Skip to content
Just updated87 new versions in the last 24 hoursDownloads left today: of of leftNo downloads left today · Resets in h
Join nowAccount
Security Ninja (Premium) plugin cover image

PluginUpdated

Security Ninja (Premium)

v5.307Unlimited sites

Security Ninja (Premium) is a WordPress security plugin for site owners and agencies.

Product facts

Version
5.307
Released
29 October 2026
Type
Plugin
Licence
GPL
Included in
Every plan, or $3.99 / year on its own

Overview

Security Ninja (Premium) checks a WordPress site for weaknesses with more than 50 security tests. Its scans cover vulnerabilities and malware, while integrity checks and core file monitoring help identify changes to WordPress files. Site owners can also use login hardening, including two-factor authentication and IP blocking, to add safeguards around account access.

The plugin also includes firewall protection, scheduled scans, and event logging. Real-time firewall protection, automated fixes, advanced malware cleanup, and white-label options are included among its Pro capabilities. The combination of scanning and site defenses suits people who want to review security issues themselves, as well as agencies managing client websites.

Features

  • Vulnerability testing: Run more than 50 security tests to inspect a WordPress site for potential weaknesses and security issues.
  • Malware scanning: Scan the site for harmful code, with advanced malware cleanup available as a Pro capability.
  • Login safeguards: Use two-factor authentication and IP blocking to add safeguards against unauthorized access to WordPress accounts.
  • Firewall protection: Use firewall protection to defend the site from malicious traffic, with real-time firewall capabilities included in Pro.
  • Core file monitoring: Monitor WordPress core files for unauthorized changes and check the integrity of the site's files.
  • Scheduled scans: Schedule security scans to run vulnerability assessments regularly without starting each scan manually.
  • Security event logs: Review logs of security-related activity to see events associated with the site's protection.

Best for

  • WordPress site owners reviewing security risks
  • Agencies managing client WordPress sites
  • Site administrators who want scheduled security scans

Changelog

Version 5.307 — 25 October 2026

  • Fixed Core Scanner - WordPress 7 files under wp-includes/php-ai-client/ that were saved with a shortened name are no longer listed as critical unknown files. When the file matches the official checksum, the scan explains the shortened name and can rename it back. Those files are left out of "Delete critical & warning unknowns".
  • Fixed Firewall - A saved coupon limit of 3 (the minimum is now 5) no longer blocks saving the other firewall tabs. The field sits on the Store tab in the same form, and the browser was refusing to submit it. Thank you Chris.
  • Improved Two-Factor Authentication - Repeated wrong codes now use the same limit as failed logins (default 5 tries in 5 minutes). The wait stays in place until that window ends. With the firewall on, those tries count the same way a wrong password does.
  • Improved Events Logger - An incorrect 2FA code is saved in the events log with the account name. With the firewall on, the same try is also listed as a failed login.
  • Improved Two-Factor Authentication - Authenticator app secrets now follow your WordPress salts. The update re-encrypts existing secrets the next time you open wp-admin. Email codes are unchanged. If you later change AUTH_KEY or SECURE_AUTH_KEY, those users set up the app again.
  • Fixed Early Firewall - Block events waiting to be logged are stored as data files. An event that had not been written to the log yet may be missing once after this update.
  • Fixed Login Protection - The hidden wp-admin check now confirms the login cookie is valid. A normal login is unchanged.
  • Fixed Core Scanner - "Delete critical and warning unknowns" leaves files in the site root alone, including wp-config.php. You can still remove one of those files from its own row.
  • Improved Core Scanner ignores HTML challenge pages when it downloads official file content for a diff or restore.
  • Improved Firewall IP Management shows Unblock for temporary local bans and 404 Guard bans.
  • Improved Visitor Log stays on the current page after you ban an IP from the log.
  • Improved MainWP - The child connection is available whenever MainWP Child is active on the site.

Earlier versions

  • 5.306 (21 October 2026): 1 new, 2 improved, 5 fixed
  • 5.305 (11 October 2026): 1 new, 15 improved, 4 fixed
  • 5.304 (1 October 2026): 5 new, 21 improved, 5 fixed

FAQ

Is Security Ninja (Premium) free?

The code of Security Ninja (Premium) is licensed under the GPL, so anyone may use, change and share it. GPL 247 is a paid service: a plan or a purchase of Security Ninja (Premium) gives you the download and its updates. The developer's own support, licence key and online services are not included.

Which version of Security Ninja (Premium) is this?

Version 5.307, released 29 October 2026. New versions appear here when the developer publishes them.

How do I update Security Ninja (Premium)?

Install GPL 247 Updater on your site and paste your key from My Account. It installs new versions of Security Ninja (Premium) for you.

You might also like