.
Improved
- Translations - Full review of bundled language packs: Bulgarian, Chinese, Croatian, Danish, Dutch, Finnish, French, German, Italian, Korean, Norwegian, Portuguese (Brazil), Russian, Spanish, and Swedish.
- Events Logger - "Keep last N records" follows the number you save.
- Events Logger - Retention help text notes that selected firewall/block events can be kept longer for investigations, and that Delete all clears everything.
- Events Logger - Log rows with nested details stay readable in the events table.
- Firewall - Slimmer load path: heavy admin and cron code moved out of the always-loaded firewall class; shared 8G rules file; mail, temporary-login, and service/crawler whitelist helpers load on demand. Helps uncached PHP bootstrap cost.
- Firewall - WooCommerce checkout and payment returns are less likely to be treated as attacks. Obvious attacks are still blocked. Free and Pro.
- Firewall - SureCart checkout, product, and webhook requests are less likely to be treated as attacks, using the same approach as WooCommerce. Pro store rate limits and coupon protection apply when SureCart is active. When 2FA is on, sign in through the WordPress login. Free and Pro.
- Visitor Logging - New installs default to tracking off (existing sites keep their saved setting).
- Firewall - Login settings page loads reliably in the free plugin.
- Firewall - Unusual cloud blocklist entries no longer interrupt the plugin admin page on PHP 8. Thank you Werner.
- Early Firewall (Pro) - Enable, Verify, and Disable update the panel without reloading the page. A spinner shows while the request runs.
- Early Firewall (Pro) - The beta notice hides once Early Firewall is installed, including while it is pending or on. Open Firewall settings jumps to the panel.
- Early Firewall (Pro) - Shorter status copy. Partial coverage is shown as On. While it is turning off, only Verify removal is shown.
- Automatic AI review - Each scheduled review runs the security tests first, then sends those results and the latest stored scans. Malware scans stay on their own schedule.
- Events Logger - User agents recorded by Early Firewall are stored cleanly, including unusual characters.
- Core Scanner and File Viewer - Path checks keep working on PHP 7.4 and older WordPress versions.
- Firewall - Existing secret access URLs stay as they are. Reset still creates a new one when you ask.
- Firewall - Visitor IP detection stays consistent across Automatic, Cloudflare, and proxy modes. If a reverse proxy sits in front of the site, add its address under Trusted proxy CIDRs.
- AI Security Advisor - Risk badges use the standard labels: low, medium, high, and critical.
- Tests - Plugin age and WordPress compatibility checks say when a plugin could not be verified, for example a premium or custom plugin, or when WordPress.org could not be reached.
- Firewall (Pro) - Firewall settings tabs and country blocking controls work with directory themes such as MyListing. Thank you Kevin.
Fixed
- Admin - Firewall sidebar no longer crushes the main settings column on laptop and tablet widths. Store toggles stay on one row with their labels.
- license_key.txt auto-activation now works when upgrading from Free to Pro. Thank you Michael.
- Tests - Quick Filter and Expand all details now sit on one row with Run Tests.
- Plugin header now includes Requires at least (WordPress 4.7) and Requires PHP (7.4), so the update screen can show both.
- Malware Scanner - Scan step timers stay in one right-hand column, and View File / Whitelist / Delete stay on one row in the findings table.
Compatibility
- Requires WordPress
- 4.7
- Tested up to
- 7.1.2
- Requires PHP
- 7.4
Review recommended
Some files in v5.304 were flagged for review. Use with caution.
View full scan report