Get Started
Wordfence Premium icon

5 versions

Wordfence Premium history.

Every release of Wordfence Premium is archived here with its changelog, file size, and security scan result. Use the archive to roll back to a stable release or audit what changed between updates.

5 of 5 releases scanned clean
v9.0.2Latest
September 30, 20267.4 MBScanned
Improved
  • Changed IPv6 diagnostics result to be informational only
  • Added help link to increased attack rate emails
  • Increased compatibility with WordPress Playground
  • Harden REST API user enumeration protection
Fixed
  • Upgraded virtualizer dependency to fix Firefox tab crash on screens with a lot of DOM elements (e.g., a running scan)
  • Better detection and handling of "module" script tagging to avoid conflict with renamed plugin directories
  • Add missed return value from `upgrader_pre_install` audit log filter
  • PHP 8.1 deprecation notice fixes
  • Fixed translation support on login page
  • Improve handling of WAF JSON processing to better handle array values
  • Address early translation calls to avoid `_load_textdomain_just_in_time` notices
  • Changed a few translated strings to avoid containing HTML due to a broken CZ translation
  • Removed obsolete CSS
  • Fixed typo in "No alerts will be sent for the remain[d]er..."
September 8, 20267.4 MBScanned
Improved
  • UX enhancements for passkey authentication and general login security
  • GeoIP database updated
Fixed
  • Improved error handling in WAF request handlers and XML-RPC parser
  • Fixed an issue with translations not showing on the Login Security Settings tab
  • Addressed several potential PHP 8.5+ deprecation notices
  • Reworked MD5 hash use in MySQL to avoid deprecation in 9.7+
v9.0.0Unavailable
August 10, 20267.4 MBScanned
Improved
  • Added support for passkey authentication
  • GeoIP database updated
  • Several mobile styling and layout improvements on the login security page
  • Added diagnostics info for authentication hooks to assist with login-related troubleshooting
  • Hardened 2FA flow when installed next to plugins with non-standard authentication (credit: Austin Ginder of Anchor Hosting)
  • Hardened 2FA remember cookie handling
  • The scanner will now display an issue when the standalone Wordfence Login Security plugin is installed because all functionality is already provided by Wordfence itself
  • Updated internal libraries used by the Vue UI
  • Login error masking setting now also applies to the Login Security functionality
Other
  • Available for both free and premium installations
  • Can be enabled for any user role (multisite support is currently limited)
  • WooCommerce integration
  • Support for custom authentication integrations
May 13, 20267.5 MBScanned
Improved
  • Better presentation of Live Traffic data on wide screens
  • Increased legibility of token fields
  • Reworked the pagination of the Blocking page for a better UX
  • Country blocking token field can now expand to show all entries
  • Performance improvements for the activity log and better pause behavior on window blur/focus
  • GeoIP database updated
  • Removed deprecated Central endpoint
Fixed
  • Addressed issue where the last activity log entry could repeatedly appear
  • Using the embedded shortcode for the 2FA form now correctly enqueues core JavaScript dependencies
  • Modals with content that overflows on smaller viewports can now be scrolled
  • The changelog link in plugin upgrade scan issues now links correctly
May 6, 20267.5 MBScanned
Fixed
  • Fixed issue with some i18n plugins/themes when a user has no 2FA recovery codes
  • Toggled options with additional help links now correctly open the link rather than toggling the option
  • Country Blocking editing fixed when there are multiple pages of block rules
  • Added better error handling to the initial Vue data load
  • Handled error when logging in using legacy 2FA with separate prompts enabled

Why archive

Sometimes the latest release isn't the one you need. The archive lets you pin Wordfence Premium to a known-good version, or roll back while a bug is investigated. Every release stays scanned and reachable.