WP Umbrella: Security Backup Restore & Monitoring

변경이력

2.27.0 (08-10-2026)

• Security: fixed a cross-site request forgery vulnerability.
• Added: WP Umbrella now reports the code that runs on your site without ever showing up in your plugin list: must-use plugins, drop-ins, and plugin folders hidden from the plugins screen.
• Added: files edited from the WordPress plugin editor are now recorded in your Activity Log.
• Improved: suspicious administrator accounts are now reported with a confidence level, so a single weak signal no longer raises an alert.
• Improved: the protection of your uploads folder is now verified on your live site, so sites served behind a reverse proxy no longer show protections that were not actually applied.
• Fixed: on sites where WordPress is installed in a subfolder, the .htaccess hardening could not be turned on and wrongly reported the file as not writable.
• Improved: the security headers are now set by your server, so they still apply on pages delivered by a cache plugin.
• Improved: code quality improvements under the hood.

2.26.2 (08-07-2026)

• Fixed: some sites stopped syncing with WP Umbrella and appeared as disconnected when another plugin reported its update information in an unexpected format.
• Fixed: on sites where the uploads folder is a symbolic link, media files were missing from backups. Those sites are now backed up in full.
• Added: backups now work on Pantheon, whose read-only file system previously prevented them from running.
• Fixed: some plugins caused PHP fatal errors during our sync because our plugin loaded the admin screens too early.
• Fixed: a recurring PHP error was reported once and then went unnoticed. Recurring errors are now reported again.
• Improved: clearer message when your site cannot reach WP Umbrella while connecting it.

2.26.1 (07-30-2026)

• Added: new security checks that detect suspicious administrator accounts and list their active application passwords.
• Improved: the uploads folder is now protected against running malicious files.
• Improved: comment spam from known attacker IP addresses is blocked before it reaches your site.
• Improved: repeated failed login attempts now trigger progressively longer lockouts.
• Fixed: some files could be wrongly excluded from backups because of their file name.
• Fixed: updates no longer leave temporary backup folders behind, and updates that require a newer WordPress or PHP version are clearly identified instead of failing.
• Improved: smaller fixes to the Activity Log, database optimization, and PHP warnings.

2.26.0 (07-24-2026)

• Improved: security protections now record the attacks they stop (blocked login attempts, XML-RPC calls, and user enumeration scans) in your Activity Log, so you can see what WP Umbrella blocked for you.
• Improved: strengthened the security of the connection between your site and WP Umbrella.
• Added: an expanded .htaccess hardening option, validated safely before it is applied to your site.
• Fixed: a restoration that only partially imported the database is no longer reported as successful.
• Improved: backups now gather more information while building the backup script, so we can detect upfront what would prevent a backup from completing.

2.25.1 (07-15-2026)

• Added: a security option to block installing, updating, and editing plugins and themes from the WordPress admin.
• Added: a security option to disable XML-RPC, reducing a common attack surface on your site.
• Added: security checks.
• Fixed: updated the bundled task scheduler so it no longer triggers PHP 8.4 and 8.5 deprecation notices, keeping your debug log clean and preparing for future PHP versions.

2.25.0 (07-07-2026)

• Added: security hardening options you can enable per site from the dashboard: hide the WordPress version, block user enumeration, mask login error details, disable the file editor, and add recommended security headers.
• Fixed: updates for some premium plugins could fail silently even with a valid license; they now install reliably.
• Fixed: reconnecting an already-paired site no longer creates a duplicate in your dashboard.
• Fixed: improved interrupted backups.
• Improved: backups adapt their pace to your server and stuck backups are detected sooner.
• Improved: the Activity Log now tracks WordPress 7.0 AI configuration changes.

2.24.4 (06-23-2026)

• Added: a pre-restore check that warns you when the saved database settings do not match your site’s current database, so a restoration cannot silently target the wrong database.
• Fixed: one-click plugin and theme updates now go through reliably on sites protected by HTTP Basic Authentication, behind LiteSpeed, or with a strict maintenance setup, where they could previously stall.
• Fixed: restoring or cloning a site no longer fails when the database uses a newer MySQL 8 collation.
• Fixed: backups now locate your site’s content correctly on installations that use a custom content directory.
• Fixed: during bulk updates, one plugin’s update can no longer be matched against another plugin’s version.
• Improved: SiteGround integration

2.24.3 (06-10-2026)

• Fixed: updating several plugins in a row no longer fails after the first one on some hosting setups.
• Fixed: updates are no longer reported as failed when the plugin or theme was already at the latest version.
• Fixed: broken link highlighting now works on sites served from a page cache.
• Improved: premium plugin and theme updates are more reliable.
• Improved: when no update is actually available for a plugin or theme, the task now ends quickly with a clear explanation.
• Improved: a working site is no longer rolled back when an update finishes without changing the version.
• Improved: failed updates are reported faster, with a clearer explanation of the most likely cause.
• Improved: connecting a site now surfaces PHP errors detected on it, to make troubleshooting easier.
• Improved: clearing the cache from WP Umbrella now also flushes Redis and Memcached object caches.

전체 변경 로그는 여기!에서 확인할 수 있습니다.