Changelog — JPKCom Hide Login
Version history of the JPKCom Hide Login WordPress plugin.
Version history of jpkcom-hide-login. Entries are taken verbatim from the project's README. A hands-on guide with tips is available in the project guide.
1.2.3 (2026-06-16)
- Raised the minimum WordPress version to 6.9 and "Tested up to" to WordPress 7.0
- Switched license metadata to the SPDX identifier
GPL-2.0-or-laterwith the HTTPS license URI
1.2.2 (2026-06-16)
- Security: updater prefers an exact match against the manifest
download_urlover the slug heuristic, so a tampered manifest can no longer bypass the checksum gate - Security: timing-safe checksum comparison (
hash_equals()) with anis_string()guard againsthash_file()failures - Security: manifest fetch via
wp_safe_remote_get()(SSRF defense-in-depth) - Fixed PHP warning and missing contributor names in the plugin detail popup (
display_namenow provided) - Fixed PHP warning/deprecation on
wp plugin listby completing theno_updatetransient entry (new_version,package,tested,requires_php)
1.2.1 (2026-03-13)
Fixed
- ZIP-Upload Fix - Manual ZIP uploads via WP-Admin no longer fail with "invalid URL" error during checksum verification
- Release ZIP Structure - GitHub Actions release now creates ZIP with top-level plugin folder, ensuring WordPress correctly recognizes updates
1.2.0 (2025-11-12)
Added
- IP Whitelist Management - Add trusted IPs that will never be blocked
- CIDR Range Support - Whitelist entire IP ranges (e.g.,
192.168.1.0/24) - Enhanced Admin Interface - Professional settings page with all features
- Blocked IP Viewer - See currently blocked IPs with expiration times
- Brute Force Protection - Automatic IP blocking after failed login attempts
- Customizable Protection Thresholds - Configure max attempts, attempt window, and block duration
- Login Attempt Counter - Shows remaining attempts on failed logins
- Current IP Display - See your current IP in admin settings
- One-Click Block Clearing - Clear all blocked IPs with a button
- Automatic Database Cleanup - Daily WordPress Cron job removes expired login attempt data
- WP-CLI Cleanup Command - Manual database cleanup via
wp jpkcom-hide-login cleanup - Full WP-CLI Support - Complete command-line management for all plugin features
…
1.0.0 (2024-11-30)
- Initial Release
- Basic login URL masking
- Simple IP blocking
- Multisite support
- Basic admin settings