When was WP Cerber Security v9.9.5 released?

WP Cerber Security version 9.9.5 was released on August 25, 2026. You can download it from GPLCoffee along with its full changelog and compatibility details.

What is the download size of WP Cerber Security v9.9.5?

The WP Cerber Security v9.9.5 package is 1.3 MB.

What WordPress version does WP Cerber Security v9.9.5 require?

WP Cerber Security v9.9.5 requires WordPress 5.8 or higher, tested up to WordPress 7.1.

What PHP version does WP Cerber Security v9.9.5 need?

WP Cerber Security v9.9.5 requires PHP 7.4 or higher.

Is WP Cerber Security v9.9.5 safe to download?

WP Cerber Security v9.9.5 has been scanned with VirusTotal and came back clean. The full scan report is linked from the version page.

Release v9.9.5

WP Cerber Security v9.9.5

Latest version

What's new in v9.9.5

WP Cerber Security v9.9.5 was released on August 25, 2026. Defends WordPress against hacker attacks, spam, trojans, and malware. See the full changelog below and compare with the complete version history.

Release details

Released August 25, 2026

1.3 MB

File available

Changelog

Improved

A setting link in admin UI now opens the matching role tab in the role-based settings and highlights the target setting, so you can jump from an Activity log event straight to the setting that affected WP Cerber's decision.
Following a setting link from a popup explainer now centers the target WP Cerber setting in the browser window instead of aligning it with the top of the page, where the WordPress admin bar could cover it.
URL escaping in the admin interface now accepts root-relative URLs that begin with a single slash, in addition to the already supported HTTP(S), FTP(S), and mailto URLs.
Admin announcements are now stored as structured JSON instead of pre-rendered HTML markup. A stored announcement that does not match the supported format is rejected instead of being displayed incorrectly.
Quotes, angle brackets, and backticks are no longer deleted from URLs in admin pages. HTML escaping of the attribute value now handles these characters safely.

Fixed

On the Activity log page, when several explainers described events for the same user and WP Cerber's decision was role-based, only the first setting link scrolled to and highlighted the target setting. The remaining links opened the settings page without scrolling to the target setting.
The "Mail Transport" settings section displayed the raw HTML markup for the "Available in the professional version of WP Cerber" link instead of a working link.
Non-ASCII characters in a URL path are no longer removed when WP Cerber escapes a URL, so URLs with non-ASCII path characters now point to the intended address.
A URL containing invalid UTF-8 no longer becomes an empty link address when WP Cerber escapes it.