Development Versions

Development version 6.1.3


  • The Traffic Inspector algorithm detects malformed and double extensions like .php.jpg more precisely.
  • Access Lists now accept IPv6 address in any form. You can enter a shortened IPv6 (short form) or a full IPv6. A full IPv6 will be shortened to the short IPv6 address representation.

Bugs fixed

  • If REST API is blocked, a request with specially malformed URL can bypass protection.
  • An IPv4 range in the Access Lists might not work as expected, depending on server/site settings.

Use this link to download the development version of the plugin:

Have any questions?

If you have a question regarding WordPress security or WP Cerber, leave them in the comments section below or get them answered on the community forum.

Spotted a bug or glitch?

We’d love to fix it! Share your bug discoveries with us here: Bug Report.

I'm a software engineer and team lead at Cerber Tech. I started coding in 1993 on IBM System/370 and today software engineering at Cerber Tech is how I make my living.

View Comments
There are currently no comments.