O:8:"stdClass":5:{s:12:"last_checked";i:1692566205;s:8:"response";a:1:{s:47:"really-simple-ssl-pro/really-simple-ssl-pro.php";O:8:"stdClass":20:{s:11:"new_version";s:5:"7.0.4";s:14:"stable_version";s:5:"7.0.4";s:4:"name";s:21:"Really Simple SSL pro";s:4:"slug";s:21:"really-simple-ssl-pro";s:3:"url";s:74:"https://really-simple-ssl.com/downloads/really-simple-ssl-pro/?changelog=1";s:12:"last_updated";s:19:"2023-08-14 10:55:41";s:8:"homepage";s:29:"https://really-simple-ssl.com";s:7:"package";s:0:"";s:13:"download_link";s:0:"";s:8:"sections";O:8:"stdClass":2:{s:11:"description";s:792:"<p>Really Simple SSL Pro offers premium support, HTTP Strict Transport Security, an extensive scan, and more detailed feedback on the configuration page.</p>
<h4> Installation </h4>
<ul>
<li>Install the Really Simple SSL plugin, which is needed with this one.</li>
<li>Go to “plugins” in your Wordpress Dashboard, and click “add new”</li>
<li>Click “upload”, and select the zip file you downloaded after the purchase.</li>
<li>Activate</li>
<li>Navigate to “settings”, “SSL”.</li>
<li>Click “license”</li>
<li>Enter your license key, and activate.</li>
</ul>
<p>For more information: go to the <a href="https://www.really-simple-ssl.com/">website</a>, or
<a href="https://www.really-simple-ssl.com/contact/">contact</a> me if you have any questions or suggestions.</p>";s:9:"changelog";s:21899:"<h4> 7.0.4 </h4>
<ul>
<li>August 8th 2023</li>
<li>New: Advanced hardening: block admin creation</li>
<li>Improvement: WordPress tested up to 6.3</li>
</ul>
<h4> 7.0.3 </h4>
<ul>
<li>July 25th 2023</li>
<li>Improvement: catch not existing 'SERVER_PROTOCOL'</li>
</ul>
<h4> 7.0.2 </h4>
<ul>
<li>July 6th 2023</li>
<li>Improvement: prevent use of subdirectories in custom login url</li>
</ul>
<h4> 7.0.1 </h4>
<ul>
<li>Fix: change login url functionality not working in 7.0</li>
</ul>
<h4> 7.0.0 </h4>
<ul>
<li>New: Vulnerability Detection is in Beta - <a href="https://really-simple-ssl.com/vulnerability-detection/">Read more</a></li>
</ul>
<h4> 6.2.5 </h4>
<ul>
<li>Improvement: stop trying the database rename if it fails on first attempt</li>
</ul>
<h4> 6.2.4 </h4>
<ul>
<li>New: change login url</li>
<li>Fix: Exclude deprecated x-content-security-policy from header detection</li>
<li>Improvement: Update to functional components Rest API for free core</li>
<li>Improvement: Disable Content Security Policy if the maximum header size has been reached</li>
</ul>
<h4> 6.2.3 </h4>
<ul>
<li>Fix: rename db prefix using not available function</li>
<li>Fix: Exclude deprecated x-content-security-policy from header detection</li>
</ul>
<h4> 6.2.2 </h4>
<ul>
<li>Fix: follow redirects in third party header detection.</li>
</ul>
<h4> 6.2.1 </h4>
<ul>
<li>Fix: prefix replacement in wp-config too broad, causing issues if wp_ is used other then in the prefix.</li>
<li>Fix: Update prefix site_id in user roles when changing the database prefix, to preserve capabilities for users in subsites</li>
</ul>
<h4> 6.2.0 </h4>
<ul>
<li>Improvement: add support for BLOB and Filesystem</li>
<li>Improvement: disable CSP reporting mode paused status when switching to disabled or enforced</li>
</ul>
<h4> 6.1.1 </h4>
<ul>
<li>Improvement: Use ABSPATH constant instead of path when writing path to debug.log</li>
<li>Improvement: Pause CSP reporting after 20 requests, to lower server load</li>
<li>Fix: script-src-elem in Content Security Policy not including source URL</li>
</ul>
<h4> 6.1.0 </h4>
<ul>
<li>Improvement: CSP policy for back and front-end separate</li>
<li>Improvement: also allow non-recommended X-XSS options</li>
<li>Improvement: frame ancestors allow other values than 'none'</li>
</ul>
<h4> 6.0.5 </h4>
<ul>
<li>Fix: Debug.log setting not saving on first save action</li>
</ul>
<h4> 6.0.4 </h4>
<ul>
<li>New: automatically detect wrong Security Header values from other sources, and duplicate headers</li>
<li>Improvement: auto enable Insecure Requests header only when SSL enabled</li>
<li>Improvement: remove unnecessary notices load in licenses block</li>
</ul>
<h4> 6.0.3 </h4>
<ul>
<li>Fix: isset check on $_SERVER['HTTPS'] to support environments where this key is missing</li>
<li>Improvement: add headers_sent() check for situations where the headers already have been sent, possibly due to an error earlier in the system.</li>
<li>Improvement: Update CSP reporting URI on permalink structure change</li>
</ul>
<h4> 6.0.2 </h4>
<ul>
<li>Fix: HSTS not running on hosting environments with load balanced configuration because SSL is not detected</li>
<li>Fix: when wp-config.php is not writable, renaming database prefix could cause tables to get removed</li>
</ul>
<h4> 6.0.1 </h4>
<ul>
<li>Fix: upgrade to 6 logic running more than once</li>
</ul>
<h4> 6.0.0 </h4>
<ul>
<li>Tested up to WordPress 6.1.0</li>
<li>Improvement: User Interface</li>
<li>New: Server Health Check - powered by SSLLabs</li>
<li>New: WordPress Hardening Features</li>
</ul>
<h4> 5.4.0 </h4>
<ul>
<li>Improvement: New default Referrer Policy =&gt; strict-origin-when-cross-origin</li>
<li>Improvement: New default for X-XSS header</li>
<li>Improvement: Dropped Expect-CT header as it's now deprecated, integrated by default in certificates</li>
<li>Improvement: Updated Permissions Policy with improved defaults, updated to new values as currently supported in browsers</li>
<li>Improvement: dropped access-control-allow-origin header, as it can only be used dynamically, which is not feasible in most WP environments</li>
</ul>
<h4> 5.3.6 </h4>
<ul>
<li>Improvement: new languages</li>
<li>Improvement: several small bug fixes and typo's</li>
</ul>
<h4> 5.3.5.1 </h4>
<ul>
<li>Fix: new license check causing continuous license checking, resulting in slow response</li>
</ul>
<h4> 5.3.5 </h4>
<ul>
<li>Improvement: language files</li>
<li>Improvement: some small bug fixes</li>
</ul>
<h4> 5.3.4 </h4>
<ul>
<li>Improvement: language files</li>
<li>Changed: license check using own transient function</li>
</ul>
<h4> 5.3.3 </h4>
<ul>
<li>Removed credentialless from CORP setting as it caused some issues with embedded videos</li>
</ul>
<h4> 5.3.2 </h4>
<ul>
<li>Fix: PHP &lt;7 compatibility</li>
</ul>
<h4> 5.3.1 </h4>
<ul>
<li>Improvement: fix site health still showing header notice if activated in pro</li>
<li>Improvement: set ssl verify to false on failed license check</li>
<li>Improvement: improved CORS settings</li>
</ul>
<h4> 5.3.0 </h4>
<ul>
<li>Improvement: add support for report-to in CSP</li>
<li>Improvement: increase CSP display limit</li>
<li>Improvement: auto update option</li>
</ul>
<h4> 5.2.5 </h4>
<ul>
<li>Improvement: add direct link to permalinks when permalinks notice pops up</li>
<li>Fix: navigation in scan overview</li>
</ul>
<h4> 5.2.4 </h4>
<ul>
<li>Improvement: feedback on not detected headers</li>
</ul>
<h4> 5.2.3.1 </h4>
<ul>
<li>Fix: Rest API and pretty permalinks check inverted, causing false positive notification in dashboard about the permalink structure</li>
</ul>
<h4> 5.2.3 </h4>
<ul>
<li>Improvement: various Content Security Improvements: added override to 20 reporting/100 display limit. Fixed CSS when 100+ pages</li>
<li>Improvement: added default required WordPress rules to Content Security Policy</li>
<li>Improvement: fixed advanced header warning position</li>
<li>Disable scan on invalid license</li>
<li>Improvement: moved recommended security headers notice to free, added override in Pro</li>
<li>Added Cross-Origin resource policy security headers</li>
</ul>
<h4> 5.2.2 </h4>
<ul>
<li>Fix: double quotes in php headers causing issues since recent browser updates</li>
</ul>
<h4> 5.2.1 </h4>
<ul>
<li>Improvement: replaced admin notice on inactivate license</li>
<li>Improvement: move security headers above WP Rocket .htaccess rules to prevent compatibility issues</li>
<li>Improvement: enable auto updates</li>
<li>Improvement: Content Security Policy did not allow for wss:// and ws:// web socket protocol</li>
<li>Improvement: removed trailing slash from rest api</li>
<li>Improvement: added rsssl_pause_after_request_count filter to adjust request count on which CSP pauses</li>
<li>Improvement: fixed some reporting variations</li>
</ul>
<h4> 5.2.0 </h4>
<ul>
<li>Improvement: changed PHP header option to dropdown</li>
<li>Improvement: remove unnecessary parameter in file scan</li>
<li>Improvement: request header origin sometimes returns null. Changing to 'host' resolves the Content Security Policy reporting API in those cases</li>
<li>Improvement: styling issue on scan UX</li>
</ul>
<h4> 5.1.0 </h4>
<ul>
<li>Improvement: comment on multisite environments caused layout issue</li>
</ul>
<h4> 5.0 </h4>
<ul>
<li>Updated translations</li>
</ul>
<h4> 4.1.11 </h4>
<ul>
<li>Fix: for very long .htaccess files, support form in the plugin gave an invalid response. props Vincent</li>
</ul>
<h4> 4.1.10 </h4>
<ul>
<li>Fix: typo in reset license key obfuscation</li>
<li>Translations update</li>
</ul>
<h4> 4.1.9 </h4>
<ul>
<li>Improvement: 'none' or '*' attribute deprecated for Permissions Policy</li>
<li>Improvement: Content Security Policy for unsafe inline</li>
<li>Improvement: Interest Cohort added to permissions policy</li>
</ul>
<h4> 4.1.8 </h4>
<ul>
<li>Fix: PHP headers were set with quotes, causing issues on some servers.</li>
<li>Fix: When switching from &quot;enforce&quot; to &quot;paused&quot;, CSP headers were not removed</li>
<li>Improvement: generalized wrap_header function for more robust header generation</li>
<li>Improvement: disable remove .htaccess headers on activation of PHP headers.</li>
</ul>
<h4> 4.1.7 </h4>
<ul>
<li>Moved secure cookies to free</li>
</ul>
<h4> 4.1.6 </h4>
<ul>
<li>Improved WP Engine compatibility</li>
<li>Improved Content Security Policy, added option to revoke result from overview</li>
<li>Lowered Content Security Policy request limit</li>
</ul>
<h4> 4.1.5 </h4>
<ul>
<li>Fix: set defaults firing even when dependency check not validated</li>
<li>Fix: Constant RSSSL_DOING_CSP not set when running the CSP API</li>
</ul>
<h4> 4.1.4 </h4>
<ul>
<li>Improvement: Added report-paused mode to Content Security Policy generator. Reporting will now automatically pause after 200 requests to prevent high server load</li>
<li>Improvement: Further restricted access to Content Security Policy generator REST API calls</li>
<li>Fix: Default options won't be reconfigured after plugin deactivation/activation</li>
</ul>
<h4> 4.1.3 </h4>
<ul>
<li>Made PHP header option available on all configurations</li>
<li>Improvement: wrap example code in comments</li>
</ul>
<h4> 4.1.2 </h4>
<ul>
<li>Fix: File name in upgrade function</li>
</ul>
<h4> 4.1.1 </h4>
<ul>
<li>Fix: condition for .htaccess writing in combination with do not edit .htaccess option</li>
</ul>
<h4> 4.1.0 </h4>
<ul>
<li>New: PHP headers support for all security headers, autodetecting necessity for NGINX.</li>
<li>New: Changed feature policy into permissions policy.</li>
</ul>
<h4> 4.0.7 </h4>
<ul>
<li>Fix: always activate multisite license for main site url</li>
</ul>
<h4> 4.0.6 </h4>
<ul>
<li>Improvement: moved renamed free folder notice to free plugin</li>
<li>Improvement: PHP 8 compatibility</li>
</ul>
<h4> 4.0.5 </h4>
<ul>
<li>Improvement: 404 redirect check expiration set to one year when test is successful</li>
</ul>
<h4> 4.0.4 </h4>
<ul>
<li>Fix: hsts header on multisite not saving</li>
</ul>
<h4> 4.0.3 </h4>
<ul>
<li>Fix: network settings link</li>
<li>Fix: multisite hsts preload option not saving</li>
<li>Improvement: License notifications. Differ between remaining activations when current site is activated, and when not.</li>
</ul>
<h4> 4.0.2 </h4>
<ul>
<li>Improvement: exclude .htaccess from edits outside settings page</li>
</ul>
<h4> 4.0.1 </h4>
<ul>
<li>Fix: decode license for support ticket</li>
<li>Fix: made some untranslatable strings translatable</li>
</ul>
<h4> 4.0.0 </h4>
<ul>
<li>New user interface</li>
<li>Fix: transient stored with 'WEEK_IN_SECONDS' as string instead of constant</li>
<li>Improvement: notices dashboard, with dismissable notices</li>
<li>Improvement: improved naming of settings, and instructions</li>
<li>Improvement: new translations</li>
<li>Improvement: new fix options in scan</li>
<li>Fix: scan mixed content detection false positive</li>
<li>Improvement: removal of .htaccess lines and wpconfig lines on deactivation</li>
<li>Fix: CSP generation bug for some types</li>
<li>Fix: is_writable check on secure cookies write</li>
<li>Improvement: do not insert default security headers if SSL not enabled yet</li>
</ul>
<h4> 2.1.21 </h4>
<ul>
<li>Fix: return after htaccess is not writable</li>
</ul>
<h4> 2.1.20 </h4>
<ul>
<li>Improvement: add env=https based on apache version, if available.</li>
<li>Improvement: fix both www and non www URL's in elementor</li>
</ul>
<h4> 2.1.19 </h4>
<ul>
<li>Added upgrade script to move HSTS header to security headers block</li>
<li>Prefixed Elementor URL replace option</li>
<li>Updated NGINX/PHP security header notice</li>
<li>Added function_exists() checks</li>
<li>Add style-src-elem and script-src-elem to Content Security Policy</li>
<li>Improved TLS version check to prevent cURL errors on some setups</li>
</ul>
<h4> 2.1.18 </h4>
<ul>
<li>Fix: check if uses_elementor function exists</li>
</ul>
<h4> 2.1.17 </h4>
<ul>
<li>Fix: check 404 homepage redirect issue only on settings page</li>
</ul>
<h4> 2.1.16.1 </h4>
<ul>
<li>Fixed a bug where having allow_url_fopen = 0 in the PHP configuration could cause a PHP warning on the Really Simple SSL dashboard</li>
</ul>
<h4> 2.1.16 </h4>
<ul>
<li>Added a TLS version check</li>
<li>Added a check for a redirect to homepage which can cause mixed content errors on image</li>
</ul>
<h4> 2.1.15</h4>
<ul>
<li>Automatically fix mixed content in Elementor by calling the Elementor replace_urls() function</li>
</ul>
<h4> 2.1.14 </h4>
<ul>
<li>Added Permissions Policy security header</li>
</ul>
<h4> 2.1.13 </h4>
<ul>
<li>Removed env=HTTPS from HSTS preload header as it's not required anymore</li>
</ul>
<h4> 2.1.12 </h4>
<ul>
<li>Fixed a bug where the SSL page could not be opened on multisite installations</li>
</ul>
<h4> 2.1.11 </h4>
<ul>
<li>Fixed some untranslatable strings in security headers help tips</li>
<li>Added German formal translations thanks to Thorsten Wollenhöfer</li>
</ul>
<h4> 2.1.10 </h4>
<ul>
<li>Removed error logging from CSP class</li>
</ul>
<h4> 2.1.9 </h4>
<ul>
<li>Fixed a bug where the rest route wouldn't initialize</li>
</ul>
<h4> 2.1.8 </h4>
<ul>
<li>Fixed a bug which could prevent the Content Security Policy generator endpoint from working on specific setups with a site in a subfolder</li>
</ul>
<h4> 2.1.7 </h4>
<ul>
<li>Tested with WordPress 5.3</li>
</ul>
<h4> 2.1.6 </h4>
<ul>
<li>Enabled some security headers by default.</li>
<li>Show HSTS preload option after enabling HSTS option without reloading page</li>
<li>Updated support tab to pre-fill fields on really-simple-ssl.com, directly sending from support tab resulted in some undelivered e-mails</li>
</ul>
<h4> 2.1.5 </h4>
<ul>
<li>Improved license request caching on settings page</li>
</ul>
<h4> 2.1.4 </h4>
<ul>
<li>Improved support tab request processing</li>
</ul>
<h4> 2.1.3 </h4>
<ul>
<li>Fix: fixed a bug where an empty regex matching group produced false positive http:// scan results</li>
</ul>
<h4> 2.1.2 </h4>
<ul>
<li>Added right-to-left text support</li>
<li>Scan error is now dismissible</li>
<li>Fix: certificate valid to date now only shows when the corresponding option has been enabled</li>
</ul>
<h4> 2.1.1 </h4>
<ul>
<li>Fix: no check for CSP violations when CSP not enabled.</li>
</ul>
<h4> 2.1 </h4>
<ul>
<li>Added Content Security Policy Generator</li>
<li>Added security headers</li>
<li>Fix: moved emptying of results in blocked url's outside of loop</li>
<li>Added Danish, Hungarian and Polish languages</li>
</ul>
<h4> 2.0.24 </h4>
<ul>
<li>Tweak: added support for Bitnami/AWS htaccess.conf</li>
<li>Tweak: updated support notice to send an e-mail manually after no response for 24 hours</li>
</ul>
<h4> 2.0.23 </h4>
<ul>
<li>Tweak: added notices in license tab</li>
<li>Tweak: admin notices will no longer show in Gutenberg edit screen</li>
<li>Tweak: added visual feedback when fixing a scan results item</li>
<li>Tweak: added notice when free plugin has been renamed</li>
<li>Tweak: removed untraceable results from scan results</li>
<li>Tweak: blog count fix for multi-networks</li>
</ul>
<h4> 2.0.22 </h4>
<ul>
<li>Tweak: added caching to redirect_to_http() function to prevent timeouts.</li>
<li>Tweak: updated Portuguese translations.</li>
</ul>
<h4> 2.0.21 </h4>
<ul>
<li>Fix: fixed a bug in the redirect_to_http() function.</li>
</ul>
<h4> 2.0.20 </h4>
<ul>
<li>Added support tab</li>
<li>Tweak: improved mixed content scan regexes</li>
<li>Tweak: added a redirect to http:// check before activating SSL</li>
</ul>
<h4> 2.0.19 </h4>
<ul>
<li>Fix: fixed a bug where ignored url's were being added to the ignored url's array, even if they were already present.</li>
<li>Tweak: the /plugins/, /wp-admin/ and /wp-includes/ directories have been excluded from the scan to increase performance.</li>
</ul>
<h4> 2.0.18 </h4>
<ul>
<li>Fix: html closure in activation message</li>
</ul>
<h4> 2.0.17 </h4>
<ul>
<li>Tweak: removed background running of scan</li>
<li>Tweak: removed HTML from translatable strings</li>
</ul>
<h4> 2.0.16 </h4>
<ul>
<li>Tweak: updated notices to be in line with free notices</li>
</ul>
<h4> 2.0.15 </h4>
<ul>
<li>Tweak: when the scan is finished it shows the text Scan Finished and the progress bar turns green.</li>
<li>Fix: improved external css and js detection regex</li>
</ul>
<h4> 2.0.14 </h4>
<ul>
<li>Fix: run javascript only on own settings page</li>
<li>Fix: ajax url on some functions not correct</li>
<li>Fix: scan results only outputting after a refresh</li>
</ul>
<h4> 2.0.13 </h4>
<ul>
<li>Tweak: updated the scan cron to prevent it from running without first starting the scan manually</li>
</ul>
<h4> 2.0.12 </h4>
<ul>
<li>Updated the scan functionality to use cron</li>
</ul>
<h4> 2.0.11 </h4>
<ul>
<li>Added scan support for the wp_postmeta table</li>
<li>Fix: the show ignored URL's option now works correctly</li>
</ul>
<h4> 2.0.10 </h4>
<ul>
<li>Fix: certificate expiration warning showed even when cert is still a long period valid if no valid response is received.</li>
<li>Fix: config screen still showing error while not blocked URL's were left, because a 0 == 'string' comparison return true.</li>
</ul>
<h4> 2.0.9 </h4>
<ul>
<li>Fix: the plugin will no longer scan its own folder for mixed content</li>
<li>Fix: the scan now contains a number of common false positives in the $safe_domains array to prevent them showing up in the scan</li>
</ul>
<h4> 2.0.8 </h4>
<ul>
<li>Fix: added a notice when the HSTS header is set using PHP on NGINX servers</li>
</ul>
<h4> 2.0.7 </h4>
<ul>
<li>Fix: fixed a bug where the $has_result in the external CSS and JS scan was set to true when there were no results</li>
</ul>
<h4> 2.0.6 </h4>
<ul>
<li>Tweak: added a warning when inserting HSTS headers via PHP</li>
</ul>
<h4> 2.0.5 </h4>
<ul>
<li>Fix: deleted unnecessary transient delete</li>
</ul>
<h4> 2.0.4 </h4>
<ul>
<li>Added support for Widgets in the mixed content scan</li>
<li>Tweak: changed icon classnames from icon to rsssl-icons</li>
</ul>
<h4> 2.0.3 </h4>
<ul>
<li>Tweak: option to disable flushing of rewrite rules on activation</li>
</ul>
<h4> 2.0.2 </h4>
<ul>
<li>Tweak: added secure cookie settings</li>
<li>Tweak: added notice if secure cookie settings couldn't be applied automatically</li>
</ul>
<h4> 2.0.1 </h4>
<ul>
<li>Fix: made the HSTS option available when using the pro plugin on a multisite installation</li>
<li>Tweak: updated the Easy Digital Downloads plugin updater to version 1.6.14</li>
</ul>
<h4> 2.0.0 </h4>
<ul>
<li>Fix: moved scan data to transients, so large scan data arrays won't clutter the database</li>
<li>Updated the 'Scan for issues tab'</li>
<li>Fix: scan results are now shown in a responsive layout</li>
<li>Fix: fixed a bug where protocol independent (//) files and/or stylesheet were not being scanned</li>
</ul>
<h4> 1.0.33 </h4>
<ul>
<li>Fix: adjusted the HSTS header so it will also work in three redirects</li>
<li>Fix: not all hot linked images were matched correctly in the scan</li>
</ul>
<h4> 1.0.32 </h4>
<ul>
<li>Fix: When mixed content fixer is activated, urls are replaced to https, which prevented the scanner from finding these urls. A replace to http fixes this.</li>
<li>Fix: Regex pattern updated to match the pattern in the free version, to prevent cross elemen matches.</li>
<li>Fix: Changed priority of main class instantiation to make sure it instantiates after the core plugin</li>
</ul>
<h4> 1.0.31 </h4>
<ul>
<li>Removed direct redirect to primary URL, as preload list requires a two step redirect, first to https.</li>
</ul>
<h4> 1.0.30 </h4>
<ul>
<li>Fixed issue where preload HSTS setting wasn't saved when HSTS header was already in place.</li>
<li>limited .htaccess edit to settings save action.</li>
</ul>
<h4> 1.0.28 </h4>
<ul>
<li>Added certificate expiration date admin notice</li>
<li>Bypass redirect chain</li>
<li>Fixed SSL per page compatibility issue</li>
</ul>
<h4> 1.0.27 </h4>
<ul>
<li>Added dutch translation</li>
<li>Fixed typo in copyright warning box</li>
<li>Fixed spacing between buttons in copyright warning box</li>
<li>Tweak: added settings link to pro plugin in plugins overview page</li>
<li>Fix: fixed a bug where curl function did not increment iteration, so redirect loops were not circumvented. Use wp_remote_get instead.</li>
</ul>
<h4> 1.0.26 </h4>
<ul>
<li>Added expiration warning functionality: enable it in the settings to get an email if your ssl certificate expires.</li>
<li>Fixed a bug that detected if the HSTS should be added in the .htaccess or in the code</li>
<li>HSTS now available for NGINX as well</li>
<li>Fixed a bug where the last js and css files were not parsed for http urls.</li>
</ul>
<h4> 1.0.25 </h4>
<ul>
<li>css styling fixes
= 1.0.24 =</li>
<li>Bug fix in importer.php</li>
</ul>
<h4> 1.0.23 </h4>
<ul>
<li>Bug fixes
= 1.0.22 =</li>
<li>Added functionality to fix mixed content issues</li>
<li>several bug fixes</li>
</ul>
<h4> 1.0.21 </h4>
<ul>
<li>improve license validation</li>
</ul>
<h4> 1.0.20 </h4>
<ul>
<li>Extended safe list of domains for scan</li>
<li>fixed a bug in licensing for multisite.</li>
<li>fixed a bug where the scan freezed because of not loading external url's</li>
</ul>
<p>= 1.0.19 =
Tweak: added better feedback on license not being activated
Tweak: added HSTS preload list option
Tweak: added mixed content fixer for the back-end</p>
<p>= 1.0.18 =
Tweak: added possibility to deactivate license, for migration purposes
= 1.0.17 =
Tweak: also checking for http links in form actions
Fix: bug caused empty scan results to show, even when no scan had been executed
Fix: last queue item was shown as nr 0, instead of the last nr</p>
<p>= 1.0.16 =
Fix: bug where not all found blocked urls would show up
Fix: also searching for the escaped values of a url in the database.</p>
<p>= 1.0.15 =
Tweak: added option to enable or disable the curl function for file requests</p>
<p>= 1.0.14 =
Added option to disable brute force database scan</p>";}s:7:"banners";O:8:"stdClass":2:{s:4:"high";s:64:"https://really-simple-ssl.com/readmes/assets/banner-1544x500.png";s:3:"low";s:63:"https://really-simple-ssl.com/readmes/assets/banner-772x250.png";}s:5:"icons";a:2:{s:2:"1x";s:87:"https://really-simple-ssl.com/wp-content/uploads/edd/2022/11/icon-256x256-1-128x128.png";s:2:"2x";s:87:"https://really-simple-ssl.com/wp-content/uploads/edd/2022/11/icon-256x256-1-256x256.png";}s:3:"msg";s:33:"No license key has been provided.";s:10:"stable_tag";s:5:"7.0.4";s:6:"tested";s:3:"6.4";s:5:"added";s:10:"2016-03-08";s:11:"description";a:1:{i:0;s:792:"<p>Really Simple SSL Pro offers premium support, HTTP Strict Transport Security, an extensive scan, and more detailed feedback on the configuration page.</p>
<h4> Installation </h4>
<ul>
<li>Install the Really Simple SSL plugin, which is needed with this one.</li>
<li>Go to “plugins” in your Wordpress Dashboard, and click “add new”</li>
<li>Click “upload”, and select the zip file you downloaded after the purchase.</li>
<li>Activate</li>
<li>Navigate to “settings”, “SSL”.</li>
<li>Click “license”</li>
<li>Enter your license key, and activate.</li>
</ul>
<p>For more information: go to the <a href="https://www.really-simple-ssl.com/">website</a>, or
<a href="https://www.really-simple-ssl.com/contact/">contact</a> me if you have any questions or suggestions.</p>";}s:9:"changelog";a:1:{i:0;s:21899:"<h4> 7.0.4 </h4>
<ul>
<li>August 8th 2023</li>
<li>New: Advanced hardening: block admin creation</li>
<li>Improvement: WordPress tested up to 6.3</li>
</ul>
<h4> 7.0.3 </h4>
<ul>
<li>July 25th 2023</li>
<li>Improvement: catch not existing 'SERVER_PROTOCOL'</li>
</ul>
<h4> 7.0.2 </h4>
<ul>
<li>July 6th 2023</li>
<li>Improvement: prevent use of subdirectories in custom login url</li>
</ul>
<h4> 7.0.1 </h4>
<ul>
<li>Fix: change login url functionality not working in 7.0</li>
</ul>
<h4> 7.0.0 </h4>
<ul>
<li>New: Vulnerability Detection is in Beta - <a href="https://really-simple-ssl.com/vulnerability-detection/">Read more</a></li>
</ul>
<h4> 6.2.5 </h4>
<ul>
<li>Improvement: stop trying the database rename if it fails on first attempt</li>
</ul>
<h4> 6.2.4 </h4>
<ul>
<li>New: change login url</li>
<li>Fix: Exclude deprecated x-content-security-policy from header detection</li>
<li>Improvement: Update to functional components Rest API for free core</li>
<li>Improvement: Disable Content Security Policy if the maximum header size has been reached</li>
</ul>
<h4> 6.2.3 </h4>
<ul>
<li>Fix: rename db prefix using not available function</li>
<li>Fix: Exclude deprecated x-content-security-policy from header detection</li>
</ul>
<h4> 6.2.2 </h4>
<ul>
<li>Fix: follow redirects in third party header detection.</li>
</ul>
<h4> 6.2.1 </h4>
<ul>
<li>Fix: prefix replacement in wp-config too broad, causing issues if wp_ is used other then in the prefix.</li>
<li>Fix: Update prefix site_id in user roles when changing the database prefix, to preserve capabilities for users in subsites</li>
</ul>
<h4> 6.2.0 </h4>
<ul>
<li>Improvement: add support for BLOB and Filesystem</li>
<li>Improvement: disable CSP reporting mode paused status when switching to disabled or enforced</li>
</ul>
<h4> 6.1.1 </h4>
<ul>
<li>Improvement: Use ABSPATH constant instead of path when writing path to debug.log</li>
<li>Improvement: Pause CSP reporting after 20 requests, to lower server load</li>
<li>Fix: script-src-elem in Content Security Policy not including source URL</li>
</ul>
<h4> 6.1.0 </h4>
<ul>
<li>Improvement: CSP policy for back and front-end separate</li>
<li>Improvement: also allow non-recommended X-XSS options</li>
<li>Improvement: frame ancestors allow other values than 'none'</li>
</ul>
<h4> 6.0.5 </h4>
<ul>
<li>Fix: Debug.log setting not saving on first save action</li>
</ul>
<h4> 6.0.4 </h4>
<ul>
<li>New: automatically detect wrong Security Header values from other sources, and duplicate headers</li>
<li>Improvement: auto enable Insecure Requests header only when SSL enabled</li>
<li>Improvement: remove unnecessary notices load in licenses block</li>
</ul>
<h4> 6.0.3 </h4>
<ul>
<li>Fix: isset check on $_SERVER['HTTPS'] to support environments where this key is missing</li>
<li>Improvement: add headers_sent() check for situations where the headers already have been sent, possibly due to an error earlier in the system.</li>
<li>Improvement: Update CSP reporting URI on permalink structure change</li>
</ul>
<h4> 6.0.2 </h4>
<ul>
<li>Fix: HSTS not running on hosting environments with load balanced configuration because SSL is not detected</li>
<li>Fix: when wp-config.php is not writable, renaming database prefix could cause tables to get removed</li>
</ul>
<h4> 6.0.1 </h4>
<ul>
<li>Fix: upgrade to 6 logic running more than once</li>
</ul>
<h4> 6.0.0 </h4>
<ul>
<li>Tested up to WordPress 6.1.0</li>
<li>Improvement: User Interface</li>
<li>New: Server Health Check - powered by SSLLabs</li>
<li>New: WordPress Hardening Features</li>
</ul>
<h4> 5.4.0 </h4>
<ul>
<li>Improvement: New default Referrer Policy =&gt; strict-origin-when-cross-origin</li>
<li>Improvement: New default for X-XSS header</li>
<li>Improvement: Dropped Expect-CT header as it's now deprecated, integrated by default in certificates</li>
<li>Improvement: Updated Permissions Policy with improved defaults, updated to new values as currently supported in browsers</li>
<li>Improvement: dropped access-control-allow-origin header, as it can only be used dynamically, which is not feasible in most WP environments</li>
</ul>
<h4> 5.3.6 </h4>
<ul>
<li>Improvement: new languages</li>
<li>Improvement: several small bug fixes and typo's</li>
</ul>
<h4> 5.3.5.1 </h4>
<ul>
<li>Fix: new license check causing continuous license checking, resulting in slow response</li>
</ul>
<h4> 5.3.5 </h4>
<ul>
<li>Improvement: language files</li>
<li>Improvement: some small bug fixes</li>
</ul>
<h4> 5.3.4 </h4>
<ul>
<li>Improvement: language files</li>
<li>Changed: license check using own transient function</li>
</ul>
<h4> 5.3.3 </h4>
<ul>
<li>Removed credentialless from CORP setting as it caused some issues with embedded videos</li>
</ul>
<h4> 5.3.2 </h4>
<ul>
<li>Fix: PHP &lt;7 compatibility</li>
</ul>
<h4> 5.3.1 </h4>
<ul>
<li>Improvement: fix site health still showing header notice if activated in pro</li>
<li>Improvement: set ssl verify to false on failed license check</li>
<li>Improvement: improved CORS settings</li>
</ul>
<h4> 5.3.0 </h4>
<ul>
<li>Improvement: add support for report-to in CSP</li>
<li>Improvement: increase CSP display limit</li>
<li>Improvement: auto update option</li>
</ul>
<h4> 5.2.5 </h4>
<ul>
<li>Improvement: add direct link to permalinks when permalinks notice pops up</li>
<li>Fix: navigation in scan overview</li>
</ul>
<h4> 5.2.4 </h4>
<ul>
<li>Improvement: feedback on not detected headers</li>
</ul>
<h4> 5.2.3.1 </h4>
<ul>
<li>Fix: Rest API and pretty permalinks check inverted, causing false positive notification in dashboard about the permalink structure</li>
</ul>
<h4> 5.2.3 </h4>
<ul>
<li>Improvement: various Content Security Improvements: added override to 20 reporting/100 display limit. Fixed CSS when 100+ pages</li>
<li>Improvement: added default required WordPress rules to Content Security Policy</li>
<li>Improvement: fixed advanced header warning position</li>
<li>Disable scan on invalid license</li>
<li>Improvement: moved recommended security headers notice to free, added override in Pro</li>
<li>Added Cross-Origin resource policy security headers</li>
</ul>
<h4> 5.2.2 </h4>
<ul>
<li>Fix: double quotes in php headers causing issues since recent browser updates</li>
</ul>
<h4> 5.2.1 </h4>
<ul>
<li>Improvement: replaced admin notice on inactivate license</li>
<li>Improvement: move security headers above WP Rocket .htaccess rules to prevent compatibility issues</li>
<li>Improvement: enable auto updates</li>
<li>Improvement: Content Security Policy did not allow for wss:// and ws:// web socket protocol</li>
<li>Improvement: removed trailing slash from rest api</li>
<li>Improvement: added rsssl_pause_after_request_count filter to adjust request count on which CSP pauses</li>
<li>Improvement: fixed some reporting variations</li>
</ul>
<h4> 5.2.0 </h4>
<ul>
<li>Improvement: changed PHP header option to dropdown</li>
<li>Improvement: remove unnecessary parameter in file scan</li>
<li>Improvement: request header origin sometimes returns null. Changing to 'host' resolves the Content Security Policy reporting API in those cases</li>
<li>Improvement: styling issue on scan UX</li>
</ul>
<h4> 5.1.0 </h4>
<ul>
<li>Improvement: comment on multisite environments caused layout issue</li>
</ul>
<h4> 5.0 </h4>
<ul>
<li>Updated translations</li>
</ul>
<h4> 4.1.11 </h4>
<ul>
<li>Fix: for very long .htaccess files, support form in the plugin gave an invalid response. props Vincent</li>
</ul>
<h4> 4.1.10 </h4>
<ul>
<li>Fix: typo in reset license key obfuscation</li>
<li>Translations update</li>
</ul>
<h4> 4.1.9 </h4>
<ul>
<li>Improvement: 'none' or '*' attribute deprecated for Permissions Policy</li>
<li>Improvement: Content Security Policy for unsafe inline</li>
<li>Improvement: Interest Cohort added to permissions policy</li>
</ul>
<h4> 4.1.8 </h4>
<ul>
<li>Fix: PHP headers were set with quotes, causing issues on some servers.</li>
<li>Fix: When switching from &quot;enforce&quot; to &quot;paused&quot;, CSP headers were not removed</li>
<li>Improvement: generalized wrap_header function for more robust header generation</li>
<li>Improvement: disable remove .htaccess headers on activation of PHP headers.</li>
</ul>
<h4> 4.1.7 </h4>
<ul>
<li>Moved secure cookies to free</li>
</ul>
<h4> 4.1.6 </h4>
<ul>
<li>Improved WP Engine compatibility</li>
<li>Improved Content Security Policy, added option to revoke result from overview</li>
<li>Lowered Content Security Policy request limit</li>
</ul>
<h4> 4.1.5 </h4>
<ul>
<li>Fix: set defaults firing even when dependency check not validated</li>
<li>Fix: Constant RSSSL_DOING_CSP not set when running the CSP API</li>
</ul>
<h4> 4.1.4 </h4>
<ul>
<li>Improvement: Added report-paused mode to Content Security Policy generator. Reporting will now automatically pause after 200 requests to prevent high server load</li>
<li>Improvement: Further restricted access to Content Security Policy generator REST API calls</li>
<li>Fix: Default options won't be reconfigured after plugin deactivation/activation</li>
</ul>
<h4> 4.1.3 </h4>
<ul>
<li>Made PHP header option available on all configurations</li>
<li>Improvement: wrap example code in comments</li>
</ul>
<h4> 4.1.2 </h4>
<ul>
<li>Fix: File name in upgrade function</li>
</ul>
<h4> 4.1.1 </h4>
<ul>
<li>Fix: condition for .htaccess writing in combination with do not edit .htaccess option</li>
</ul>
<h4> 4.1.0 </h4>
<ul>
<li>New: PHP headers support for all security headers, autodetecting necessity for NGINX.</li>
<li>New: Changed feature policy into permissions policy.</li>
</ul>
<h4> 4.0.7 </h4>
<ul>
<li>Fix: always activate multisite license for main site url</li>
</ul>
<h4> 4.0.6 </h4>
<ul>
<li>Improvement: moved renamed free folder notice to free plugin</li>
<li>Improvement: PHP 8 compatibility</li>
</ul>
<h4> 4.0.5 </h4>
<ul>
<li>Improvement: 404 redirect check expiration set to one year when test is successful</li>
</ul>
<h4> 4.0.4 </h4>
<ul>
<li>Fix: hsts header on multisite not saving</li>
</ul>
<h4> 4.0.3 </h4>
<ul>
<li>Fix: network settings link</li>
<li>Fix: multisite hsts preload option not saving</li>
<li>Improvement: License notifications. Differ between remaining activations when current site is activated, and when not.</li>
</ul>
<h4> 4.0.2 </h4>
<ul>
<li>Improvement: exclude .htaccess from edits outside settings page</li>
</ul>
<h4> 4.0.1 </h4>
<ul>
<li>Fix: decode license for support ticket</li>
<li>Fix: made some untranslatable strings translatable</li>
</ul>
<h4> 4.0.0 </h4>
<ul>
<li>New user interface</li>
<li>Fix: transient stored with 'WEEK_IN_SECONDS' as string instead of constant</li>
<li>Improvement: notices dashboard, with dismissable notices</li>
<li>Improvement: improved naming of settings, and instructions</li>
<li>Improvement: new translations</li>
<li>Improvement: new fix options in scan</li>
<li>Fix: scan mixed content detection false positive</li>
<li>Improvement: removal of .htaccess lines and wpconfig lines on deactivation</li>
<li>Fix: CSP generation bug for some types</li>
<li>Fix: is_writable check on secure cookies write</li>
<li>Improvement: do not insert default security headers if SSL not enabled yet</li>
</ul>
<h4> 2.1.21 </h4>
<ul>
<li>Fix: return after htaccess is not writable</li>
</ul>
<h4> 2.1.20 </h4>
<ul>
<li>Improvement: add env=https based on apache version, if available.</li>
<li>Improvement: fix both www and non www URL's in elementor</li>
</ul>
<h4> 2.1.19 </h4>
<ul>
<li>Added upgrade script to move HSTS header to security headers block</li>
<li>Prefixed Elementor URL replace option</li>
<li>Updated NGINX/PHP security header notice</li>
<li>Added function_exists() checks</li>
<li>Add style-src-elem and script-src-elem to Content Security Policy</li>
<li>Improved TLS version check to prevent cURL errors on some setups</li>
</ul>
<h4> 2.1.18 </h4>
<ul>
<li>Fix: check if uses_elementor function exists</li>
</ul>
<h4> 2.1.17 </h4>
<ul>
<li>Fix: check 404 homepage redirect issue only on settings page</li>
</ul>
<h4> 2.1.16.1 </h4>
<ul>
<li>Fixed a bug where having allow_url_fopen = 0 in the PHP configuration could cause a PHP warning on the Really Simple SSL dashboard</li>
</ul>
<h4> 2.1.16 </h4>
<ul>
<li>Added a TLS version check</li>
<li>Added a check for a redirect to homepage which can cause mixed content errors on image</li>
</ul>
<h4> 2.1.15</h4>
<ul>
<li>Automatically fix mixed content in Elementor by calling the Elementor replace_urls() function</li>
</ul>
<h4> 2.1.14 </h4>
<ul>
<li>Added Permissions Policy security header</li>
</ul>
<h4> 2.1.13 </h4>
<ul>
<li>Removed env=HTTPS from HSTS preload header as it's not required anymore</li>
</ul>
<h4> 2.1.12 </h4>
<ul>
<li>Fixed a bug where the SSL page could not be opened on multisite installations</li>
</ul>
<h4> 2.1.11 </h4>
<ul>
<li>Fixed some untranslatable strings in security headers help tips</li>
<li>Added German formal translations thanks to Thorsten Wollenhöfer</li>
</ul>
<h4> 2.1.10 </h4>
<ul>
<li>Removed error logging from CSP class</li>
</ul>
<h4> 2.1.9 </h4>
<ul>
<li>Fixed a bug where the rest route wouldn't initialize</li>
</ul>
<h4> 2.1.8 </h4>
<ul>
<li>Fixed a bug which could prevent the Content Security Policy generator endpoint from working on specific setups with a site in a subfolder</li>
</ul>
<h4> 2.1.7 </h4>
<ul>
<li>Tested with WordPress 5.3</li>
</ul>
<h4> 2.1.6 </h4>
<ul>
<li>Enabled some security headers by default.</li>
<li>Show HSTS preload option after enabling HSTS option without reloading page</li>
<li>Updated support tab to pre-fill fields on really-simple-ssl.com, directly sending from support tab resulted in some undelivered e-mails</li>
</ul>
<h4> 2.1.5 </h4>
<ul>
<li>Improved license request caching on settings page</li>
</ul>
<h4> 2.1.4 </h4>
<ul>
<li>Improved support tab request processing</li>
</ul>
<h4> 2.1.3 </h4>
<ul>
<li>Fix: fixed a bug where an empty regex matching group produced false positive http:// scan results</li>
</ul>
<h4> 2.1.2 </h4>
<ul>
<li>Added right-to-left text support</li>
<li>Scan error is now dismissible</li>
<li>Fix: certificate valid to date now only shows when the corresponding option has been enabled</li>
</ul>
<h4> 2.1.1 </h4>
<ul>
<li>Fix: no check for CSP violations when CSP not enabled.</li>
</ul>
<h4> 2.1 </h4>
<ul>
<li>Added Content Security Policy Generator</li>
<li>Added security headers</li>
<li>Fix: moved emptying of results in blocked url's outside of loop</li>
<li>Added Danish, Hungarian and Polish languages</li>
</ul>
<h4> 2.0.24 </h4>
<ul>
<li>Tweak: added support for Bitnami/AWS htaccess.conf</li>
<li>Tweak: updated support notice to send an e-mail manually after no response for 24 hours</li>
</ul>
<h4> 2.0.23 </h4>
<ul>
<li>Tweak: added notices in license tab</li>
<li>Tweak: admin notices will no longer show in Gutenberg edit screen</li>
<li>Tweak: added visual feedback when fixing a scan results item</li>
<li>Tweak: added notice when free plugin has been renamed</li>
<li>Tweak: removed untraceable results from scan results</li>
<li>Tweak: blog count fix for multi-networks</li>
</ul>
<h4> 2.0.22 </h4>
<ul>
<li>Tweak: added caching to redirect_to_http() function to prevent timeouts.</li>
<li>Tweak: updated Portuguese translations.</li>
</ul>
<h4> 2.0.21 </h4>
<ul>
<li>Fix: fixed a bug in the redirect_to_http() function.</li>
</ul>
<h4> 2.0.20 </h4>
<ul>
<li>Added support tab</li>
<li>Tweak: improved mixed content scan regexes</li>
<li>Tweak: added a redirect to http:// check before activating SSL</li>
</ul>
<h4> 2.0.19 </h4>
<ul>
<li>Fix: fixed a bug where ignored url's were being added to the ignored url's array, even if they were already present.</li>
<li>Tweak: the /plugins/, /wp-admin/ and /wp-includes/ directories have been excluded from the scan to increase performance.</li>
</ul>
<h4> 2.0.18 </h4>
<ul>
<li>Fix: html closure in activation message</li>
</ul>
<h4> 2.0.17 </h4>
<ul>
<li>Tweak: removed background running of scan</li>
<li>Tweak: removed HTML from translatable strings</li>
</ul>
<h4> 2.0.16 </h4>
<ul>
<li>Tweak: updated notices to be in line with free notices</li>
</ul>
<h4> 2.0.15 </h4>
<ul>
<li>Tweak: when the scan is finished it shows the text Scan Finished and the progress bar turns green.</li>
<li>Fix: improved external css and js detection regex</li>
</ul>
<h4> 2.0.14 </h4>
<ul>
<li>Fix: run javascript only on own settings page</li>
<li>Fix: ajax url on some functions not correct</li>
<li>Fix: scan results only outputting after a refresh</li>
</ul>
<h4> 2.0.13 </h4>
<ul>
<li>Tweak: updated the scan cron to prevent it from running without first starting the scan manually</li>
</ul>
<h4> 2.0.12 </h4>
<ul>
<li>Updated the scan functionality to use cron</li>
</ul>
<h4> 2.0.11 </h4>
<ul>
<li>Added scan support for the wp_postmeta table</li>
<li>Fix: the show ignored URL's option now works correctly</li>
</ul>
<h4> 2.0.10 </h4>
<ul>
<li>Fix: certificate expiration warning showed even when cert is still a long period valid if no valid response is received.</li>
<li>Fix: config screen still showing error while not blocked URL's were left, because a 0 == 'string' comparison return true.</li>
</ul>
<h4> 2.0.9 </h4>
<ul>
<li>Fix: the plugin will no longer scan its own folder for mixed content</li>
<li>Fix: the scan now contains a number of common false positives in the $safe_domains array to prevent them showing up in the scan</li>
</ul>
<h4> 2.0.8 </h4>
<ul>
<li>Fix: added a notice when the HSTS header is set using PHP on NGINX servers</li>
</ul>
<h4> 2.0.7 </h4>
<ul>
<li>Fix: fixed a bug where the $has_result in the external CSS and JS scan was set to true when there were no results</li>
</ul>
<h4> 2.0.6 </h4>
<ul>
<li>Tweak: added a warning when inserting HSTS headers via PHP</li>
</ul>
<h4> 2.0.5 </h4>
<ul>
<li>Fix: deleted unnecessary transient delete</li>
</ul>
<h4> 2.0.4 </h4>
<ul>
<li>Added support for Widgets in the mixed content scan</li>
<li>Tweak: changed icon classnames from icon to rsssl-icons</li>
</ul>
<h4> 2.0.3 </h4>
<ul>
<li>Tweak: option to disable flushing of rewrite rules on activation</li>
</ul>
<h4> 2.0.2 </h4>
<ul>
<li>Tweak: added secure cookie settings</li>
<li>Tweak: added notice if secure cookie settings couldn't be applied automatically</li>
</ul>
<h4> 2.0.1 </h4>
<ul>
<li>Fix: made the HSTS option available when using the pro plugin on a multisite installation</li>
<li>Tweak: updated the Easy Digital Downloads plugin updater to version 1.6.14</li>
</ul>
<h4> 2.0.0 </h4>
<ul>
<li>Fix: moved scan data to transients, so large scan data arrays won't clutter the database</li>
<li>Updated the 'Scan for issues tab'</li>
<li>Fix: scan results are now shown in a responsive layout</li>
<li>Fix: fixed a bug where protocol independent (//) files and/or stylesheet were not being scanned</li>
</ul>
<h4> 1.0.33 </h4>
<ul>
<li>Fix: adjusted the HSTS header so it will also work in three redirects</li>
<li>Fix: not all hot linked images were matched correctly in the scan</li>
</ul>
<h4> 1.0.32 </h4>
<ul>
<li>Fix: When mixed content fixer is activated, urls are replaced to https, which prevented the scanner from finding these urls. A replace to http fixes this.</li>
<li>Fix: Regex pattern updated to match the pattern in the free version, to prevent cross elemen matches.</li>
<li>Fix: Changed priority of main class instantiation to make sure it instantiates after the core plugin</li>
</ul>
<h4> 1.0.31 </h4>
<ul>
<li>Removed direct redirect to primary URL, as preload list requires a two step redirect, first to https.</li>
</ul>
<h4> 1.0.30 </h4>
<ul>
<li>Fixed issue where preload HSTS setting wasn't saved when HSTS header was already in place.</li>
<li>limited .htaccess edit to settings save action.</li>
</ul>
<h4> 1.0.28 </h4>
<ul>
<li>Added certificate expiration date admin notice</li>
<li>Bypass redirect chain</li>
<li>Fixed SSL per page compatibility issue</li>
</ul>
<h4> 1.0.27 </h4>
<ul>
<li>Added dutch translation</li>
<li>Fixed typo in copyright warning box</li>
<li>Fixed spacing between buttons in copyright warning box</li>
<li>Tweak: added settings link to pro plugin in plugins overview page</li>
<li>Fix: fixed a bug where curl function did not increment iteration, so redirect loops were not circumvented. Use wp_remote_get instead.</li>
</ul>
<h4> 1.0.26 </h4>
<ul>
<li>Added expiration warning functionality: enable it in the settings to get an email if your ssl certificate expires.</li>
<li>Fixed a bug that detected if the HSTS should be added in the .htaccess or in the code</li>
<li>HSTS now available for NGINX as well</li>
<li>Fixed a bug where the last js and css files were not parsed for http urls.</li>
</ul>
<h4> 1.0.25 </h4>
<ul>
<li>css styling fixes
= 1.0.24 =</li>
<li>Bug fix in importer.php</li>
</ul>
<h4> 1.0.23 </h4>
<ul>
<li>Bug fixes
= 1.0.22 =</li>
<li>Added functionality to fix mixed content issues</li>
<li>several bug fixes</li>
</ul>
<h4> 1.0.21 </h4>
<ul>
<li>improve license validation</li>
</ul>
<h4> 1.0.20 </h4>
<ul>
<li>Extended safe list of domains for scan</li>
<li>fixed a bug in licensing for multisite.</li>
<li>fixed a bug where the scan freezed because of not loading external url's</li>
</ul>
<p>= 1.0.19 =
Tweak: added better feedback on license not being activated
Tweak: added HSTS preload list option
Tweak: added mixed content fixer for the back-end</p>
<p>= 1.0.18 =
Tweak: added possibility to deactivate license, for migration purposes
= 1.0.17 =
Tweak: also checking for http links in form actions
Fix: bug caused empty scan results to show, even when no scan had been executed
Fix: last queue item was shown as nr 0, instead of the last nr</p>
<p>= 1.0.16 =
Fix: bug where not all found blocked urls would show up
Fix: also searching for the escaped values of a url in the database.</p>
<p>= 1.0.15 =
Tweak: added option to enable or disable the curl function for file requests</p>
<p>= 1.0.14 =
Added option to disable brute force database scan</p>";}s:6:"plugin";s:47:"really-simple-ssl-pro/really-simple-ssl-pro.php";s:2:"id";s:47:"really-simple-ssl-pro/really-simple-ssl-pro.php";}}s:12:"translations";a:0:{}s:9:"no_update";a:13:{s:30:"advanced-custom-fields/acf.php";O:8:"stdClass":10:{s:2:"id";s:36:"w.org/plugins/advanced-custom-fields";s:4:"slug";s:22:"advanced-custom-fields";s:6:"plugin";s:30:"advanced-custom-fields/acf.php";s:11:"new_version";s:5:"6.2.0";s:3:"url";s:53:"https://wordpress.org/plugins/advanced-custom-fields/";s:7:"package";s:71:"https://downloads.wordpress.org/plugin/advanced-custom-fields.6.2.0.zip";s:5:"icons";a:2:{s:2:"2x";s:75:"https://ps.w.org/advanced-custom-fields/assets/icon-256x256.png?rev=1082746";s:2:"1x";s:75:"https://ps.w.org/advanced-custom-fields/assets/icon-128x128.png?rev=1082746";}s:7:"banners";a:2:{s:2:"2x";s:78:"https://ps.w.org/advanced-custom-fields/assets/banner-1544x500.jpg?rev=2892919";s:2:"1x";s:77:"https://ps.w.org/advanced-custom-fields/assets/banner-772x250.jpg?rev=2892919";}s:11:"banners_rtl";a:0:{}s:8:"requires";s:3:"5.8";}s:19:"akismet/akismet.php";O:8:"stdClass":10:{s:2:"id";s:21:"w.org/plugins/akismet";s:4:"slug";s:7:"akismet";s:6:"plugin";s:19:"akismet/akismet.php";s:11:"new_version";s:3:"5.2";s:3:"url";s:38:"https://wordpress.org/plugins/akismet/";s:7:"package";s:54:"https://downloads.wordpress.org/plugin/akismet.5.2.zip";s:5:"icons";a:2:{s:2:"2x";s:60:"https://ps.w.org/akismet/assets/icon-256x256.png?rev=2818463";s:2:"1x";s:60:"https://ps.w.org/akismet/assets/icon-128x128.png?rev=2818463";}s:7:"banners";a:2:{s:2:"2x";s:63:"https://ps.w.org/akismet/assets/banner-1544x500.png?rev=2900731";s:2:"1x";s:62:"https://ps.w.org/akismet/assets/banner-772x250.png?rev=2900731";}s:11:"banners_rtl";a:0:{}s:8:"requires";s:3:"5.8";}s:33:"classic-editor/classic-editor.php";O:8:"stdClass":10:{s:2:"id";s:28:"w.org/plugins/classic-editor";s:4:"slug";s:14:"classic-editor";s:6:"plugin";s:33:"classic-editor/classic-editor.php";s:11:"new_version";s:5:"1.6.3";s:3:"url";s:45:"https://wordpress.org/plugins/classic-editor/";s:7:"package";s:63:"https://downloads.wordpress.org/plugin/classic-editor.1.6.3.zip";s:5:"icons";a:2:{s:2:"2x";s:67:"https://ps.w.org/classic-editor/assets/icon-256x256.png?rev=1998671";s:2:"1x";s:67:"https://ps.w.org/classic-editor/assets/icon-128x128.png?rev=1998671";}s:7:"banners";a:2:{s:2:"2x";s:70:"https://ps.w.org/classic-editor/assets/banner-1544x500.png?rev=1998671";s:2:"1x";s:69:"https://ps.w.org/classic-editor/assets/banner-772x250.png?rev=1998676";}s:11:"banners_rtl";a:0:{}s:8:"requires";s:3:"4.9";}s:43:"custom-post-type-ui/custom-post-type-ui.php";O:8:"stdClass":10:{s:2:"id";s:33:"w.org/plugins/custom-post-type-ui";s:4:"slug";s:19:"custom-post-type-ui";s:6:"plugin";s:43:"custom-post-type-ui/custom-post-type-ui.php";s:11:"new_version";s:6:"1.14.0";s:3:"url";s:50:"https://wordpress.org/plugins/custom-post-type-ui/";s:7:"package";s:69:"https://downloads.wordpress.org/plugin/custom-post-type-ui.1.14.0.zip";s:5:"icons";a:2:{s:2:"2x";s:72:"https://ps.w.org/custom-post-type-ui/assets/icon-256x256.png?rev=2744389";s:2:"1x";s:72:"https://ps.w.org/custom-post-type-ui/assets/icon-128x128.png?rev=2744389";}s:7:"banners";a:2:{s:2:"2x";s:75:"https://ps.w.org/custom-post-type-ui/assets/banner-1544x500.png?rev=2744389";s:2:"1x";s:74:"https://ps.w.org/custom-post-type-ui/assets/banner-772x250.png?rev=2744389";}s:11:"banners_rtl";a:0:{}s:8:"requires";s:3:"5.9";}s:35:"litespeed-cache/litespeed-cache.php";O:8:"stdClass":10:{s:2:"id";s:29:"w.org/plugins/litespeed-cache";s:4:"slug";s:15:"litespeed-cache";s:6:"plugin";s:35:"litespeed-cache/litespeed-cache.php";s:11:"new_version";s:3:"5.6";s:3:"url";s:46:"https://wordpress.org/plugins/litespeed-cache/";s:7:"package";s:62:"https://downloads.wordpress.org/plugin/litespeed-cache.5.6.zip";s:5:"icons";a:2:{s:2:"2x";s:68:"https://ps.w.org/litespeed-cache/assets/icon-256x256.png?rev=2554181";s:2:"1x";s:68:"https://ps.w.org/litespeed-cache/assets/icon-128x128.png?rev=2554181";}s:7:"banners";a:2:{s:2:"2x";s:71:"https://ps.w.org/litespeed-cache/assets/banner-1544x500.png?rev=2554181";s:2:"1x";s:70:"https://ps.w.org/litespeed-cache/assets/banner-772x250.png?rev=2554181";}s:11:"banners_rtl";a:0:{}s:8:"requires";s:3:"4.0";}s:50:"official-facebook-pixel/facebook-for-wordpress.php";O:8:"stdClass":10:{s:2:"id";s:37:"w.org/plugins/official-facebook-pixel";s:4:"slug";s:23:"official-facebook-pixel";s:6:"plugin";s:50:"official-facebook-pixel/facebook-for-wordpress.php";s:11:"new_version";s:6:"3.0.13";s:3:"url";s:54:"https://wordpress.org/plugins/official-facebook-pixel/";s:7:"package";s:73:"https://downloads.wordpress.org/plugin/official-facebook-pixel.3.0.13.zip";s:5:"icons";a:2:{s:2:"1x";s:68:"https://ps.w.org/official-facebook-pixel/assets/icon.svg?rev=2452179";s:3:"svg";s:68:"https://ps.w.org/official-facebook-pixel/assets/icon.svg?rev=2452179";}s:7:"banners";a:0:{}s:11:"banners_rtl";a:0:{}s:8:"requires";s:3:"5.7";}s:21:"pixproof/pixproof.php";O:8:"stdClass":10:{s:2:"id";s:22:"w.org/plugins/pixproof";s:4:"slug";s:8:"pixproof";s:6:"plugin";s:21:"pixproof/pixproof.php";s:11:"new_version";s:5:"2.0.1";s:3:"url";s:39:"https://wordpress.org/plugins/pixproof/";s:7:"package";s:57:"https://downloads.wordpress.org/plugin/pixproof.2.0.1.zip";s:5:"icons";a:2:{s:2:"2x";s:60:"https://ps.w.org/pixproof/assets/icon-256x256.png?rev=984315";s:2:"1x";s:60:"https://ps.w.org/pixproof/assets/icon-256x256.png?rev=984315";}s:7:"banners";a:0:{}s:11:"banners_rtl";a:0:{}s:8:"requires";s:5:"4.9.9";}s:31:"presto-player/presto-player.php";O:8:"stdClass":10:{s:2:"id";s:27:"w.org/plugins/presto-player";s:4:"slug";s:13:"presto-player";s:6:"plugin";s:31:"presto-player/presto-player.php";s:11:"new_version";s:6:"1.14.1";s:3:"url";s:44:"https://wordpress.org/plugins/presto-player/";s:7:"package";s:63:"https://downloads.wordpress.org/plugin/presto-player.1.14.1.zip";s:5:"icons";a:2:{s:2:"2x";s:66:"https://ps.w.org/presto-player/assets/icon-256x256.png?rev=2831276";s:2:"1x";s:66:"https://ps.w.org/presto-player/assets/icon-128x128.png?rev=2831276";}s:7:"banners";a:2:{s:2:"2x";s:69:"https://ps.w.org/presto-player/assets/banner-1544x500.jpg?rev=2831276";s:2:"1x";s:68:"https://ps.w.org/presto-player/assets/banner-772x250.jpg?rev=2831276";}s:11:"banners_rtl";a:2:{s:2:"2x";s:73:"https://ps.w.org/presto-player/assets/banner-1544x500-rtl.png?rev=2831276";s:2:"1x";s:72:"https://ps.w.org/presto-player/assets/banner-772x250-rtl.png?rev=2831276";}s:8:"requires";s:3:"5.6";}s:30:"seo-by-rank-math/rank-math.php";O:8:"stdClass":10:{s:2:"id";s:30:"w.org/plugins/seo-by-rank-math";s:4:"slug";s:16:"seo-by-rank-math";s:6:"plugin";s:30:"seo-by-rank-math/rank-math.php";s:11:"new_version";s:9:"1.0.121.1";s:3:"url";s:47:"https://wordpress.org/plugins/seo-by-rank-math/";s:7:"package";s:69:"https://downloads.wordpress.org/plugin/seo-by-rank-math.1.0.121.1.zip";s:5:"icons";a:2:{s:2:"1x";s:61:"https://ps.w.org/seo-by-rank-math/assets/icon.svg?rev=2848340";s:3:"svg";s:61:"https://ps.w.org/seo-by-rank-math/assets/icon.svg?rev=2848340";}s:7:"banners";a:2:{s:2:"2x";s:72:"https://ps.w.org/seo-by-rank-math/assets/banner-1544x500.png?rev=2639678";s:2:"1x";s:71:"https://ps.w.org/seo-by-rank-math/assets/banner-772x250.png?rev=2639678";}s:11:"banners_rtl";a:0:{}s:8:"requires";s:3:"5.6";}s:47:"really-simple-ssl/rlrsssl-really-simple-ssl.php";O:8:"stdClass":10:{s:2:"id";s:31:"w.org/plugins/really-simple-ssl";s:4:"slug";s:17:"really-simple-ssl";s:6:"plugin";s:47:"really-simple-ssl/rlrsssl-really-simple-ssl.php";s:11:"new_version";s:5:"7.0.8";s:3:"url";s:48:"https://wordpress.org/plugins/really-simple-ssl/";s:7:"package";s:66:"https://downloads.wordpress.org/plugin/really-simple-ssl.7.0.8.zip";s:5:"icons";a:2:{s:2:"2x";s:70:"https://ps.w.org/really-simple-ssl/assets/icon-256x256.png?rev=2839720";s:2:"1x";s:70:"https://ps.w.org/really-simple-ssl/assets/icon-128x128.png?rev=2839720";}s:7:"banners";a:2:{s:2:"2x";s:73:"https://ps.w.org/really-simple-ssl/assets/banner-1544x500.png?rev=2810049";s:2:"1x";s:72:"https://ps.w.org/really-simple-ssl/assets/banner-772x250.png?rev=2810049";}s:11:"banners_rtl";a:0:{}s:8:"requires";s:3:"5.8";}s:45:"simple-local-avatars/simple-local-avatars.php";O:8:"stdClass":10:{s:2:"id";s:34:"w.org/plugins/simple-local-avatars";s:4:"slug";s:20:"simple-local-avatars";s:6:"plugin";s:45:"simple-local-avatars/simple-local-avatars.php";s:11:"new_version";s:5:"2.7.5";s:3:"url";s:51:"https://wordpress.org/plugins/simple-local-avatars/";s:7:"package";s:69:"https://downloads.wordpress.org/plugin/simple-local-avatars.2.7.5.zip";s:5:"icons";a:2:{s:2:"1x";s:65:"https://ps.w.org/simple-local-avatars/assets/icon.svg?rev=2783752";s:3:"svg";s:65:"https://ps.w.org/simple-local-avatars/assets/icon.svg?rev=2783752";}s:7:"banners";a:2:{s:2:"2x";s:76:"https://ps.w.org/simple-local-avatars/assets/banner-1544x500.jpg?rev=2406995";s:2:"1x";s:75:"https://ps.w.org/simple-local-avatars/assets/banner-772x250.jpg?rev=2406995";}s:11:"banners_rtl";a:0:{}s:8:"requires";s:3:"5.7";}s:27:"svg-support/svg-support.php";O:8:"stdClass":10:{s:2:"id";s:25:"w.org/plugins/svg-support";s:4:"slug";s:11:"svg-support";s:6:"plugin";s:27:"svg-support/svg-support.php";s:11:"new_version";s:5:"2.5.5";s:3:"url";s:42:"https://wordpress.org/plugins/svg-support/";s:7:"package";s:60:"https://downloads.wordpress.org/plugin/svg-support.2.5.5.zip";s:5:"icons";a:2:{s:2:"1x";s:56:"https://ps.w.org/svg-support/assets/icon.svg?rev=1417738";s:3:"svg";s:56:"https://ps.w.org/svg-support/assets/icon.svg?rev=1417738";}s:7:"banners";a:2:{s:2:"2x";s:67:"https://ps.w.org/svg-support/assets/banner-1544x500.jpg?rev=1215377";s:2:"1x";s:66:"https://ps.w.org/svg-support/assets/banner-772x250.jpg?rev=1215377";}s:11:"banners_rtl";a:0:{}s:8:"requires";s:3:"4.8";}s:29:"wp-mail-smtp/wp_mail_smtp.php";O:8:"stdClass":10:{s:2:"id";s:26:"w.org/plugins/wp-mail-smtp";s:4:"slug";s:12:"wp-mail-smtp";s:6:"plugin";s:29:"wp-mail-smtp/wp_mail_smtp.php";s:11:"new_version";s:5:"3.8.2";s:3:"url";s:43:"https://wordpress.org/plugins/wp-mail-smtp/";s:7:"package";s:61:"https://downloads.wordpress.org/plugin/wp-mail-smtp.3.8.2.zip";s:5:"icons";a:2:{s:2:"2x";s:65:"https://ps.w.org/wp-mail-smtp/assets/icon-256x256.png?rev=1755440";s:2:"1x";s:65:"https://ps.w.org/wp-mail-smtp/assets/icon-128x128.png?rev=1755440";}s:7:"banners";a:2:{s:2:"2x";s:68:"https://ps.w.org/wp-mail-smtp/assets/banner-1544x500.jpg?rev=2811094";s:2:"1x";s:67:"https://ps.w.org/wp-mail-smtp/assets/banner-772x250.jpg?rev=2811094";}s:11:"banners_rtl";a:0:{}s:8:"requires";s:3:"5.2";}}s:7:"checked";a:21:{s:30:"advanced-custom-fields/acf.php";s:5:"6.2.0";s:19:"akismet/akismet.php";s:3:"5.2";s:33:"classic-editor/classic-editor.php";s:5:"1.6.3";s:43:"custom-post-type-ui/custom-post-type-ui.php";s:6:"1.14.0";s:23:"hostinger/hostinger.php";s:5:"1.4.0";s:35:"litespeed-cache/litespeed-cache.php";s:3:"5.6";s:50:"official-facebook-pixel/facebook-for-wordpress.php";s:6:"3.0.13";s:21:"pixproof/pixproof.php";s:5:"2.0.1";s:31:"presto-player/presto-player.php";s:6:"1.14.1";s:30:"seo-by-rank-math/rank-math.php";s:9:"1.0.121.1";s:38:"seo-by-rank-math-pro/rank-math-pro.php";s:6:"3.0.40";s:47:"really-simple-ssl/rlrsssl-really-simple-ssl.php";s:5:"7.0.8";s:47:"really-simple-ssl-pro/really-simple-ssl-pro.php";s:5:"7.0.3";s:45:"simple-local-avatars/simple-local-avatars.php";s:5:"2.7.5";s:27:"svg-support/svg-support.php";s:5:"2.5.5";s:19:"us-core/us-core.php";s:6:"8.17.3";s:19:"wpforms/wpforms.php";s:7:"1.8.2.2";s:39:"wpforms-mailchimp/wpforms-mailchimp.php";s:5:"2.2.0";s:53:"wpforms-post-submissions/wpforms-post-submissions.php";s:5:"1.4.0";s:41:"wpforms-signatures/wpforms-signatures.php";s:5:"1.3.0";s:29:"wp-mail-smtp/wp_mail_smtp.php";s:5:"3.8.2";}}