What’s New in Wordfence 9.1.0: Security News, Faster Rules and Smarter Alerts

Wordfence 9.1.0 is now available. It adds the new Wordfence Security News Widget, which brings the latest WordPress security alerts and research to your dashboard, plus faster firewall rule updates, sharper firewall request parsing, Live Traffic logging for application password and REST API login failures, configurable attack alert thresholds, and additional features, fixes and improvements.

Attackers often hide payloads in malformed or deeply nested input, counting on a firewall reading a request differently than WordPress does. We’ve improved request parsing to narrow that gap, so the firewall inspects that input more like the way WordPress reads it. The firewall also checks for rule updates more often, so new firewall rules reach your site sooner.

Live Traffic now logs failed logins through application passwords and the REST API, two ways in that skip wp-login.php. You also get configurable thresholds for WAF attack alerts, so you decide how much attack activity it takes to trigger an alert.

Rounding out the release: PHP 8.6 compatibility and reliability fixes for unusual hosting environments.

Here’s what’s in Wordfence 9.1.0 and what it means for your site.

In This Post