Deployed UI Update for Squirrly Social
Deployed UI Update for Squirrly Social today.
We've kept the same UX, but made it look more modern and I hope you'll let us know your feedback on Post Groups and Calendars. Even though they work the same way, I'm curious if you NOW find them more stable and they provide more clarity
We've kept the same UX, but made it look more modern and I hope you'll let us know your feedback on Post Groups and Calendars. Even though they work the same way, I'm curious if you NOW find them more stable and they provide more clarity
Renewable Credits versus One-Time Credits in Next Level Marketing AI
Important update to AISQ’s Next Level Marketing AI, now that we are releasing the new Next Level Marketing AI 2027.
With the new version, clients of Next Level Marketing AI can purchase subscription plans, to make it easier for them to manage credits and the overall usage inside NLM.
However, we now have two different Classes of Credits that can be used:
https://nextlevelmarketing.ai/renewable-credits-versus-one-time-credits-in-next-level-marketing-ai/
https://nextlevelmarketing.ai/renewable-credits-versus-one-time-credits-in-next-level-marketing-ai/
Customer App by Squirrly Has Received New Updates
Our Customer App is the place where you can find all products you've purchased from AISQ (registered as Squirrly Limited in the United Kingdom).
It is related to products purchased from our Store for Entrepreneurs: https://www.squirrly.co/
Products purchased on other web stores do not show up in the Customer App. The tools created by AISQ / Squirrly make clients go through the checkout process on Squirrly.co (except for CrawlBrain, some instances of Hide my WP and ContentLook AI ; however, ContentLook AI subscriptions appear in the Customer App)
https://www.squirrly.co/awesomeness/customer-app/
New updates have been made, to hold information for the new products launched during Digital Week at AISQ!
It is related to products purchased from our Store for Entrepreneurs: https://www.squirrly.co/
Products purchased on other web stores do not show up in the Customer App. The tools created by AISQ / Squirrly make clients go through the checkout process on Squirrly.co (except for CrawlBrain, some instances of Hide my WP and ContentLook AI ; however, ContentLook AI subscriptions appear in the Customer App)
https://www.squirrly.co/awesomeness/customer-app/
New updates have been made, to hold information for the new products launched during Digital Week at AISQ!
On 30th September 2026, Email Hero by AISQ Went Out of Closed Beta and Early Access Has Started for the Email Marketing Platform
Many new updates this year to Email Hero by AISQ, which have pushed it out of Closed Beta:
https://emailheroapp.com/
During Digital Week, you've seen many update messages about the new release on our social media profiles. Some of the posts included the story of how we started it in Q4 of 2020 and how we released the Closed Beta in 2023 for clients of Digital Pack.
https://emailheroapp.com/
During Digital Week, you've seen many update messages about the new release on our social media profiles. Some of the posts included the story of how we started it in Q4 of 2020 and how we released the Closed Beta in 2023 for clients of Digital Pack.
BIG News: Email Deliverability Assistant Now Released!

We've published details about this Assistant many years ago. It's finally available in the Early Access versions of Email Hero by AISQ.
Find the published details on our "Digital Assistants" page:
https://www.squirrly.co/digital-assistants/
#DigitalWeek #DigitalWeekAISQ #DigitalWeekSquirrly
Still a few more days of: Digital Week
While you're following us for Digital Week, I would definitely NOT miss:
3 Premium Courses. At zero cost to you, if you join from the VIP Backstage page.
Finished Updating Prices on all our WP Ghost Websites and Store Page
https://hidemywpghost.com/hide-my-wp-pricing/
https://wpghost.com/pricing/
https://www.squirrly.co/wordpress/plugins/hide-my-wp/
https://wpghost.org/pricing/
We've made the re-brand because our community loved the idea. But we still want to maintan all of them, because we also know that people don't have time to check out the news about our security brand all day long.
I appreciate the most that they check our resources to help harden their security! That's a lot more important. The rest of it is just work. And we're fine with that.
Keep safe from weird hacks always!
https://wpghost.com/pricing/
https://www.squirrly.co/wordpress/plugins/hide-my-wp/
https://wpghost.org/pricing/
We've made the re-brand because our community loved the idea. But we still want to maintan all of them, because we also know that people don't have time to check out the news about our security brand all day long.
I appreciate the most that they check our resources to help harden their security! That's a lot more important. The rest of it is just work. And we're fine with that.
Keep safe from weird hacks always!
Digital Week is On-Going!
Many new changes, updates, community prizes and gifts already announced!
Follow on https://www.facebook.com/Squirrly.co/
Make sure you check it out as it happens.
Follow on https://www.facebook.com/Squirrly.co/
Make sure you check it out as it happens.
Ghost Doctor in Hide My WP Ghost is one of the most interesting features we've built
Try out Ghost Doctor in Hide My WP Ghost now.
At AISQ, we've finished new updates for WP Ghost (formerly know as Hide My WP or Hide My WP Ghost). The Ghost Doctor lets you run simulations before making certain settings. It's the best way to verify all your security work.
WP Ghost
Hide My WP Ghost
Hide My WP Ghost by Squirrly
WP Ghost by AISQ
At AISQ, we've finished new updates for WP Ghost (formerly know as Hide My WP or Hide My WP Ghost). The Ghost Doctor lets you run simulations before making certain settings. It's the best way to verify all your security work.
WP Ghost
Hide My WP Ghost
Hide My WP Ghost by Squirrly
WP Ghost by AISQ
More updates to Squirrly SEO (for the AI Assistants you're using directly in ChatGPT and Claude)
Squirrly SEO
https://howto12.squirrly.co/kb/connect-squirrly-to-ai-assistants/
= 14.2.5 =
* New: You can now add Squirrly SEO to AI Assistants as a connector, from the new AI Tools screen under Technical SEO. Turn on one switch, copy the address it gives you, paste it into AI Assistants, and approve the connection on your own WordPress login screen. There is no separate program to install on your computer and no Application Password to create by hand. The switch is off by default, and nothing about your site is exposed until you turn it on and approve a connection. Whatever the WordPress user who approves it is allowed to do is exactly what the assistant is allowed to do, and you can cut the access off at any time from either side.
https://howto12.squirrly.co/kb/connect-squirrly-to-ai-assistants/
= 14.2.5 =
* New: You can now add Squirrly SEO to AI Assistants as a connector, from the new AI Tools screen under Technical SEO. Turn on one switch, copy the address it gives you, paste it into AI Assistants, and approve the connection on your own WordPress login screen. There is no separate program to install on your computer and no Application Password to create by hand. The switch is off by default, and nothing about your site is exposed until you turn it on and approve a connection. Whatever the WordPress user who approves it is allowed to do is exactly what the assistant is allowed to do, and you can cut the access off at any time from either side.
* New: The AI Tools screen checks whether your web server is publishing the two sign-in addresses an AI assistant reads, and tells you what to change if it is not. Some common server settings answer those addresses before WordPress does, which leaves the rest of your site working normally and shows up only as a connection that fails for no visible reason.
GEO Plugin by Squirrly SEO Connects to ChatGPT and Claude Now.
We've been doing Agentic SEO tasks since 2024, so the idea on its own is not new. The AI in Next Level Marketing AI has kept doing SEO for our clients in various ways.
Now, however, thanks to the Abilities API of WordPress 6.9, we opened this up back in 4th August 2026 to our users.
Learn about it here: https://howto12.squirrly.co/kb/connect-squirrly-to-ai-assistants/
and here: https://howto12.squirrly.co/how-to-connect-claude-or-chatgpt-to-squirrly-seo/
+ one special entry for developers who want to run tests on the new capabilities https://howto12.squirrly.co/kb/testing-the-squirrly-abilities/
Now, however, thanks to the Abilities API of WordPress 6.9, we opened this up back in 4th August 2026 to our users.
Learn about it here: https://howto12.squirrly.co/kb/connect-squirrly-to-ai-assistants/
and here: https://howto12.squirrly.co/how-to-connect-claude-or-chatgpt-to-squirrly-seo/
+ one special entry for developers who want to run tests on the new capabilities https://howto12.squirrly.co/kb/testing-the-squirrly-abilities/
More Updates and Fixes to the GEO Plugin by Squirrly SEO
GEO Plugin by Squirrly SEO:
= 14.2.4 =
= 14.2.4 =
- Fix: The Inner Links suggestions no longer include WordPress menu items. Menu items are stored as posts and have an address of their own, but that address is not a real page and returns "not found" when opened, so they were being suggested as pages to link from and then reported as broken links in the Inspect report.
- Fix: The WebSite structured data now publishes your WordPress Site Title as the name of your site - the short name Google shows above your results - instead of the SEO title of the home page. The SEO title is a sentence written for the search result and was being cut short when Google read it as the site name.
- Fix: The home page SEO title and meta description are now published in the JSON-LD properties they belong in - headline and description - instead of the description being published as the headline.
- Fix: Company and personal brand names written with characters like "&" are no longer published with the HTML entity inside the structured data.
- Fix: The Rich Snippets settings now describe correctly what is published when the company or personal brand name is left empty.
- Fix: The description in your Rich Snippets Schema now follows the Meta Description you wrote for the page, instead of falling back to the raw page content. The {{excerpt}} pattern in a Schema field behaves like the {{title}} pattern already did with your SEO title, so an optimised Meta Description no longer has to be copied into the Rich Snippets by hand and kept in sync there.
- Fix: The headline in your Rich Snippets Schema no longer repeats your site name when the Automation title pattern already ends with it - "Post Title | Site Name | Site Name" is now published as "Post Title | Site Name".
Updates for the free version of WP Ghost (Hide My WP)
WP Ghost Free
= 7.0.09 (17 August 2026) =
* New - AI Security Explanations: every finding on the Security Check page explained for your own website, in plain language
* New - AI Security Explanations rank your findings by what actually exposes your site, using your server type, your rules and your security mode
* New - A plain-language summary of your whole website, above the list of what to fix
* New - Open Details on any finding to read why it matters on your server and what an attacker would do with it
* Fix - Fix it now works for the Security Check tasks that change a plugin setting, such as Hide Old Paths, Hide Common Files, Hide wp-login and Disable XML-RPC
* Fix - Fix it no longer answers with "Ajax is not loading correctly. Clear all cache and try again." after the paths have been changed
* Fix - The Security Check summary now shows whether your paths are working instead of always reporting that they have not been checked
* Update - Published a coordinated vulnerability disclosure policy (SECURITY.md), a list of the third-party components we bundle (sbom.json), and a declared 5 year security update period
= 7.0.09 (17 August 2026) =
* New - AI Security Explanations: every finding on the Security Check page explained for your own website, in plain language
* New - AI Security Explanations rank your findings by what actually exposes your site, using your server type, your rules and your security mode
* New - A plain-language summary of your whole website, above the list of what to fix
* New - Open Details on any finding to read why it matters on your server and what an attacker would do with it
* Fix - Fix it now works for the Security Check tasks that change a plugin setting, such as Hide Old Paths, Hide Common Files, Hide wp-login and Disable XML-RPC
* Fix - Fix it no longer answers with "Ajax is not loading correctly. Clear all cache and try again." after the paths have been changed
* Fix - The Security Check summary now shows whether your paths are working instead of always reporting that they have not been checked
* Update - Published a coordinated vulnerability disclosure policy (SECURITY.md), a list of the third-party components we bundle (sbom.json), and a declared 5 year security update period
Updates to WordPress AEO GEO Plugin by Squirrly SEO
GEO Plugin by Squirrly
= 14.2.0 =
* New: Connect AI assistants such as Claude and ChatGPT directly to Squirrly. On WordPress 6.9 and above, Squirrly now registers its own WordPress Abilities, so an AI tool can read and update your SEO titles, meta descriptions, keywords, social previews and Schema types, switch Squirrly features on or off, and look up your Briefcase keywords, rankings, Focus Pages and Live Assistant tasks - all with your normal WordPress login and user role, without sharing any Squirrly password or API key.
* New: The same abilities are available to any app or script over the WordPress REST API and to WP-CLI, so agencies and developers can automate Squirrly across sites. Also requires WordPress 6.9 or newer; the plugin itself still runs on WordPress 5.3 and up and every other feature is unchanged there.
* Improvement: What an AI tool is allowed to do follows the WordPress user you connect it as - an Editor can update the SEO of the articles they can edit, and only an Administrator can change site-wide Squirrly settings.
* Fix: Pages requested by the Squirrly Crawler or by the Pinterest bot are no longer stored in the page cache, so LiteSpeed Cache, WP Rocket and similar plugins can't serve a bot-specific version of the page to your visitors.
* Fix: The Squirrly Snippet now reports an error when a save is refused - for example when your user role can't edit that article - instead of showing it as saved.
https://howto12.squirrly.co/how-to-connect-claude-or-chatgpt-to-squirrly-seo/
= 14.2.0 =
* New: Connect AI assistants such as Claude and ChatGPT directly to Squirrly. On WordPress 6.9 and above, Squirrly now registers its own WordPress Abilities, so an AI tool can read and update your SEO titles, meta descriptions, keywords, social previews and Schema types, switch Squirrly features on or off, and look up your Briefcase keywords, rankings, Focus Pages and Live Assistant tasks - all with your normal WordPress login and user role, without sharing any Squirrly password or API key.
* New: The same abilities are available to any app or script over the WordPress REST API and to WP-CLI, so agencies and developers can automate Squirrly across sites. Also requires WordPress 6.9 or newer; the plugin itself still runs on WordPress 5.3 and up and every other feature is unchanged there.
* Improvement: What an AI tool is allowed to do follows the WordPress user you connect it as - an Editor can update the SEO of the articles they can edit, and only an Administrator can change site-wide Squirrly settings.
* Fix: Pages requested by the Squirrly Crawler or by the Pinterest bot are no longer stored in the page cache, so LiteSpeed Cache, WP Rocket and similar plugins can't serve a bot-specific version of the page to your visitors.
* Fix: The Squirrly Snippet now reports an error when a save is refused - for example when your user role can't edit that article - instead of showing it as saved.
https://howto12.squirrly.co/how-to-connect-claude-or-chatgpt-to-squirrly-seo/
New Updates to WP Ghost (Hide My WP)
- New - Vulnerability scan: flags installed plugins and themes with published security issues
- New - Ghost Doctor: finds what is breaking your paths and repairs it in one click
- New - Security Check now opens with one prioritized list of what to fix first
- New - AI explanations written for your own website, server and configuration
- New - Undo restores your settings if a repair does not help
- Fix - Fix it now works for Security Keys, Table Prefix, wp-config constants and plugin updates
- Fix - Security Check runs on its own the first time you open it
- Fix - Last check now shows how long ago the scan ran, not a clock time
- Fix - Change Paths shows one card after a path change instead of two
- Fix - Security Tasks no longer shows an empty table when every task passed
- Fix - Security Check no longer reports wp-content, the login path or the admin path as visible on sites that are hiding them correctly
- Fix - Ghost Doctor no longer reports a failure when Disable REST API Access is on
- Fix - Security Check no longer reports wp-content, the login path or the admin path as visible on sites that are hiding them correctly
- Fix - Ghost Doctor no longer reports a failure when Disable REST API Access is on
GEO Plugin by Squirrly SEO now comes with a new 14 Days Journey to GEO and Connects to GEO Academy by AISQ Growth.
GEO Plugin by Squirrly SEO now comes with a new 14 Days Journey to GEO and Connects to GEO Academy by AISQ Growth.
Our loyal emails subscribers have started receiving the new 14 Days Journey to GEO, that helps users grow with AEO and GEO and face this tidal wave of change that sweeps away traditional online marketing.
The Company's Founder has released a full blog post with 3 videos inside to show you what the future of online marketing looks like.
You will also find the reasons for building the new 14 Days Journey and also the GEO Academy. There are many reasons why AEO and GEO are not to be ignored. GEO Academy is the main program, but the 14 Days Journey provides helpful supplements to the teachings in the Academy.
Our loyal emails subscribers have started receiving the new 14 Days Journey to GEO, that helps users grow with AEO and GEO and face this tidal wave of change that sweeps away traditional online marketing.
The Company's Founder has released a full blog post with 3 videos inside to show you what the future of online marketing looks like.
You will also find the reasons for building the new 14 Days Journey and also the GEO Academy. There are many reasons why AEO and GEO are not to be ignored. GEO Academy is the main program, but the 14 Days Journey provides helpful supplements to the teachings in the Academy.
New updates for GEO Plugin by Squirrly SEO + Advanced Pack
= 2.5.05 =
Security
* Fixed SQL injection in the JSON-LD schema queries: the schema type, the url hash and the
search term were concatenated into the query instead of being bound, so a crafted schema
type posted by a user who can manage snippets could change which rows were read and written.
Every value is now bound with $wpdb->prepare().
* Fixed ORDER BY injection in the reusable schema and redirect lists: the sort column and the
direction now have to match a whitelist.
* The redirect and redirect log queries use bound parameters as well, and LIKE searches escape
their wildcards, so a "%" in a search no longer matches everything.
* A schema type is validated as a schema.org word before it reaches the markup, and URL fields
drop any protocol WordPress does not allow, so a "javascript:" value can no longer be
published in a schema or in the @id built from it.
Schema
* Fixed decimal ratings being truncated: a 4.4 rating was published as 4. Ratings typed with a
comma ("4,4") are normalised to the separator Google expects.
* Added Review Count to Aggregate Rating. Google accepts either a rating count or a review
count, so neither is required on its own now, and the form says when both are missing.
* An empty field is no longer published at all, at any depth of the schema. A field left blank
used to reach the markup as "isbn": false or "contactType": "", which Google reports as
invalid, and a group with nothing in it was published empty. A property Google does not find
costs nothing, so they are left out instead. A real 0 is still data and is kept.
* Example values shown in the schema forms are no longer saved as data. Opening a form and
saving it used to publish "0" as a product's GTIN, MPN and ISBN, "USD" as its currency, "US"
and "NY" as its shipping destination and "General Admission" as an event's ticket name. They
stay visible as input hints. Real defaults, like the 1 to 5 rating scale, still pre-fill.
* Fixed the reusable schema list failing to count when no filter was applied.
Saving a schema
* Fixed a schema that could not be saved and gave no reason. A required field left empty stops
the browser from submitting the form, and the field is usually scrolled out of sight inside
the dialog, so the Save button looked dead. The dialog now says which is missing and scrolls
to it.
* A Product no longer demands a price and a full set of pros and cons before it can be saved:
Google treats those as optional, and an offer with nothing in it is now left out of the
markup entirely. A Book no longer demands an ISBN and a language for the same reason.
* Saving a reusable schema without a name now says so instead of failing silently.
Review snippet
* The "Review For" picker covers every item type Google accepts for review stars: 113 types
grouped by what they are, replacing the 11 that were there before. Theatres are covered from
three sides - the venue, the company and the performance.
* An item that only qualifies with a second type now gets one, so a theatre venue is published
as PerformingArtsTheater and EntertainmentBusiness, and a car as Car and Product.
* Added a choice between publishing the rating as a node of its own and nesting it on the
reviewed item. Nesting attaches it to an entity the page already describes, when there is
one, instead of describing the same thing twice.
* The form warns when a rating is above its own maximum, and when the reviewed item is the site
itself: Google does not show stars for a business or organization reviewing itself.
Security
* Fixed SQL injection in the JSON-LD schema queries: the schema type, the url hash and the
search term were concatenated into the query instead of being bound, so a crafted schema
type posted by a user who can manage snippets could change which rows were read and written.
Every value is now bound with $wpdb->prepare().
* Fixed ORDER BY injection in the reusable schema and redirect lists: the sort column and the
direction now have to match a whitelist.
* The redirect and redirect log queries use bound parameters as well, and LIKE searches escape
their wildcards, so a "%" in a search no longer matches everything.
* A schema type is validated as a schema.org word before it reaches the markup, and URL fields
drop any protocol WordPress does not allow, so a "javascript:" value can no longer be
published in a schema or in the @id built from it.
Schema
* Fixed decimal ratings being truncated: a 4.4 rating was published as 4. Ratings typed with a
comma ("4,4") are normalised to the separator Google expects.
* Added Review Count to Aggregate Rating. Google accepts either a rating count or a review
count, so neither is required on its own now, and the form says when both are missing.
* An empty field is no longer published at all, at any depth of the schema. A field left blank
used to reach the markup as "isbn": false or "contactType": "", which Google reports as
invalid, and a group with nothing in it was published empty. A property Google does not find
costs nothing, so they are left out instead. A real 0 is still data and is kept.
* Example values shown in the schema forms are no longer saved as data. Opening a form and
saving it used to publish "0" as a product's GTIN, MPN and ISBN, "USD" as its currency, "US"
and "NY" as its shipping destination and "General Admission" as an event's ticket name. They
stay visible as input hints. Real defaults, like the 1 to 5 rating scale, still pre-fill.
* Fixed the reusable schema list failing to count when no filter was applied.
Saving a schema
* Fixed a schema that could not be saved and gave no reason. A required field left empty stops
the browser from submitting the form, and the field is usually scrolled out of sight inside
the dialog, so the Save button looked dead. The dialog now says which is missing and scrolls
to it.
* A Product no longer demands a price and a full set of pros and cons before it can be saved:
Google treats those as optional, and an offer with nothing in it is now left out of the
markup entirely. A Book no longer demands an ISBN and a language for the same reason.
* Saving a reusable schema without a name now says so instead of failing silently.
Review snippet
* The "Review For" picker covers every item type Google accepts for review stars: 113 types
grouped by what they are, replacing the 11 that were there before. Theatres are covered from
three sides - the venue, the company and the performance.
* An item that only qualifies with a second type now gets one, so a theatre venue is published
as PerformingArtsTheater and EntertainmentBusiness, and a car as Car and Product.
* Added a choice between publishing the rating as a node of its own and nesting it on the
reviewed item. Nesting attaches it to an entity the page already describes, when there is
one, instead of describing the same thing twice.
* The form warns when a rating is above its own maximum, and when the reviewed item is the site
itself: Google does not show stars for a business or organization reviewing itself.
Advanced Pack Squirrly SEO
Squirrly Advanced Pack
=2.5.04=
=2.5.04=
New: Reusable Schemas now have an "Update All Pages" action that applies the reusable schema to every page using it, and the list shows how many pages saved their own values on top of it.
Fix: The entries you add to a reusable schema after placing it on a page - reviews, ratings, FAQ questions, How-To steps, opening hours - now show up on all the pages using it. Those pages used to keep the values they had when the schema was first added, so the reviews and the rating stars never appeared.
Fix: Removing a schema from a page now deletes its values as well, so adding a schema of the same type later starts from an empty form with the default patterns instead of the values you removed.
Fix: Schemas that come from Automation can now be removed from a page. Deleting one used to look like nothing happened and the schema came back after saving.
Fix: Deleting a schema no longer removes a different schema type from the page.
Fix: When a schema cannot be deleted, the error is now shown and the schema stays in the list, instead of disappearing while its values remain saved.
Fix: The schemas saved for a page are now deleted from the database when the page is deleted.
Fix: Administrators can use the Rich Snippets editor again on sites where the Squirrly capabilities were removed by another plugin or by a role reset.
=2.5.03=
Fix: The Organization (or Person) details are now included in the structured data on every page. The publisher information in schemas such as Article, NewsArticle and Product previously pointed to details that were only present on the home page.
Fix: With Personal Brand Rich Snippets enabled, the publisher is now correctly marked as a Person instead of an Organization, even when "Set this person as a global author" is turned off.
Fix: The Organization website address is no longer replaced by the address of the page currently being viewed.
Fix: Removed invalid properties from the Music schema when the MusicGroup type is selected, so it passes Schema.org validation.
Fix: The Local Business (Store and Restaurant) website address now points to your site instead of the page currently being viewed.
New WP Ghost by Squirrly updates packs
WP Ghost
= 9.0.10 (13 July 2026) =
= 9.0.10 (13 July 2026) =
- Fix - Cloud Activity Log entries are now sent in the background, so a slow logging server can no longer delay backend requests, including the Block Editor and other REST calls
- Fix - Force 2FA Setup no longer redirects custom user roles that can't access their profile to a setup screen they are unable to open
- Fix - Settings page navigation menu no longer loses its layout on sites where another plugin or theme restricts the allowed HTML tags; the menu now keeps its own classes and attributes regardless of the site's wp_kses filters
WP Ghost
= 9.0.12 (20 July 2026) =
- Security - Two-Factor Authentication settings are now bound to the account they belong to, so the 2FA method, authenticator, email codes, backup codes and passkeys can only be managed by the account owner or by an administrator allowed to edit that user
- Security - Passkey enrollment is now always self-service, matching the device the passkey is created on
- Security - Temporary Login updates and deletions now apply only to temporary accounts, so regular accounts are never affected from this screen
- Security - The role assigned to a temporary login is now validated and can never grant more capabilities than the user creating it already has
- Security - Magic Login links now require the same permissions as the screen they are offered from
= 9.0.11 (16 July 2026) =
- Fix - Editing a custom post type that uses the built-in Categories-Tags taxonomy no longer crashes the Block Editor
- Fix - Block Editor no longer crashes when Hide User Enumeration is on; the users REST endpoint is now hidden from anonymous visitors only, so logged-in Editors and Authors can still edit posts and custom post types
WP Ghost Update packs july 2026
WP Ghost
= 9.0.09 (08 July 2026) =
= 9.0.09 (08 July 2026) =
- New - Force 2FA Setup: require selected user roles to set up Two-Factor Authentication before they can access the dashboard, with a guided setup screen shown right after login
- Fix - WP-CLI commands no longer emit a PHP 8.5 Undefined array key hostname warning
= 9.0.08 (01 July 2026) =
- Fix - Temporary Login page no longer triggers a fatal error when opened for a user that was deleted or expired
- Fix - Two-Factor email setup and Magic Login no longer emit PHP warnings when the requested user no longer exists
= 9.0.07 (29 June 2026) =
- New - Frontend Check now also verifies the theme's CSS and JS files load, catching a broken layout on pages that still return 200
- New - Detects when CSS/JS/font files load through WordPress instead of the server config, falls back to safe paths and warns you on the settings page
- Improvement - Redesigned the Frontend Check results into clear, uniform rows that stay readable with long URLs
= 9.0.06 (02 June 2026) =
- Fix - Some sites could show a blank page when source code optimization was enabled; the header/tag find & replace is now fail-safe and never blanks the output on a regex error
- Fix - Prefetch/speculation rules cleanup now removes the wp-admin and wp-*.php entries without leaving the rules JSON invalid
- Security - Fixed unauthenticated Open Redirect via the redirect_to parameter on the custom logout URL.