WP Cerber Security 9.6.11

As we wrap up 2025, we’re bringing you one final gift and it’s not a pair of socks [!🧦] . Before you head off to your holiday festivities, we have implemented multiple architectural improvements to WP Cerber to ensure your site remains resilient while you’re busy with the eggnog. If automatic updates are enabled in the plugin settings, this release will be installed automatically on your website.

Better browser detection

Understanding who is accessing your WordPress site is a cornerstone of effective incident analysis. To make this process more reliable, we have replaced legacy browser detection functions with a new, deterministic User-Agent parser. This change moves us away from “best-guess” identification toward a more disciplined classification system for traffic monitoring.

This new architecture provides deep visibility into the growing landscape of AI and LLM entities, allowing you to monitor potential cyber threats and specifically identify scrapers like GPTBot, ClaudeBot, and Applebot-Extended. It goes beyond simple bot detection by also validating critical service agents from platforms like PayPal IPN and Stripe, mitigating the risk of vital payment webhooks being mistaken for security risks. Additionally, we’ve improved the classification of automation frameworks and scripting tools like python-requests, curl, and Wget, giving you a comprehensive view of actors interacting with your WordPress environment.

Professional-grade translations

We believe a professional WordPress security plugin should speak your language clearly and precisely, especially when configuring layered security and handling critical alerts. We’ve completed a deep cleanup of how the plugin handles different languages to resolve long-standing grammar issues and fragmented phrases that occasionally affected the professional feel of the interface.

A major focus of this update was ensuring the plugin handles quantities and word order more accurately for the global WordPress community. We’ve addressed the logic for plural forms so that messages like “1 attempt” or “10 attempts” now follow the grammatical rules of your specific language, reducing distracting linguistic errors. Beyond simple translations, the system now uses solid, complete phrases instead of stitching together word fragments, resulting in a cleaner dashboard experience. This updated structure also grants our translators the flexibility to adjust the syntax for languages like Japanese or German, ensuring that security alerts read naturally without breaking the underlying logic.

Hardening against DoS vectors

In this release, we have optimized the plugin .htaccess rules to mitigate CVE-2018-6389. This improvement helps protect your site from Denial of Service attacks that exploit how WordPress handles script and style loading. The protection operates quietly at the server level, strengthening resilience without requiring additional configuration.

Getting the details right

For us, these updates represent a commitment to achieving a higher standard of technical precision in WordPress protection. As this is our final release of the year, we want to wish you a peaceful and secure holiday season. We’ve done the heavy lifting so you can enjoy the fireworks 🎇 without checking your logs every five minutes 🤯

How to make WP Cerber speak your language

1. Go to the main plugin settings and enable “Use WP Cerber’s plugin repository”.
2. Scroll down to “Language for the plugin admin pages” and select your language from the drop-down list.
3. Click Save Changes.

Within a few minutes, the selected language will be installed and activated. If you encounter any issues activating a new language, ensure that outgoing connections are not blocked via the WP_HTTP_BLOCK_EXTERNAL constant in your wp-config.php file. If they are, add "downloads.wpcerber.com" to the WP_ACCESSIBLE_HOSTS constant.

🧑‍🎄 Happy Holidays and a Secure New Year! 🧑‍🎄

Have any questions?

If you have a question regarding WordPress security or WP Cerber, leave them in the comments section below or get them answered here: G2.COM/WPCerber.