FIXED: Public Shield Screens Hardened
Shield now rejects unsafe attempts to load internal screens from public routes while preserving legitimate block pages, report views, MainWP flows, and MFA login screens. MFA login messages are treated as plain text, reducing the risk of untrusted content appearing in sensitive login flows.
FIXED: Report Access Hardened
Stored security reports now open through an authenticated Shield admin page, so report content is only shown after the proper admin access checks. Older report links redirect into the safer admin report view.
FIXED: Upgrade Reliability Improved
In-place upgrades are more reliable, reducing the chance of fatal errors when WordPress briefly has old and new Shield code loaded together.
FIXED: Actions Queue Display Fixed
The WordPress dashboard widget now consistently links to the Actions Queue, even when Security Admin is locked. Review maintenance groups now separate items that need attention from healthy items, making mixed results clearer to act on. Warning badges use stronger contrast in the dashboard and reports.
FIXED: MFA Device Tables Improved
Passkey and YubiKey records now use matching columns and clearer device details, making profile review and device removal more consistent.
FIXED: MCP Support Fixed
WordPress can now register Shield MCP abilities reliably, so supported integrations can discover and use them correctly.
