◈Version History & Milestones

GeniousSonu Site Checkup Changelog

All notable improvements, security patches, enterprise features, and architectural updates are documented here. Kept in strict synchronization with the official WordPress plugin readme.txt.

v1.3.4

Latest Release
October 21, 2026
  • DocsOptimize WordPress.org search visibility with natural keywords, verified search tags, and real-world FAQs.
  • DocsUpdate project portfolio landing page, comprehensive SOP task reference, and live verification.

v1.3.3

October 19, 2026
  • FixRemote WordPress.org changelog scanning for security updates with strict semantic version parsing and zero false findings on local fixtures.
  • FeatureDestructive action password confirmation setting toggle (default OFF) with full capability and nonce preservation.
  • FeatureSeven honest task result states (Done & Verified, Applied Not Verified, Needs Action, Needs Host or Manual, Informational, Not Applicable, Failed) with actionable plugin capability guidance on every task.
  • FixEnvironment sensitivity for TLS probe and SPF/DMARC checks to mark local (.local, localhost) and non-HTTPS sites as Not Applicable.
  • FixGuarded is_plugin_active calling context and established strict Level B guided status for 2FA and Child Theme Scaffolder.
  • SecurityIn-memory atomic wp-config.php updates with zero disk backup persistence and local cryptographic salt generation.
  • PrivacyIndependent per-source opt-in consent controls defaulting to off for all external API lookups.

v1.3.2

October 15, 2026
  • FixSynchronized text domain to genioussonu-site-checkup across entire PHP and JS codebase.
  • HardeningHardened phpcs annotations and verified strict WordPress Coding Standards compliance.

v1.3.1

September 28, 2026
  • FixParameterized and strictly escaped database table queries across migration readiness, DB health scanner, and task status lookup.
  • FixExcluded internal agent and development markdown files (AGENTS.md, DEVELOPMENT.md, CONTRIBUTING.md, README.md, .agents/) from release packages.
  • HardeningStrengthened SQL query preparation and table validation matching strict injection-prevention guidelines.

v1.3.0

September 25, 2026
  • FeatureMulti-Source Vulnerability Intelligence — Unified threat feed integrating GitHub Advisory Database (GHSA), Google OSV, NIST NVD, CISA Known Exploited Vulnerabilities (KEV), and WPScan with strict Guideline 7 consent toggles and HKDF-encrypted API keys.
  • FeatureCompound Version-Range Correlation — Semver boundary parser (<, <=, >, >=, =, x, compound , / AND) mapping vulnerability ranges accurately to installed plugin/theme versions.
  • Feature3-State Fix Verification — Verifies vulnerability remediations (done, applied_unverified, not_applied) through live HTTP header and file checks.
  • FeatureExternal Fingerprint & Information Disclosure Audit — Non-destructive loopback scanner probing for exposed backup dumps, sensitive files, and version leaks.
  • SecurityEnd-to-End Cryptographic Masking — HKDF-derived encryption at rest for all third-party API credentials with write-only REST submissions and masked getters.

v1.2.0

September 20, 2026
  • FeatureREST API Security Auditor — Complete discovery and permission callback inspection of all registered REST endpoints across core, active plugins, and themes with risk scoring and source reflection.
  • FeatureEnvironment Badge Tagging — Persistent, color-coded admin bar badge (Production/Red, Staging/Amber, Development/Gray) with smart heuristics and hostname safety guards.
  • FeatureDeveloper Diagnostic Snapshot — Sanitized Markdown system report export for GitHub issues and tickets with strict secret/salt/password redaction.
  • FeatureWP-Cron Health Auditor — Inspection of scheduled background tasks with overdue stalled event detection (>600s late) and duplicate hook identification.
  • FeatureDatabase Health Scanner & Bloat Cleanup — Detection of orphaned postmeta, orphaned usermeta, expired transients, and excess revisions with protected Level-B cleanup gated by administrator re-authentication and recent backup validation.
  • FeatureMigration Serialization Readiness — Bounded scanning for absolute site URLs embedded inside serialized PHP objects with actionable WP-CLI search-replace guidance.
  • FeatureWeekly Changelog Digest — Automated aggregation of available plugin and theme updates with upgrade notice highlighting, scheduled weekly digest alerts, and manual inspection.
  • IntegrationSelf-Hosted Update Checker — Native support for update notifications and changelog viewing via YahnisElsts/plugin-update-checker library, cleanly isolated from WordPress.org releases.

v1.0.2

September 15, 2026
  • FixResolve Run-button flicker and silent reversion on audit scanner tasks (File Permissions Audit, PHP Security Restrictions, Database Table Prefix, etc.) by ensuring all task response states (completed, unverified, findings-detected, failed) render explicit, visible UI states and appropriate action buttons.
  • FixRestrict administrator password re-authentication exclusively to destructive, state-changing tasks (file modifications, plugin deletion, login URL renames, salt rotation, application password revocation) and exclude all read-only diagnostic scanners.
  • PerformanceExtend re-authentication token validity to a 30-minute trusted window after successful verification, eliminating repetitive password re-entry while retaining session binding and instant invalidation on logout or password change.
  • UIRetain updated task row visibility and add visual highlight animation upon manual scan execution during filtered status views.

v1.0.1

September 12, 2026
  • FixPrevent syntax corruption in wp-config.php during security salt rotation by removing unescaped quotes/backreferences and using safe callback replacement.
  • FixEnsure full excision of empty marker blocks and directive-aware verification in WPSG_Htaccess_Manager.
  • FixEnsure dbDelta schema updates run automatically on plugin version upgrades, not only on initial activation.
  • FixReplace native browser confirm dialogs with accessible, branded custom modal dialogs.
  • FixEnforce design tokens across entire admin stylesheet, eliminating hardcoded hex values.
  • FixResolve header case-sensitivity in loopback self-verification checks.

v1.0.0

September 10, 2026
  • InitialInitial release with Task Registry covering complete agency SOP checklist items.
  • FeatureImplemented client-driven sequential batch runner.
  • Feature.htaccess and wp-config.php marker managers with health checks and live pre-execution diff preview.
  • FeatureIntegrated baseline drift scanner for rogue admins and wp_options.
  • FeatureAdded Nginx server detection and snippet exporter.
  • IntegrationIntegrated Patchstack vulnerability database API with match-confidence scoring.
  • FeatureMulti-protocol TLS probe (TLSv1.0 – TLSv1.3) and certificate chain depth verification.
  • FeatureStrict file permissions auditing (640 for wp-config.php, 644 files, 755 directories).
  • FeatureRFC 9116 /.well-known/security.txt generator with document root containment.
  • FeatureInformational SPF/DKIM/DMARC domain authentication checker.
  • Feature12-month audit log retention and 15-day / 90-day / 6-month automated scheduler.