When was Security Ninja Premium v5.307 released?

Security Ninja Premium version 5.307 was released on October 28, 2026. You can download it from GPLCoffee along with its full changelog and compatibility details.

What is the download size of Security Ninja Premium v5.307?

The Security Ninja Premium v5.307 package is 6.6 MB.

What WordPress version does Security Ninja Premium v5.307 require?

Security Ninja Premium v5.307 requires WordPress 4.7 or higher, tested up to WordPress 7.1.2.

What PHP version does Security Ninja Premium v5.307 need?

Security Ninja Premium v5.307 requires PHP 7.4 or higher.

Is Security Ninja Premium v5.307 safe to download?

Security Ninja Premium v5.307 scan status: completed (suspicious). We recommend using a different release until the scan clears.

Release v5.307

Security Ninja Premium v5.307

Latest version

What's new in v5.307

Security Ninja Premium v5.307 was released on October 28, 2026. Trusted by 100,000+ WordPress Sites The All-In-One WordPress Security Plugin Block attacks. See the full changelog below and compare with the complete version history.

Release details

Released October 28, 2026

6.6 MB

File available

Changelog

Other

2026-10-25
Login, firewall, and scan updates. Your saved settings stay as they are.

Fixed

Core Scanner - WordPress 7 files under wp-includes/php-ai-client/ that were saved with a shortened name are no longer listed as critical unknown files. When the file matches the official checksum, the scan explains the shortened name and can rename it back. Those files are left out of "Delete critical & warning unknowns".
Firewall - A saved coupon limit of 3 (the minimum is now 5) no longer blocks saving the other firewall tabs. The field sits on the Store tab in the same form, and the browser was refusing to submit it. Thank you Chris.
Early Firewall - Block events waiting to be logged are stored as data files. An event that had not been written to the log yet may be missing once after this update.
Login Protection - The hidden wp-admin check now confirms the login cookie is valid. A normal login is unchanged.
Core Scanner - "Delete critical and warning unknowns" leaves files in the site root alone, including wp-config.php. You can still remove one of those files from its own row.

Improved

Two-Factor Authentication - Repeated wrong codes now use the same limit as failed logins (default 5 tries in 5 minutes). The wait stays in place until that window ends. With the firewall on, those tries count the same way a wrong password does.
Events Logger - An incorrect 2FA code is saved in the events log with the account name. With the firewall on, the same try is also listed as a failed login.
Two-Factor Authentication - Authenticator app secrets now follow your WordPress salts. The update re-encrypts existing secrets the next time you open wp-admin. Email codes are unchanged. If you later change AUTH_KEY or SECURE_AUTH_KEY, those users set up the app again.
Core Scanner ignores HTML challenge pages when it downloads official file content for a diff or restore.
Firewall IP Management shows Unblock for temporary local bans and 404 Guard bans.
Visitor Log stays on the current page after you ban an IP from the log.
MainWP - The child connection is available whenever MainWP Child is active on the site.