Hide My WP Ghost

• Security - Two-Factor Authentication settings are now bound to the account they belong to, so the 2FA method, authenticator, email codes, backup codes and passkeys can only be managed by the account owner or by an administrator allowed to edit that user
• Security - Passkey enrollment is now always self-service, matching the device the passkey is created on
• Security - Temporary Login updates and deletions now apply only to temporary accounts, so regular accounts are never affected from this screen
• Security - The role assigned to a temporary login is now validated and can never grant more capabilities than the user creating it already has
• Security - Magic Login links now require the same permissions as the screen they are offered from

• Fix - Editing a custom post type that uses the built-in Categories/Tags taxonomy no longer crashes the Block Editor with "Cannot read properties of undefined"
• Fix - Block Editor no longer crashes with "Cannot read properties of undefined" when Hide User Enumeration is on; the users REST endpoint is now hidden from anonymous visitors only, so logged-in Editors and Authors can still edit posts and custom post types

• Fix - Cloud Activity Log entries are now sent in the background, so a slow logging server can no longer delay backend requests, including the Block Editor and other REST calls
• Fix - Force 2FA Setup no longer redirects custom user roles that can't access their profile to a setup screen they are unable to open
• Fix - Settings page navigation menu no longer loses its layout on sites where another plugin or theme restricts the allowed HTML tags; the menu now keeps its own classes and attributes regardless of the site's wp_kses filters

• New - Force 2FA Setup: require selected user roles to set up Two-Factor Authentication before they can access the dashboard, with a guided setup screen shown right after login
• Fix - WP-CLI commands no longer emit a PHP 8.5 Undefined array key hostname warning

• Fix - Temporary Login page no longer triggers a fatal error when opened for a user that was deleted or expired
• Fix - Two-Factor email setup and Magic Login no longer emit PHP warnings when the requested user no longer exists

• New - Frontend Check now also verifies the theme's CSS and JS files load, catching a broken layout on pages that still return 200
• New - Detects when CSS/JS/font files load through WordPress instead of the server config, falls back to safe paths and warns you on the settings page
• Improvement - Redesigned the Frontend Check results into clear, uniform rows that stay readable with long URLs

• Fix - Some sites could show a blank page when source code optimization was enabled; the header/tag find & replace is now fail-safe and never blanks the output on a regex error
• Fix - Prefetch/speculation rules cleanup now removes the wp-admin and wp-*.php entries without leaving the rules JSON invalid
• Security - Fixed unauthenticated Open Redirect via the redirect_to parameter on the custom logout URL.

• Fix - WPML/Polylang with a custom or renamed REST API path: WPML Advanced Translation Editor and other REST API calls no longer fail with a network error in the admin
• Fix - REST API requests made through the ?rest_route= form are no longer mistakenly treated as normal page requests and blocked
• Fix - Renamed REST API path: legacy, cached and external clients still calling the default wp-json path are now recognized correctly instead of being 404'd
• Fix - Compatibility module for WPML: the Advanced Translation Editor sync routes and WPML/ICL admin-ajax requests are no longer rewritten with the active language prefix
• Security - Hardened REST API detection: the firewall can no longer be bypassed by appending /wp-json/ (or ?rest_route=) to the query string of another request
• Security - Brute force protection also covers REST API Application Password authentication

• Fix - Compatibility with WPML and Polylang: static asset URLs (wp-content, wp-includes) no longer get the language prefix prepended (e.g. /en/wp-content/...) when "Change Relative URLs to Absolute URLs" is enabled
• Fix - Password-protected pages (built-in WordPress post password) now submit correctly on Nginx and other servers without server-level rewrites when the login URL is customized
• Fix - Refreshed knowledge base links across admin notices to point to the new documentation
• Fix - Minor bugs and typos

• Fix - Dark Mode popup remained white, and some settings fields were too dark
• Fix - Login Page Design now works in Disable mode
• Fix - Firewall whitelist IPs and paths now work in disabled mode when the Firewall is activated
• Fix - Minor bugs and typos

• New - Translation in Indonesian (id_ID) language
• New - Translation in Turkish (tr_TR) language
• Update - Translations updated in all 16 supported languages: Arabic, Brazilian Portuguese, Chinese (Simplified), Dutch, Finnish, French, German, Italian, Japanese, Portuguese, Romanian, Russian, Spanish, and English (default).
• Fix - Friendly time display (e.g. "3 hours ago") now renders correctly in all translated languages
• Fix - Dropdown and Help icon in the RTL languages

• New - Country filter in Security Threats Log and User Events Log
• New - Click on a country circle in the GeoMap to open Security Threats Log filtered by that country for the last 7 days
• Update - Compatibility with WordPress 7.0 and PHP 8.5
• Update - Moved Export CSV button to below the table in Security Threats Log and User Events Log to avoid accidental clicks
• Update - Added proper color handling for dark mode (browser-based)
• Update - Enhanced security progress indicator and introduced Security Optimization Score
• Update - Add a loading process on login submit
• Fix - GeoMap country circle counts now match Security Threats Log counts for the same 7-day window
• Fix - Security Threats counting for the last 7 days on widget now matches the log totals (timezone-aligned day buckets)
• Fix - Passkey login spinner not showing due to missing classList calls
• Fix - Country codes missing from threats log rows now resolved on-the-fly from GeoIP when cron is not running
• Fix - Resolved robots.txt warning when user agents are blocked

• New - Customize the login page with custom logo (with live preview), logo link URL, and color scheme (page, form, button, text, link colors) with one-click presets
• New - Block AI Crawler Bots at firewall level with automatic robots.txt Disallow rules (GPTBot, ClaudeBot, PerplexityBot, Bytespider, and 30+ others)
• New - GEO Map with top 5 threat countries visualization on the Overview dashboard
• New - Export Security Threats Log and User Events Log to CSV
• New - Security Check task to verify IP block automation is configured correctly
• New - Threats count in the Overview widget now shows the full 7-day period totals
• New - Notification in the Overview widget to activate 7G/8G Firewall when unblocked threats are detected
• Update - Store country code in the threats log table for faster country stats
• Update - Missing country codes resolved in background via cron without slowing down threat logging

• Fix - Sorting and filtering in the Events Log & Security Threats Log
• Fix - Rules and Threats filters to work with WP Multisite subpaths structure
• Fix - Temporary login user edit link on WP Multisite
• Fix - Compatibility with Woocommerce 10.6
• Fix - Compatiibility with the Blocksy theme
• Fix - Optimize the plugin speed

• Fix - Security Log and Events Log not recording properly
• Fix - Optimize user logged in verification
• Fix - Don't show the 2FA and Magic Login form when the Safe URL parameter is set
• Fix - Prevent logging out when the paths are changed
• Fix - Sending the code too often on 2FA Email verification. The code can be resent only every 30 seconds.
• Fix - Remove unused JS, CSS and fonts
• Fix - Compatiibility with the new WP 6.9.4

• Fix - Security Log and Events Log not recording properly
• Fix - Optimize user logged in verification

• Update - Remove the option to send the new paths by email as the are already on WP Ghost dDashboard
• Update - Send the Brute Force, 2FA and Magic Login texts to the multilingual plugins like WPML and Polylang
• Update - Add the Magic Login options to Change Paths > Login Security section
• Update - Compatibility with PHP 8.5
• Fix - Small bugs and typos

• New - Added Automation on IP address blocking in the Firewall
• Update - Added compatibility with Photo Gallery from 10Web
• Update - Translations in all 14 languages
• Update - Moved 2FA and Magic Login feature in WP Ghost core
• Update - UI for Security Threats Log and Events Log
• Update - Plugin core security acording to the latest WordPress security recommendations
• Fix - Firewall rules to work with the new WordPress 6.9.2 update

• Update - Add the option to hide AI Bots in the Firewall > Block User Agents
• Fix - Fatal error on log table creation when the plugin is activated
• Fix - Safe URL parameter on login form to prevent 2FA from showing when is activated

• New – Security Threats Log added to track blocked attacks and malicious requests
• Change – Events Log renamed to Logs, now split into User Events and Security Threats
• Update – Expanded 7G / 8G Firewall rules to block advanced brute-force attempts, SQL injection, XSS payloads, file inclusion, directory traversal, and automated vulnerability scans before reaching WordPress
• Update – Improved threat detection to stop malicious requests before WordPress core execution
• Update – Added advanced request pattern analysis to identify and block malicious payloads
• Update – Enhanced threat classification to clearly separate blocked attacks from allowed traffic in security logs
• Update – Optimized firewall execution path to reduce overhead and improve performance under high attack traffic

• Update - Added the option to track all threats

• Update - Added the option to Hide Source Map References
• Update - Added the option to Hide Users Enumeration
• Fix - Brute Force compatibility with Elementor Pro on form submit
• Fix - Update Google reCaptcha JavaScript to work with Woocommerce Ajax

• Fix - Remove the wp-*.php and admin path from prefetch paths in WP 6.9
• Fix - Small bugs and warnings

• Update - Compatibility with WP 6.9
• Update - 2FA to allow each user to select the 2FA method in the profile
• Update - 2FA to connect through passkey and fingerprint
• Update - 2FA to trust the current browser

• Update - Compatibility with the plugin WP Social & WP Social PRO
• Update - Compatibility with LiteSpeed Quic Cloud on IPV6
• Update - Make REST API test work when permalinks are set to the default PHP parameter
• Update - Minimum PHP version required is 8.0 in the Security Check section

• Update - Firewall rules for more compatibility
• Update - Safe URL verification process
• Update - Compatibility with the plugin Debloat
• Update - Compatibility with WP Social login customization

• Update - Compatibility with Riode theme on Brute Force
• Fix - Update check error

• Update - 7G & 8G Firewall for more compatibility with WP Plugin
• Update - Compatibility with Kadence Blocks

• Update - Compatibility with the WP 6.8
• Update - Firewall compatibility with WooCommerce
• Fix - Function _load_textdomain_just_in_time was called incorrectly

• Update - Compatibility with the new WP Engine rewrite rules
• Fix - File security when the rewrite rules are not loaded correctly
• Fix - Prevent Brute Force from updating the warning text without space when switched off
• Fix - Prevent PHP warning when IP address unknown in Brute Force IP check
• Fix - Load i18n on login page for password-strength-meter messages when the Clean Login option is activated
• Fix - Detect if parent theme has caps when child theme is activated
• Fix - Dynamic file mapping to load through index.php for better compatibility with all server types

• Update - Add the option to customize all active and inactive themes
• Update - The plugin update library from PucFactory
• Fix - Brute Force error in comments when no recaptcha option is selected
• Fix - WP Multisite root directory for custom WP directory installation

• Update - Security update on wp-activate.php path call
• Fix - Headers check on Brute Force to get the real IP behind Proxy
• Fix - Admin layout issue when other plugins notification is loading in Wp Ghost settings
• Fix - Remove newlines from the rewrite rules

• Update - Translations in all languages for the last changes
• Fix - Brute Force compatibility and bugs
• Fix - Include parent theme in the custom theme name list if the child theme is loaded

• Update - Add Google reCaptcha Enterprise
• Update - Increase security on Brute Force feature
• Update - Compatibility with Sucuri plugin on Events Log and Brute Force
• Update - Add the HMWP_CONFIG_DIR constant to define the config root path
• Fix - Get the real IP address behind proxy

• Update - New WP Ghost Dashboard design
• Update - Login Attempt and Blocked IPs chart in WP Ghost Dashboard
• Update - Email Alerts log report in WP Ghost Dashboard
• Fix - Paths changed in dynamically loaded CSS and JS files
• Fix - Prevent redirecting URLs to hidden paths on config rules issue
• Fix - Prevent hiding the wp-admin on config rules issue
• Fix - Prevent changing the wp-admin on config rules issue

• Update - Knowledge Base links and responsive layout
• Update - GeoIP Country database for Geo-Blocking
• Fix - Config update issue when saving the whitelist from Level Of Security

• Update - Added the AI support in the plugin settings page
• Update - Remove the help icons for the plugin whitelabel option with custom domain
• Fix - Prevent changing the login path in posts slug
• Fix - Advanced Pack install domain not found error

• Update - Changed Hide My WP Ghost plugin name with short WP Ghost
• Update - WP Ghost comes with a new plugin logo in 2025
• Update - More security on REST API for user listing when User Security is activated
• Update - Plugin Security and Firewall rules

• Update - Added gif and tiff to media redirect in Hide WP Common Paths
• Update - Allow activating hmwp_manage_settings capability only for a user using Roles & Capabilities plugin
• Fix - Layout and improved functionality

• Update - Compatibility with WP 6.7
• Update - Compatibility with LiteSpeed Quic Cloud IP addresses automatically
• Fix - Litespeed cache plugin compatibility and set /cache/ls directory by default
• Fix - Whitelist website IP address on REST API disable to be able to be accessed by the installed plugins

• Fix - Compatibility with LiteSpeed when CDN is not set
• Fix - Change paths when www. prefix exists on the domain

Fixed - Compatibility with LiteSpeed when CDN is not set

• Update - Compatibility with WP Rocket Background CSS loader
• Update - Compatibility with LiteSpeed Cache CDN
• Update - Map Litespeed cache directory in URL Mapping
• Fix - Remove dynamic CSS and JS when Text Mapping is switched off
• Fix - Prevent changing wp-content and wp-includes paths in deep URL location and avoid 404 errors

• Update - Layouts, colors
• Update - Added Drupal 11 in CMS simulation
• Update - Set 404 Not Found error as default option for hidden paths
• Fix - Compatibility with Wordfence Scan
• Fix - Changed deprecated PHP functions
• Fix - Warnings when domain schema is not identified for the current website
• Fix - Redirect to homepage the newadmin when user is not logged in

• Fix - Compatibility with WP 6.6.2
• Fix - Compatibility with Squirrly SEO buffer when other cache plugins are active
• Fix - Compatibility with Autoptimize minify

• Update - Added the option to select all Countries in Geo Blocking
• Update - Brute Force compatibility with UsersWP plugin
• Update - Whitelist path to not check Brute force reCaptcha in case of login whitelist paths

• Update - Added the option to disable Copy & Paste separately
• Fix - PHP Error on HMWP_Models_Files due to the not found class
• Fix - Small Bugs

• Update - Compatibility with Wordfence

• Update - Plugin security and compatibility with WP 6.6.1 and PHP 8.3
• Update - Adding wp-admin path extensions into firewall when user is not logged in

• Fix - Google reCaptcha on frontend popup to load google header if not already loaded
• Fix - Hide New Login Path to allow redirects from custom paths: lost password, signup and disconnect
• Fix - WP Multisite active plugins check to ignore inactive plugins
• Fix - Small bugs

• Update - Add security preset loading options in Hide My WP > Restore
• Fix - Library integrity on the update process
• Fix - Cookie domain on WP multisite to redirect to new login path when changing sites from the network
• Fix - Brute Force shortcode to work with different login forms

• Fix - Compatibility with WP 6.6
• Fix - Security update on wp-login.php and login.php

• Update - Compatibility with WordPress 6.5.5
• Update - Added the option to immediately block a wrong username in Brute Force
• Update - Sub-option layouts
• Fix - File Permission check to receive the correct permissions when is set stronger than required
• Fix - Hide login.php path together with wp-login.php path from being redirect to the new login
• Fix - Small bugs

• Update - Added more path in Frontend Test to make sure the settings are okay before confirmation
• Fix - Compatibility with Wordfence to not remove the rules from htaccess
• Fix - Filter words in 8G Firewall that might be used in article slugs
• Fix - Trim error in cookie when main domain cookie is set
• Fix - Login header hooks to not remove custom login themes

• Fix - isPluginActive check error when is_plugin_active is not yet declared
• Fix - Disable clicks and keys to work without jQuery
• Fix - Compatibility with Wordfence scan process

• Fix - Show error messages in Temporary login when a user already exists
• Fix - Temporary users to work on WP Multisite > Subsites

• Fix - Login security when Elementor login form is created and Brute Force is active
• Fix - Login access when member plugins are used for login process
• Fix - Firewall warning on preg_match bot check in firewall.php

• Update - Added Country Blocking & Geo Security feature
• Update - Added Firewall blacklist by User Agent
• Update - Added Firewall blacklist by Referrer
• Update - Added Firewall blacklist by Hostname
• Update - Added 'Send magic link login' option in All Users user row actions on Hide My WP Advanced Pack plugin
• Update - Added the option to select the level of access for an IP address in whitelist
• Removed - Mysql database permission check as WordPress 6.5 handles DB permissions more secure
• Moved - Firewall section was moved to the main menu as includes more subsections
• Fix - 8G Firewall compatibility with all page builder plugins

• Update - Compatibility with WPEngine rules on wp-admin and wp-login.php
• Update - New Feature added 'Magic Login URL' on Hide My WP Advanced Pack plugin
• Fix - Prevent firewall to record all triggered filters as fail attempts
• Fix - Remove filter on robots when 8G firewall is active
• Fix - Frontend Login Check popup to prevent any redirect to admin panel in popup test
• Fix - Prevent redirect the wp-admin to new login when wp-admin path is hidden

• Update - Search option in Hide My WP > Overview > Features
• Update - Send Temporary Logins in Events log
• Fix - Don't show Temporary Logins & 2FA in main menu when deactivated

• Update - 8G Firewall on User Agents filters
• Update - Compatibility with WP 6.5.3
• Update - Load the options when white label plugin is installed
• Fix - Restore settings error on applying the paths
• Fix - Prevent redirect the wp-admin to new login when wp-admin path is hidden

• Update - Added translation in more languages like Arabic, Spanish, Finnish, French, Italian, Japanese, Dutch, Portuguese, Russian, Chinese
• Fix - 'wp_redirect' when function is not yet declared in brute force
• Fix - 'wp_get_current_user' error in events log when function is not yet declared

• Update - Added the option to detect and fix all WP files and folders permissions in Security Check
• Update - Added the option to fix wp_ database prefix in Security Check
• Update - Added the option to fix admin username in Security Check
• Update - Added the option to fix salt security keys in Security Check
• Update - Layout and Fonts to integrate more with WordPress fonts
• Update - 7G & 8G firewall compatibility to work with more WP plugins and themes

• Update - Added the option on Apache to insert the firewall rules into htaccess
• Fix - Screen 120dpi display layout
• Fix - Hide reCaptcha secret key in Settings

• Update - Added the 8G Firewall filter
• Update - Added the option to block the theme detectors
• Update - Added the option to block theme detectors crawlers by IP & agent
• Update - Added compatibility with Local by Flywheel
• Update - Firewall loads during WP load process to work on all server types
• Fix - Load most firewall filters only in frontend to avoid compatibility issues with analytics plugins in admin dashboard
• Fix - Avoid loading recaptcha on Password reset link
• Fix - Avoid blocking ajax calls on non-admin users when the Hide wp-admin from non-admin users is activated

• Update - Added the option ot manage/cancel the plan on Hide My WP Cloud
• Fix - Custom login path issues on Nginx servers
• Fix - Issues when the rules are not added correctly in config file and need to be handled by HMWP
• Fix - Don't change the admin path when ajax path is not changed to avoid ajax errors

• Compatibility with WP 6.5
• Update - Compatibility with CloudPanel & Nginx servers
• Fix - Warning in Nginx for $cond variable

• Compatibility with PHP 8.3 & WP 6.4.3
• Update - Compatibility with Hostinger
• Update - Compatibility with InstaWP
• Update - Compatibility with Solid Security Plugin (ex iThemes Security)
• Update - Added the option to block the API call by rest_route param
• Update - Added new detectors in the option to block the Theme Detectors
• Update - Security Check for valid WP paths
• Fix - Don't load shortcode recapcha for logged users
• Fix - Rewrite rules for the custom wp-login path on Cloud Panel and Nginx servers
• Fix - Issue on change paths when WP Multisite with Subcategories
• Fix - Hide rest_route param when Rest API directory is changed
• Fix - Multilanguage support plugins
• Fix - Small bugs & typos

• Update - Add shortcode on BruteForce 'hmwp_bruteforce' for any login form
• Update - Add security schema on ssl websites when changing relative to absolute paths
• Update - Compatibility with WP 6.4.2 & PHP 8.3
• Fix - Change the paths in cache files when WP Multisite with Subdirectories
• Fix - Small bugs in rewrite rules

• Update - Compatibility with WP 6.4.1 & PHP 8.3
• Update - The Frontend Check to check the valid changed paths
• Update - The Security Check to check the plugins updated faster and work without error with Woocommerce update process
• Update - Compatibility with Solid Security Plugin (ex iThemes Security)
• Update - Hidden wp-admin and wp-login.php on file error due to config issue
• Update - Hide rest_route param when Rest API directory is changed
• Update - Add emulation for Drupal 10 and Joomla 5
• Fix - Hide error when there are invalid characters in theme/plugins directory name
• Fix - Small bugs

• Update - Added the 2FA feature with both Code Scan and Email Code
• Update - Added the option to add random number for static files to avoid caching when users are logged to the website
• Fix - Added the option to pass the 2FA and Brute Force protection when using the Safe URL
• Fix - Tweaks redirect for default path wasn't saved correctly
• Fix - Small Bugs

• Fix - File extension blocked on wp-includes when WP Common Paths are activated
• Fix - Remove hidemywp from file download when the new paths are saved

• Update - Compatibility with WP 6.3.1
• Update - Compatibility with WPML plugin
• Update - Security on Brute Force for the login page
• Fix - Small Bugs

• Update - Compatibility with WP 6.3
• Update - Security Check Report for debugging option when debug display is set to off
• Update - Security Check Report for the URLs and files to follow the redirect and check if 404 error

• Update - Compatibility with more 2FA plugins
• Update - Compatibility with ReallySimpleSSL
• Fix - Small bugs

• Update - Compatibility with FlyingPress plugin
• Update - Use WordPress function for ajax requests
• Fix - Remove infinite loading icon on settings backup action
• Fix - Small bugs

• Update - Compatibility with WP 6.2.2
• Fix - Update checker to work with the latest WordPress version
• Fix - Hide wp-login.php path for WP Engine server with PHP 7.0

• Update - Added the user role 'Other' for unknown user roles
• Update - Sync the new login with the Cloud to keep a record of the new login path and safe URL
• Update - Compatibility with WP 6.2.2
• Fix - Typos and small bugs

• Update - Compatibility with WPEngine hosting
• Update - Compatibility with WP 6.2.1
• Fix - Loading on defaut ajax and json paths when the paths are customized
• Fix - Compatibility issues with Siteground when Ewww plugin is active
• Fix - To chnage the Sitegroud cache on Multisite in the background

• Update - Compatibility with Siteground
• Update - Compatibility with Avada when cache plguins are enabled

• Update - Add compatibility for Cloud Panel servers
• Update - Add the option to select the server type if it's not detected by the server
• Fix - Remove the rewrites from WordPress section when the plugin is deactivated
• Fix - User roles names display on Tweaks

• Update - File processing when the rules are not set correctly
• Update - Security headers default values
• Fix - Compatibilities with the last versions of other plugins
• Fix - Reduce resource usage on 404 pages from version 7.1.03

• Update - Compatibility with other plugins
• Update - UI & UX to guide the user into the recommended settings
• Update - Compatibility with WP User Manager plugin
• Update - Security in Brute force option to work with more plugins
• Update - Compatibility with Ewww Image Optimizer plugin CDN option
• Fix - Increased plugins speed on compatibility check
• Fix - Common paths extensions check in settings

• Update - Add the option to check the frontend and prevent broken layouts on settings save
• Update - Brute Force protection on lost password form
• Update - Compatibility with MemberPress plugin
• Fix - My account link on multisite option

• Update - Compatibility with WP 6.2
• Update - Added the option to whitelist URLs
• Update - Added the sub-option to show a white-screen on Inspect Element for desktop
• Update - Added the options to hook the whitelisted/blacklisted IPs
• Fix - small bugs / typos / UI

• Update - Compatibility with PHP 8 on Security Check

• Compatibile with WP 6.2
• Fix - Handle the physical custom paths for wp-content and uploads set by the site owner
• Fix - Compatibility with more plugins and themes

• Update - Remove the atom+xml meta from header
• Update - Save all section on backup restore

• Update - Remove the noredirect param if the redirect is fixed
• Update - Check the XML and TXT URI by REQUEST_URI to make sure the Sitemap and Robots URLs are identified
• Update - Check the rewrite rules on WordPress Automatic updates too
• Fix - To remove the version from URL even if the 'ver' param doesn't have any value
• Fix - Typo in Security Check

• Update - Fix login path on different backend URL from home URL

• Update - Compatibility with WP 6.1
• Update - Add More security to XML RPC
• Update - Add GeoIP flag in Events log to see the IP country
• Update - Compatibility with LiteSpeed servers and last version of WordPress

• Update - Add the Whitelabel IP option in Security Level and allow the Whitelabel IP addresses to pass login recaptcha and hidden URLs
• Fix - Allow self access to hidden paths to avoid cron errors on backup/migration plugins
• Fix - White screen on iphone > safari when disable inspect element option is on

• Update - Add the Brute Force protection on Register Form to prevent account spam
• Update - Added the option to prioritize the loading of HMWP Ghost plugin for more compatibility with other plugins
• Update - Compatibility with LiteSpeed servers and last version of WordPress
• Update - Compatibility with FlyingPress by adding the hook for fp_file_path on critical CSS remove process
• Fix - Remove the get_site_icon_url hook to avoid any issue on the login page with other themes
• Fix - Compatibility with ShortPixel webp extention when Feed Security is enabled
• Fix - Fixed the ltrim of null error on PHP 8.1 for site_url() path
• Fix - Disable Inspect Element on Mac for S + MAC combination and listen on Inspect Element window

• Update - Added Temporary Login feature
• Fix - Not to hide the image on login page when no custom image is set in Appearance > Customize > Site Logo
• Update - Compatibility with Nicepage Builder plugin
• Update - Compatibility with WP 6.0.2

• Update - Add custom emulator/generator name in the website header

• Update - Compatibility with the last version of Flywheel including Redirects
• Fix - Don't show brute force math error for pages where the Brute Force is not loaded
• Fix - Compatibility with Breakdance plugin
• Fix - Fixed the ltrim of null error on PHP 8.1 for site_url() path

• Fix - URL Mapping for Nginx servers to prevent 404 pages
• Fix - PHP error in Security Check when the X-Powered-By header is not string
• Fix - Compatibility with Wp-Rocket last version

• Fix - infinite loop in admin panel

• Update - Compatibility with Coming Soon & Maintenance Mode PRO
• Update - New feature added to automatically redirect the logged users to the admin dashboard
• Update - Security Check report for minimum PHP version and visible custom login
• Fixed the hidden URLs process
• Fixed the site_url() and home_url() issue when they are different
• Add compatibility with WordPress 6.0

• Update - Add compatibility with Elementor Builder plugin for WP Multisite
• Update - Tested/Update Compatibilities with more themes and plugins

• Update - Add compatibility with LiteSpeed webp images
• Update - Update Compatibilities
• Fix - Small Bugs

• Update - Added compatibility with Backup Guard Plugin
• Update - Prevent affecting the cron processes on Wordfence & changing the paths during the cron process
• Update - Change the WP-Rocket cache files on all subsites for WP Multisite
• Update - Automatically add the CDN URL if WP_CONTENT_URL is set as a different domain
• Fixed the Change Paths for Logged Users issue

• Update - Added 7G Firewall option in Hide My WP > Change Paths > Firewall & Headers > Firewall Against Script Injection
• Update - Fixed the menu hidden issue when other security plugins are active
• Update - Compatibility with Login/Signup Popup plugin when Brute Force Google reCaptcha is activated
• Update - Compatibility with Buy Me A Cofee plugin
• Update - Automatically add the CDN URL if WP_CONTENT_URL is set as a different domain
• Fix - Change Paths for Logged Users issue when cache plugins are installed
• Fix - Library loading ID in HMWP Ghost

• Update - Security & Compatibility
• Update - Compatibility with Namecheap hosting
• Update - Compatibility with Ploi.io
• Fix - Removed the ignore option from Nginx notification
• Fix - The Security check on install.php and upgrade.php files
• Fix - The Restore to default to remove the rules from the config file

• Update - Added new option in Login Security: Hide the language switcher option on the login page
• Update - Compatibility with WordPress 5.9
• Update - Compatibility with Coming Soon & Maintenance Mode PRO
• Update - Compatibility with Advanced Access Manager (AAM) plugin
• Update - Compatibility with WPS Hide Login
• Update - Compatibility with JobCareer theme
• Fix - Popup issue when Safe Mode or Ghost Mode is selected and other plugins are modifying the bootstrap javascript
• Fix - 404 error on WordPress upgrade when access the file upgrade.php for logged users
• Fix - Brute Force blocking Wordfence Cron Job

• Update - Compatibility with Smush plugin
• Update - Compatibility with WordPress 5.8.3
• Update - Compatibility with Wordfence 2FA when reCaptcha is active
• Fix - Infinit loop when POST action on unknown paths

• Update - Added the Ctrl + Shift + C restriction when Inspect Element option is active
• Update - Added the features text for translation
• Update - Removed the WordPress title tag from login/register pages
• Update - Added the option to ignore the notifications and avoid repeating alerts
• Fix - Remove the login URL from the logo on the custom login page
• Fix - Set Filesystem to direct connection for file management

• Update - Added Permissions-Policy & Referrer-Policy default security headers
• Update - Added the option to disable Right-Click for logged users and user roles
• Update - Added the option to disable Inspect Element for logged users and user roles
• Update - Added the option to disable View Source for logged users and user roles
• Update - Added the option to disable Copy/Paste for logged users and user roles
• Update - Added the option to disable Drag/Drop for logged users and user roles
• Fix - Whitelist and Blacklist error messages in Brute Force when no IP was added
• Fix - Typos in HMWP Ghost plugin

• Fix - Remove Sitemap style from Yoast, Rank Math, XML Sitemap on Nginx servers when the option Change Paths in Sitemaps XML is active
• Update - Compatibility with Wordfence Security Scan when the wp-admin is hidden
• Update - Compatibility with the Temporary Login Without Password plugin to work with the passwordless connection on custom admin
• Update - Compatibility with the LoginPress plugin to work with the passwordless connection on custom admin
• Update - Compatibility with WordPress Sitemap, Rank Math SEO, SEOPress, XML Sitemaps to hide the paths and style on Nginx servers

• Update - Compatibility with Nitropack
• Update - Compatibility with OptimizePress Dashboard
• Update - Change the Plugin Name on update check success message
• Fix - Compact the frontend scripts for removing right click and keys
• Fix - Add links to the Change Paths page from Security Check

• Update - Select the WordPress common files you want to hide
• Update - Add the option to block comments that may lead to spam
• Update - Removed Plugins Section from Settings
• Update - Removed any affiliate links from the plugin
• Update - Compatibility with MainWP
• Update - Compatibility with Limit Login Attempts Reloaded
• Update - Compatibility with Loginizer
• Update - Compatibility with Shield Security
• Update - Compatibility with iThemes Security
• Fix - Login & Logout redirects for Woocommerce
• Fix - Don't show the rewrite alert messages if nothing was changed in HMWP

• Update - Update the White Label options to remove plugin name, and author while the plugin is active
• Fix - Added handle when the plugin is not installed correctly
• Fix - Avoid changing the cache in the paths like plugins and themes and broke the website

• Update - Add the option to hide the wp-admin path for non-admin users
• Update - Advanced Text Mapping to work with Page Builders in admin
• Update - Changing the paths in sitemap.xml and robots.txt to work with all SEO plugins
• Update - Translate the plugin in more languages
• Update - Select the cache directory if there is a custom cache directory set in the cache plugin
• Update - Show the change in cache files option for more cache plugins
• Fix - Showing the old paths on unfound files
• Fix - Not load the Click Disable while editing with Page Builders

• Update - Use WordPress filesystem for all file actions
• Fix - Rewrite built on custom register and lostpassword path
• Fix - wp_ previx detection in Website Security Check
• Fix - plugin typos & translations

• Update - Added compatibility with JCH Optimize 3 plugin
• Update - Added compatibility with Oxygen 3.8 plugin
• Update - Added compatibility with WP Bakery plugin
• Update - Added compatibility with Bunny CDN plugin
• Update - Update compatibility with Manage WP plugin
• Update - Update compatibility with Autoptimize plugin
• Update - Update compatibility with Breeze plugin
• Update - Update compatibility with Cache Enabler plugin
• Update - Update compatibility with CDN Enabler plugin
• Update - Update compatibility with Comet Cache plugin
• Update - Update compatibility with Hummingbird plugin
• Update - Update compatibility with Hyper Cache plugin
• Update - Update compatibility with Litespeed Cache plugin
• Update - Update compatibility with Power Cache plugin
• Update - Update compatibility with W3 Total Cache plugin
• Update - Update compatibility with WP Fastest Cache plugin
• Update - Update compatibility with iThemes plugin
• Update - Added compatibility with Hummingbird Performance plugin
• Fix - Small Bugs

• Update - A new UI for Hide My WP Ghost
• Update - Added new features in the plugin
• Update - Compatibility with other plugins

• Update - A new UI for Hide My WP Ghost
• Update - Compatibility with more plugins and themes
• Update - Added new Features: Disable Right Clicks, Copy-Paste, Drag-Drop, View-Source
• Feature Update: Select User Role for Hide Admin Toolbar option
• Feature Update: Get Events User report from Cloud directly in the plugin
• Feature Update: Select Quick Text Mapping from WP Common Classes

• Update - Add Login and Register templates option
• Update - Add support for the wp-register when WP multisite
• Fix - Get the user capabilities when use has multiple roles

• Update - Added compatibility with builders Oxygen, Elementor, Thrive, Bricks
• Update - Added extra security in backend
• Fix - Brute Force warning when blocks the IP in function get_blocked_ips
• Fix - Load filesystem without FTP access

• Update - Added 403 Error Code option for the wp-admin and wp-login.php redirects
• Update - new rules and tasks for Security Check
• Fix - Get the settings from Hide My WP Lite on plugin update
• Fix - Filesystem error when the library is not correctly loaded
• Fix - Change paths in Login page when Late Loading is active
• Fix - Change the WordPress login logo when Clean Login Page is active

• Update - Update Security for the last updates and WP requirements
• Update - Optimize JS library from third party plugins
• Fixed - Login with WP Defender PRO and 2 Factor Authentification
• Fixed - Text Mapping for classes and IDs
• Fixed - Paths replace in the JS cache files
• Fixed - Small Bugs and UI

• Update - Compatibility with SiteGround Cache plugin
• Update - Compatibility warning with W3 Total Cache Lazy Load
• Update - Security Check to hide readme.html, license.txt and other common files
• Update - Removed X-Frame-Options header because of the iframe issue in the popup window

• Update - Added Strict-Transport-Security header
• Update - Added Content-Security-Policy header
• Update - Added X-Frame-Options header
• Update - Added X-XSS-Protection header
• Update - Added X-Content-Type-Options header
• Update - Added compatibility for AppThemes Confirm Email
• Fixed - Compatibility with WordPress 5.6
• Fixed - Compatibility with PHP 8.0 with deprecated functions

• Update - The rules update on adding new plugin or theme
• Update - Added compatibility with PPress plugin for custom page login
• Fixed - Nginx URL Mapping rules to add the rules correctly in the config file
• Fixed - Rollback the settings when pressing the Abort button
• Fixed - Fixed Backup/Restore rules flash
• Fixed - Small bugs and typos

• Update - Compatibility with Manage WP plugin
• Update - Add the plugin as Must Use plugin for better security and compatibility with other plugins
• Update - Compatibility with Really Simple SSL plugin
• Update - New UX for better understanding of the redirects
• Update - Add compatibility with JetPack in XML-RPC option for Apache servers
• Update - Compatibility with WPML when setting custom wp-admin and admin-ajax
• Update - Compatibility with WPML when RTL languages are set in dashboard
• Update - Compatibility with bbPress plugin
• Update - Compatibility with Newspaper theme
• Update - Added Compatibility with WP 5.5.3

• Update - Added more CMSs emulators to confuse the Theme Detectors
• Update - Extra caching in htaccess when "Optimize CSS and JS Files" is activated
• Update - Do not cache if already cached by WP-Rocket or WP Fastest Cache
• Update - Added Login and Logout redirects for each user role
• Fix - 404 error on Nxing server when updating the settings

• Update - Added compatibility with Pro Theme by Themeco
• Update - Added _HMWP_CONFIGPATH to specify the config root file. ABSPATH by default.
• Fixed - Redirect errors for some themes
• Update - Added compatibility for Smush Pro plugin by WPMU DEV
• Update - Added compatibility for WP Client plugin by WP-Client.com

• Update - Added a fix for noredirect param on infinite loops
• Update - Compatibility with WPRentals theme
• Update - Compatibility with last version WP Fastest Cache plugin
• Update - Remove version parameter from CSS and JS URLs containing the plus sign
• Update - Added {rand} in Text Mapping to show random string on change
• Update - Added {blank} in Text Mapping to show an empty string on change
• Update - Added Compatibility with WP 5.5.1
• Fix - Load the 404 not found files correctly

• Update - Added the version hook to remove the versions from CSS and JS
• Update - Load the login on WPEngine server with PHP7.4 when the login is set as /login
• Update - Detect Flywheel server and add the rules accordingly
• Update - Compatibility with Oxygen theme
• Update - Compatibility with IThemes Security on custom login

• Update - Added the option to hide /login and /wp-login individually
• Update - Added the option to select the file extensions for the option Hide WP Common Paths
• Update - Added the option to redirect to a custom URL on logout

• Update - Compatibility with WPEngine + PHP 7
• Update - Compatibility with Absolutely Glamorous Custom Admin plugin
• Update - Compatibility with Admin Menu Editor Pro plugin
• Fix - Small CSS & Warning issues

• Update - Added HMW_RULES_IN_CONFIG and HMW_RULES_IN_WP_RULES to control the rules in the config file
• Update - Change the rewrite hook to make sure the rules are added in the WordPress rewrites before flushing them
• Update - Compatible with iThemes Security latest update
• HMW_RULES_IN_CONFIG will add the rules in the top of the config file (default true)
• HMW_RULES_IN_WP_RULES will add the ruls in the WordPress config area (default true)
• Updated the security in the plugin to work well to SiteGround

• Update - Compatibility with Hummingbird Cache plugin
• Update - Compatibility with Cachify plugin
• Update - Added RTL Support in the plugin
• Update - Added Debug Log for faster debugging
• Fix - Show option Change Paths in Cache Files for all cache plugins compatible with Hide My WP Ghost
• CSS Fixes for the latest Bootstrap version and WordPress version

• Fixed the Text Mapping in CSS and JS to not load while in admin
• Removed some old params that are not used anymore
• Flush the rewrites changed on Plugins and Themes updates
• Remove all rewrites on plugin deactivation
• Remoce the option to write in the cache files if there is not a cache plugin installed
• Show Change Paths in Cache files only when a Cache plugin is installed

• Update - Show the Hide My WP menu only on Network if WP Multisite
• Update - New option to hide both active and inactive Plugins on WP Multisite
• Update - Prevent from loading the style from wp-admin in the custom login page
• Update - WPEngine 2020 rewrites compatibility
• Update - Added option to hide only the IDs and Classes in Hide My WP > Text Mapping
• Update - Added the option to remove the WordPress common paths in /robots.txt file
• Update - Compatibility with the most populat plugins and WordPress 5.4.1
• Update - Compatibility with Litespeed Cache plugin
• Update - Compatibility with WordFence
• Fix - login redirect for nginx server
• Fix - constant warning NONCE_KEY in confi.php
• Fix - URL Mapping for WPEngine
• Fix - Show 404 files in case the rewrites are not working or Allowoverride is OFF
• Fix - Detect correct https or http sheme for Login Preview and validation
• Fix - Save the Hide My WP rewrites when other plugin are updating the config file to prevent rewrite error

• Update - Compatibility and Security for WordPress 5.4
• Fix - Activation process with Token

• Update - Compatibility and Security for WordPress 5.4
• Update - Added compatibility with Asset CleanUp: Page Speed Booster
• Update - Added CMS simulator for Drupal 8
• Update - Added the option to hide both active and deactivated plugins

• Update - Added the option to map the text only in classes and ids
• Update - Secure the Robots.txt file and remove the common paths
• Update - Correct the Logout URL if invalid
• Update - Compatibility with Squirrly SEO plugin
• Update - Compatibility with Woocommerce, JetPack and Elementor
• Update - Removed HMW_DYNAMIC_THEME_STYLE and added the file text mapping
• Update - Change text from Text Mapping in JS and CSS files
• Update - Change text from Text Mapping in cached files created by cache plugins
• Fix - Remove the Save button until the Frontend is checked
• Fix - Corrected the backup file name on Settings Backup action
• Fix - Clear the cache for Elementor CSS files on Mapping update

• Update - Compatibility with other security plugins
• Update - Check the frontend on paths update
• Update - Write the rules in Nginx and IIS files before relogin to be able to check the frontend before logout
• Update - Hide wp-login.php is now disable is the login path is unchanged
• Fix - rewrite rules in htaccess when other plugins are removing rge rewrites
• Fix - update the new api path on change

• Fixed - Compatibility with Contact Form Block plugin
• Fixed - Redirect compatibility with other plugins
• Update - Compatibility and Security for WordPress 5.3.2

• Update - Compatibility with Flatsome theme
• Update - Compatibility check and update with the most common plugins and themes
• Fix - Prevent from removing capabilities from admin on plugin deactivation
• Fix - Popup face fade fix on Backup restore

• Update - Compatibility and Security for WordPress 5.3
• Fix - Login path and process for themes like ClassiPress, WPML, OneSocial
• Fix - Compatibility with OpenLiteSpeed servers
• Fix - HideMyWP User Role will be added only on Dev Mode
• Fix - User Role witll be removed on plugin update in case is already created

• Update - Replace admin ajax path in JS cached files
• Update - Add Hide My WP Role to setup the plugin
• Fix - Fix the temporary extention names in Safe Mode
• Fix - Fix the Brute Force login with Woocommerce paths

• Update - Working with custom wordpress cookie names
• Update - Included the debug log feature
• Fix - Add the hmwp cookie in the config to work with custom cookies on hidden paths
• Fix - Compatibility with more plugin and themes
• Hide My WP Ghost is compatible with WP 5.2.3

• Update - Add X-Content-Type-Options and X-XSS-Protection
• Update - Remove X-Powered-By and Server Signature from header
• Update - Checked and Updated compatibility with other plugins
• Update - Remove the Notice bar
• Fix - Plugin Menu for WP Mmultisite while configure it from network

• Update - Change WP paths in cache file is compatible with more cache plugins
• Update - Security filter in config file
• Update - Fix initial settings for Safe and Ninja modes
• Update - Compatibility style with Autoptimizer
• Update - Compatibility with Godaddy Hosting
• Update - Added support for webp files
• Update - Updated the plugin menu and fields typo
• Fixed - wp-admin issue on Godaddy hostin plan
• Fixed - Cache issue with Autoptimizer plugin

• Update - added new paths into the restricted list to avoid rewrite errors
• Update - compatibility style with Wordfence
• Update - compatibility style with IP2Location Country Blocker
• Update - compatibility style with Autoptimizer
• Update - compatibility style with Squirrly SEO
• Update - compatibility style with Yoast SEO
• Update - add login URL check in Security Checking tool
• Update - add admin URL check in Security Checking tool

• Fixed - Plugin license check and notification
• Fixed - Compatibility with LoginPress and Woocommerce on login hook
• Update Checked and fixed compatibility with the most popular plugins

• Update - Remove footer comments for W3 Total Cache and WP Super Cache
• Update - Fixed small bugs

• Update - Don't show HMW update when new plugins and themes are added if the themes names and plugins names are not changed
• Update - Show 100% security status if all the security tasks are completed
• Update - Don't show the speedometer if the security check didn't run yet
• Update - Added Dashboard Security Widget
• Update - Show the security level and the list of tasks to fix the security issues
• Update - Added the option to check the security after the settings are saved
• Update - Added help link for each plugin section
• Update - Prevent other plugins to load the style in Hide My Wp Ghost

• Added cache replace path feature for CSS files
• Cache replace is compatible with Elementor, WP-Rocket, Autoptimize, W3 Total Cache, WP Super Cache
• Changed the Hide Paths for Logged Users into Hide Admin Toolbar to reduce confusion
• Updated compatibility with more plugins

• Added ajax rewrite option in Hide My WP > Permalinks
• Added compatibility with Squirrly SEO plugin
• Added compatibility with more themes/plugin
• Updated the security for some plugins

• Fixed dynamic load content
• Fixed compatibility with the last version of Autoptimize plugin
• Fixed compatibility with Squirrly SEO plugin

• Added compatibility with other themes/plugins
• Fixed src pattern to identify all local URLs from source code
• Fixed comments removal to avoind removing the IE comments
• Fixed API saving issue in WP 5.2

• Fixed the Hide My WP > Advanced > Fix Relative URLs
• Fixed the wp-content rules when manually changed by the user
• Fixed the change paths in ajax calls

• Fixed API saving issue in WP 5.1
• Hide the old admin-ajax.php if required

• Fixed Cache Enabler late loading
• Force the Ajax path to show without admin path in all plugins and themes
• Change the paths in the Yoast SEO Local kml file
• Change paths in sitemap.xml files

• Hide My WP plugin file structure verification
• Added security updates for 2019
• Hide My WP is compatible with WP 5.0.3

• Update - Add HMW_DYNAMIC_THEME_STYLE to load the theme CSS dynamically and remove the theme details
• Fix - Compatible with Hummingbird Page Speed Optimization
• Fix - Login process on custom theme logins when captcha is not loaded
• Fix - Fix compatibility issues with Avada themes
• Fix - Fix combine JS and CSS issues with WP-Rocket
• Fix - When defining the UPLOADS constant in wp-config.php

• Fix - Warning: call_user_func_array() expects parameter 1 to be a valid callback, function 'return false;'
• Fix - Woocommerce frontpage login
• Fix - Multiple subfolders install issue
• Fix - Replacing the paths in javascript and styles
• Fix - Optimizing the rewrite rules when going in safe mode

• Update - Added new invalid path names in the path list
• Fix - Woocommerce updating the rewrites list on Hide My WP save
• Fix - PHP information in Security Check

• Update - Added the constant HMW_RULES_IN_CONFIG to pass the static files to WP
• Fix - 404 error on WP-Rocket busting paths when not minified
• Fix - Short custom paths name which cause errors

• Update - Added the Text Mapping & URL Mapping option in Hide My WP menu
• Update - Added the CDN URL option in the Mapping Menu
• Fix - Compatibility with Wp-Rocket on 404 pages and excluded pages
• Fix - Login issue from frontend form when Woocommerce is activated
• Fix - Compatibility with more themes
• Fix - Wp Engine rewrite rules box to show on settings page

• Update - Rewrite option for Nginx, Apache and IIS without config
• Update - Added the Safe Mode option on rewrite errors
• Update - URL Mapping to work with paths
• Update - Text Mapping to change texts in source code
• Fix - URL Mapping to work on multisite

• Update - Increased security for not logged in users
• Update - Increased plugin speed and cache optimization
• Update - Compatibility with more themes and plugins
• Update - Hide more plugins from isitwp.com

• Fix - Compatibility with WP Fastest Cache
• Fix - Add decoded trail slash on plugin rewrites

• Fix - Memory check error when the memory is over 1G
• Fix - Htaccess error when the plugin has spaces in the name
• Update - Compatibility with Autoptimize 2.4
• Update - Compatible with Gutenberg 3.9

• Update - Compatible with Gutenberg 3.8
• Update - Compatible with WP Super Cache 1.6
• Update - Compatible with All In One WP Security & Firewall 4.3
• Update - Compatible with iThemes Security 7.1
• Update - Compatible with Beaver Builder 2.1
• Update - Compatible with Elementor Editor 2.2
• Update - Compatible with Thrive Architect 2
• Update - Compatible with Woocommerce 3.4
• Fix - Compatibility with WP-Rocket
• Fix - Rewrite paths when moving from Ghost mode to Default in Apache, Nginx and IIS
• Fix - Restore settings didn't save the config rewrites

• Update - Remove Admin Cookies from wp-config left by other plugins when Hide My WP is installed.
• Fix - Don't create the activate rewrite in case the URL isn't changed
• Fix - Compatibility with other plugins was checked
• Fix - Compatibility with WP-Lazy-Load

• Update - Added URL Mapping option
• Update - Change internal URL to new ones. Works for CSS, JS and Images
• Fix - Corrected the root path to config files
• Fix - Upgrade from Free version to Ghost

• Update - Compatible with Gutenberg plugin
• Update - Compatible with Wp Hide plugin
• Fixed - Corrected the hide paths in Apache, IIS and Nginx
• Fixed - NGINX change alerts to be more visible
• Fixed - Rules for install.php not to include plugin-install.php too

• Update - Added security filter when a logged user's IP address is changed
• Update - Added security alerts for failed login attempts
• Update - Added security alerts when a user has login attempts from different IP addresses
• Update - Added security alerts when a plugin is deleted
• Update - Added security alerts when a post is deleted
• Update - Remove inline style ids option
• Fixed - Log username when a plugin is deleted

• Fixed - Comments removal in source code
• Fixed - Corrected Typos on Security Check
• Update - Compatibility with more WordPress Themes

• Update - Compatibility with the last version of WP-Rocket
• Fixed - Prevent showing blank page on content removal
• Fixed - The ajax error on Security Check Fix button

• Update - New Settings design
• Update - Firewall Against Script Injection
• Update - Customize the Hide My Wp safe link
• Update - Log events for specified user roles
• Update - WordPress Security Alerts
• Update - Security Check and options to fix the issues
• Update - New Ghost Mode option to hide and protect the themes and plugins
• Update - Google Captcha for login page and Woocommerce login page
• Update - Install and Activate recommended plugins

Enjoy Hide My WP! John