WP Cerber Security 8.4
Today’s cybersecurity landscape is changing and cybercrime is evolving. So it’s crucial to constantly improve our security arsenal. Every new release we make WP Cerber even stronger implementing multiple improvements to its security algorithms, some of them are visible, some of them are hidden under the hood.
More flexible country-based access policies
Get more flexible and granular control over which countries are permitted for logging into your WordPress. Now the country-based GEO access control engine allows configuring role-based access rules likewise the advanced role-based 2FA policies. In short, you can configure a list of countries from which users are permitted to log in for each role individually. For instance, administrators can only log in from Australia and Germany, while the rest of the users can log in from the US, Canada, and Brazil.
Role-based rules have higher priority than common rules for All Users. For IP addresses in the White IP Access List none of country-based GEO rules are applied.
Configuring country-based GEO access policies for WordPress
If a login attempt is blocked due to a country restriction, in the Activity log that attempt is marked as “Blocked by country rule”.
Hint: To block access to the WordPress dashboard for logged in users, configure a policy on the User Policies admin page.
Users’ sessions management done right
WordPress does not have natively any feature to monitor and manage users’ sessions. But with WP Cerber session manager you get a powerful tool to manage them and control logged in users effectively.
Use bulk actions to terminate selected users’ sessions or to block a selected user. Use links in a row to navigate to the user activity log or to the log of all requests from IP address that was used for logging into the website. If you enable Cerber.Hub you can manage users’ sessions on any number of websites from one WordPress dashboard switching between them in a click.
Managing WordPress Users’ Sessions
Other improvements and updates
Access to users’ data via WordPress REST API is always granted for administrator accounts, meaning if “Stop user enumeration” via REST API is enabled, all users with the administrator role always have access to users’ data.
The custom login page feature has been updated to eliminate possible conflicts with themes and other plugins.
Handling of file system errors which can occur during malware scanning and integrity checking has been improved: additional diagnostic information is being logged to Cerber’s debug log if “Enable diagnostic logging” in the scanner settings is turned on.
Improved compatibility with operating systems that natively doesn’t support the PHP GLOB_BRACE constant. On such systems using the integrity checker produced a warning message in the server log: PHP Warning: Use of undefined constant GLOB_BRACE – assumed ‘GLOB_BRACE’.
What’s WP Cerber Security, anyway?
It’s a comprehensive, five-star rated, and always-improving security solution for WordPress. The plugin protects websites with advanced web application firewall (WAF), malware scanner, and anti-spam engine. Reinforced with analytical data from a specialized Cerber Security Cloud (CSC) in the professional version it provides a phenomenal level of security saving time and money for website owners.
CSC monitors cybercriminal activity around the worlds and maintains a real-time database of malicious IP addresses known for disseminating spam, attacking and penetrating websites, attempting to exploit software vulnerabilities and other similar forms of malicious activity.
See also: What was new in the previous version of the plugin
Wonder what WP Cerber got in the previous version?
Review the release note for WP Cerber Security 8.3.
How to install WP Cerber on your WordPress
Enable automatic updates in the plugin settings or use this instruction on how to install WP Cerber if you do not have it on your website.
Have any questions?
If you have a question regarding WordPress security or WP Cerber, leave them in the comments section below or get them answered on the community forum.
Spotted a bug or glitch?
We’d love to fix it! Share your bug discoveries with us here: Bug Report.
How to limit the number of concurrent user sessions in WordPress
WP Cerber Security 8.8
I'm a software engineer and team lead at Cerber Tech. I started coding in 1993 on IBM System/370 and today software engineering at Cerber Tech is how I make my living.
Since the WP update 5.2.3 I receive this Not Found error when logging out ( on websites that have WP Cerber Security, Antispam & Malware Scan Version 8.4 installed )
Not Found
The requested URL /’myloginname’/wp-login.php?loggedout=true was not found on this server.
This issue is caused by last-minute changes did to WordPress 5.2.3. A new version of the WP Cerber will be released in a couple of days.