Solutiontech Seguridad de acceso

चेन्जलग

1.24.0

• Threat Defense Center & Forensic Reports: Dedicated intelligence and monitoring panel with live threat KPI cards, visual attack vector distribution, Top 5 recurring hostile IPs with 1-click blacklist action, and custom Date Range Forensic CSV Report Generator (filter by date from/to, attack category, and severity).
• Automatic IP Blacklist on Critical Attacks: Automatically adds offending IPs to permanent blacklist upon intercepting SQL Injection, Path Traversal / LFI / RCE, or hostile scanning tools.
• WordPress Auto-Updates Manager: Centralized toggles in site protection to force automatic updates for WordPress core security releases, all installed plugins, and active themes.

1.23.2

• Internationalization: Adds complete native translation packages for 12 locales: Spanish (Chile, Mexico, Argentina, Colombia, Peru, Spain), English (US), Brazilian Portuguese, European Portuguese, French, Italian, Russian, and Simplified Chinese.

1.23.1

• Usability: Protected login URL is now disabled by default on initial activation to prevent unintended lockouts, allowing administrators to explicitly activate and customize their desired login route.

1.23.0

• Adds 2FA Emergency Backup Recovery Codes (8 single-use codes) in user profiles with cryptographic hashing.
• Adds Cloudflare Turnstile anti-bot integration with support for login, registration, and lost-password forms.
• Adds Malware Upload Shield (suspicious executable PHP file scanner in /wp-content/uploads/) in diagnostics panel.
• Adds interactive real-time search and category filtering in the Audit Log panel.

1.22.0

• Adds Two-Factor Authentication via Authenticator Apps (TOTP – RFC 6238) with Google/Microsoft Authenticator and QR code pairing in user profiles.
• Adds real-time Security Email Alerts with HTML formatting and anti-flood throttling for Brute Force lockouts, WAF attacks, and Core Integrity modifications.
• Adds Country Geolocation Filtering (GeoIP) with Allowlist/Blocklist modes and Reverse Proxy / Cloudflare header detection.
• Adds WordPress Dashboard Security Widget with score gauge, protection indicators, and 24h threat summary.
• Fully compliant with WordPress.org Plugin Check validation and standards.

1.21.0

• Adds Micro-WAF (Web Application Firewall) to detect and block SQL Injection, XSS, Path Traversal / LFI / RCE, and malicious scanner tools with forensic audit logging.
• Adds IP Whitelist and Permanent Blacklist management with support for IPv4, IPv6, and CIDR subnet notations.
• Adds WordPress Core File Integrity Checker comparing local core files against official WordPress.org cryptographic checksums with diagnostics dashboard integration.
• Integrates WAF, IP rules, and Core Integrity status into the security dashboard health score.

1.20.0

• Adds Two-Factor Authentication (2FA via Email OTP) with 6-digit cryptographic verification code and brute-force attempt limits.
• Adds Strong Password Policies enforcing 12+ characters, uppercase, lowercase, numbers, and symbols during user creation and password resets.
• Adds optional periodic password expiration reminders for privileged user accounts.
• Integrates 2FA and password policy health checks into the security dashboard status score.

1.19.0

• Adds official translation infrastructure with standard GNU gettext POT template (languages/solutiontech-seguridad-de-acceso.pot).
• Declares Domain Path: /languages in plugin headers for automatic native localization via WordPress Core.
• Fully compatible with Poedit, Loco Translate, WP-CLI, and WordPress.org GlotPress translation platform.

1.18.0

• Adds Invisible Honeypot Anti-Spam protection across login, lost password, user registration, and comment forms to eliminate automated spam bot submissions.
• Adds Pingback protection: removes X-Pingback headers from server responses and disables XML-RPC pingback methods to mitigate DDoS amplification vectors.
• Adds optional Time-Gate submission speed filter to discard instant automated bot form submissions.
• Integrates anti-spam and honeypot indicators into the security dashboard score and administration panel.

1.17.0

• Adds WordPress Core Hardening module: hides generator meta tags, RSS/Atom version info, and removes ?ver= query strings matching the WordPress core version from public assets.
• Removes legacy and unnecessary discovery tags from HTML head (RSD link, WLWManifest link, and oEmbed discovery links).
• Adds theme and plugin file editor disabling (DISALLOW_FILE_EDIT enforcement and capability filtering) to prevent arbitrary PHP execution in case of account compromises.
• Integrates Core Hardening items into the security dashboard health score and environment diagnostics panel.

1.16.0

• Adds daily scheduled WP-Cron task (solutiontech_seguridad_acceso_daily_cleanup) for automated asynchronous pruning of audit logs and 404 monitor entries.
• Adds secure CSV export functionality for Audit Log and 404 Monitor with UTF-8 BOM encoding for Excel compatibility and CSV formula injection protection.
• Implements runtime in-memory caching for settings retrieval to optimize database performance.

1.15.0

• Adds Google reCAPTCHA v3 invisible protection for login and lost-password forms with customizable confidence score threshold.
• Adds HTTP Security Headers module (X-Frame-Options, X-Content-Type-Options: nosniff, Referrer-Policy, Permissions-Policy, and HSTS).
• Adds Progressive Brute-Force Lockout feature with escalating penalty tiers for recurring attack IPs (1x base duration -> 4x -> 24 hours).
• Integrates new protection modules into the security status score and diagnostics dashboard.

1.14.4

• Resolves Plugin Check update_modification_detected warning by removing core and plugin auto-update management to comply fully with WordPress.org guidelines.

1.14.3

• Clearly distinguishes deleting a 404 history row from permanently resolving the missing URL.
• Renames the redirect action to Resolve permanently and uses a permanent 301 redirect by default.
• Removes the monitored 404 entry after its redirect is saved successfully.

1.14.2

• Resolves the findings from Plugin Check concerning readme metadata, input handling, nonce analysis, and prefixed uninstall variables.
• Uses WordPress’ native automatic-update preferences instead of filtering the plugin updater at runtime.
• Adds regression checks for packaging and WordPress.org compatibility metadata.

1.14.1

• Fixes an interpolated translation string in the temporary lockout email.
• Adds regression coverage for static translatable strings and placeholder substitution.

1.14.0

• Adds WooCommerce catalog mode under Content.
• Hides purchasing, cart, checkout, and optional variation controls.
• Can apply catalog mode to administrators while preserving existing order links.

1.13.5

• Resolves internationalization findings reported by Plugin Check.
• Adds translator comments and ordered placeholders.

1.13.4

• Prevents inactivity enforcement from intercepting REST requests used by the block editor.
• Masks IP addresses in the audit-log table.

1.13.3

• Restricts redirect sources and destinations to the current domain.

1.13.2

• Improves redirect normalization for omitted schemes and subdirectory installations.

1.13.1

• Uses the full available width on desktop displays.

1.13.0

• Adds individual session management for other accessible users.

1.12.5

• Strengthens route, redirect, import, IPv6, and Multisite handling.

1.12.4

• Improves diagnostic-card layout and responsive presentation.

1.12.3

• Removes the promotional header from the administration panel.

1.12.2

• Makes dashboard controls link directly to their related settings.

1.12.1

• Improves the Copy URL button and renames technical hardening labels.

1.12.0

• Adds the 404 monitor and refreshes the administration design.

1.11.0

• Adds sessions, device alerts, single-session policy, and inactivity timeout.

1.10.0

• Adds the same-site redirect manager.

1.9.0

• Adds responsive sidebar navigation.

1.8.0

• Adds emergency recovery, JSON import/export, reset tools, and an IP allowlist.