Tweak: Show the plugin changelog in the plugin information pop-up.
Security: Update the “tmp” npm package.
Security: Don’t include package.json in zip.
Bug Fix: Vulnerable Software dashboard card didn’t render properly.
Bug Fix: Firewall rules that depend on HTTP headers didn’t work correctly in all cases.
Bug Fix: PHP Warning: Undefined array key 1 core/admin-pages/logs-list-table.php.
Bug Fix: Logs will appear in the correct order regardless of database version.
Bug Fix: PHP Warning: Array offset on value of type null core/modules/security-check-pro/class-itsec-security-check-pro.php.
Update: The lib/updater library has been updated to 1.9.3.
8.7.0 – 2026-02-11 – Justin Frydman, Volodymyr Shelmuk
New: Restrict Admin Access module under Features > Login Security to configure authorized country access to your dashboard.
New: Security Headers module under Advanced to enforce essential HTTP security headers.
Tweak: Ensure generated Nginx config rules are valid for customized directory structures.