GPLCoffee
GPLCoffee
Get Started
WP 2FA Premium icon

2 versions

WP 2FA Premium history.

Every release of WP 2FA Premium is archived here with its changelog, file size, and security scan result. Use the archive to roll back to a stable release or audit what changed between updates.

1 of 2 releases scanned clean
v2.8.0Latest
November 10, 20245.8 MBScanned
Other
  • *New features**
  • Out of the box support for Yubico - [use any YubiKey hardware key by Yubico as a 2FA method to log in to your WordPress website](https://melapress.com/support/kb/wp-2fa-hardware-key/).
  • **Plugin & functionality improvements**
  • Bumped up the minimum supported PHP version from 7.2 to 7.3.
  • The names of debug log file in uploads directory are now randomized.
  • The SMS templates in white labelling are now in a dedicated section for themselves (previously were part of the email templates).
  • Adjusted the order in which the 2FA methods are listed.
  • **Bug fixes**
  • White labelling option "Enable our CSS within user wizard" could not be unchecked once checked.
  • Refer to the complete [plugin changelog](https://melapress.com/support/kb/wp-2fa-plugin-changelog/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2FA&utm_content=plugin+repos+description) for more detailed information about what was new, improved and fixed in previous version updates of WP 2FA.
Improved
  • the default SMS messages to give the user more info / context.
  • a number of strings in the settings + improved help text.
  • the default text in different sections of the wizard to simplify things and improve UX.
  • the order of methods in the 2FA plugin.
  • the white labelling settings strings and added new ones etc - clearer explanation and improved help text.
  • the white labelling settings for the 2FA code page.
  • the features' page - added the new features etc.
  • the default methods names for the SMS providers to avoid confusion.
  • all UTM parameters in the plugin's URLs and links.
Fixed
  • Changes in backup methods text via white labelling settings was not properly reflected in the wizard.
  • PHP fatal error in class-email-wizard-steps.php in some edge cases.
  • Apostrophe character shows up as ASCII in email subject.
  • Error with importing plugin's settings from one website to another in some edge cases.
  • The grace period expiration setting did not have a default value / setting.
  • Redirecting to frontend 2FA page without permalinks set up does not work.
  • Some user profile 2FA buttons were not functioning properly when used on mobile.
  • Data was not always / all deleted when the setting "Delete data upon uninstall" was enabled.
Removed
  • reference to Premium backup methods in the free edition's wizard.
v2.6.4
May 7, 20245.6 MBUnknown
Other
  • **Improvements**
  • The default "From email address" used by the plugin now uses the website's domain, thus improving email deliverability.
  • All one-time codes generated by the plugin are now 6 digits long.
  • Applied some coding best practices in some sections to ensure better protection against timing base attacks.
  • **Security fix**
  • **Bug fixes**
  • Refer to the complete [plugin changelog](https://melapress.com/support/kb/wp-2fa-plugin-changelog/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2FA&utm_content=plugin+repos+description) for more detailed information about what was new, improved and fixed in previous version updates of WP 2FA.
Fixed
  • a sensitive information disclosure issue - user salts can only be potentially exposed if debug is enabled and the web server is not Apache.
  • Text changes in the "logged out users trying to access 2FA config" setting not saved.
  • User not redirected to the URL configured in the settings when all backup codes are disabled.
  • Formatting / layout of advert in the configuration, which in some cases it was showing over some of the help text.

Why archive

Sometimes the latest release isn't the one you need. The archive lets you pin WP 2FA Premium to a known-good version, or roll back while a bug is investigated. Every release stays scanned and reachable.