WordPress News

Wordfence Security 9.0.0 Released

high confidence based on 1 community posts

What’s new in Wordfence Security 9.0.0

Released: August 10, 2026

Active installations: 5,000,000

Tested up to WordPress 7.1

Requires PHP 7.0

Available for both free and premium installations

Can be enabled for any user role (multisite support is currently limited)
WooCommerce integration
Support for custom authentication integrations
Improvement: GeoIP database updated
Improvement: Several mobile styling and layout improvements on the login security page
Improvement: Added diagnostics info for authentication hooks to assist with login-related troubleshooting
Change: Hardened 2FA flow when installed next to plugins with non-standard authentication (credit: Austin Ginder of Anchor Hosting)
Change: Hardened 2FA remember cookie handling
Change: The scanner will now display an issue when the standalone Wordfence Login Security plugin is installed because all functionality is already provided by Wordfence itself
Change: Updated internal libraries used by the Vue UI
Change: Login error masking setting now also applies to the Login Security functionality

8.2.2 — May 13, 2026

Improvement: Better presentation of Live Traffic data on wide screens
Improvement: Increased legibility of token fields
Improvement: Reworked the pagination of the Blocking page for a better UX
Improvement: Country blocking token field can now expand to show all entries
Improvement: Performance improvements for the activity log and better pause behavior on window blur/focus

8.2.1 — May 6, 2026

Fix: Fixed issue with some i18n plugins/themes when a user has no 2FA recovery codes
Fix: Toggled options with additional help links now correctly open the link rather than toggling the option
Fix: Country Blocking editing fixed when there are multiple pages of block rules
Fix: Added better error handling to the initial Vue data load
Fix: Handled error when logging in using legacy 2FA with separate prompts enabled