Development version 6.1.3

Improvements

The Traffic Inspector algorithm detects malformed and double extensions like .php.jpg more precisely.
Access Lists now accept IPv6 address in any form. You can enter a shortened IPv6 (short form) or a full IPv6. A full IPv6 will be shortened to the short IPv6 address representation.

Bugs fixed

If REST API is blocked, a request with specially malformed URL can bypass protection.
An IPv4 range in the Access Lists might not work as expected, depending on server/site settings.

Use this link to download the development version of the plugin:

If you have a question regarding WordPress security or WP Cerber, leave them in the comments section below or get them answered on the community forum.