== Changelog ==

Releases from 2.2.0 onwards are listed in readme.txt. This file keeps the older
history so the plugin page stays readable.

= 2.1.0 =

* Weighted scoring by category (critical 3.0, high 2.0, medium 1.5, low 1.0) with an A to F grade
* A single critical failure now affects the overall grade properly
* XML-RPC check rewritten to test the endpoint instead of guessing
* REST API check rewritten to verify actual exposure
* User enumeration check extended with several detection methods
* Larger password list for the weak password check
* Better detection of the automatic core update setting
* New checks: application passwords, WP-Cron, debug log exposure, CORS, core file integrity
* Added COOP, COEP and CORP to the security header list

= 2.0.0 =

* Added capability checks to every AJAX handler
* Fixed a cross-site scripting flaw in the accordion descriptions
* Removed the shell-based vulnerability tests (Shellshock, Heartbleed, POODLE, DROWN)
* Fixed an SQL injection flaw in the scanner for other WordPress installations
* Replaced direct filesystem calls with WP_Filesystem
* Fixed a race condition on the temporary test file by using unique names
* Rewrote the frontend in vanilla JavaScript, dropping the jQuery dependency
* Keyboard navigation and screen reader support throughout
* CSS custom properties, responsive layout and reduced-motion support
* Added the missing backup, security plugin, table prefix and login protection checks

= 1.1.5 =

* Sanitised and validated the server address before the blacklist lookup

= 1.1.4 =

* Removed stray files from the plugin folder
* Documented the third-party services in readme.txt and in the interface
* Sanitised, validated and escaped all input and output, including server variables
* Validated IP addresses with filter_var and escaped shell arguments
* Moved functions, classes and options behind a unique prefix

= 1.1.3 =

* New checks: PHP version support, directory permissions, database user privileges, outdated libraries
* Added file change detection for important files
* Performance work on the existing checks

= 1.1.2 =

* New checks: PHP version in response headers, unwanted files in the root directory, Windows Live Writer link, security keys and salts, automatic core updates, deactivated plugins

= 1.1.1 =

* Fixed the text domain
* Added tests

= 1.1 =

* Added a broader set of security checks
* Reworked the result display
* Performance and reliability improvements

= 1.0 =

* Initial release
