Limited-Time Offer

Get Extra 20% off on FullCharge Yearly Plan — available for first 10 users only. Don’t miss out! 🚀

TrackWP

Sucuri Security · Version history

Sucuri Security changelog and version history

Latest version
2.8.1
Oct 14, 2026 (26 days ago)
Releases
117
since 2011
In the last year
8
about one every 40 days
Tested up to
WordPress 7.1.4
PHP 7.4 or later

Releases each year

  • 20115 releases
  • 201314 releases
  • 201416 releases
  • 201511 releases
  • 20166 releases
  • 20178 releases
  • 20187 releases
  • 20194 releases
  • 20202 releases
  • 20215 releases
  • 20227 releases
  • 20234 releases
  • 202411 releases
  • 20259 releases
  • 20268 releases

20268 releases

  1. Sucuri Security 2.8.1Latest

    • Fix the Last Logins date and time column showing up blank when the site’s date or time format setting is empty or invalid. The WordPress default format is used instead.
    • Fix logins completed through Two-Factor Authentication not being recorded in Last Logins or reported to other plugins that watch for logins.

  2. Sucuri Security 2.8

    • Add one-time backup codes for Two-Factor Authentication. Ten codes are created when 2FA is turned on, any one of them will get you in if you lose your authenticator app, and each code stops working once it has been used. You can generate a fresh set at any time from your WordPress profile.
    • Add a search box and severity, plugin, and theme filters to the Audit Logs page, so you can find a specific event without paging through the whole history. Filtering and paging now happen instantly.
    • Add a one-click CSV download of the complete audit trail, ready for a compliance review, an incident timeline, or an archive before older records age out. Large histories export without slowing the site down.
    • Fix an issue that left the audit trail completely empty on sites that do not run in English. Events were recorded but never shown.
    • Fix audit entries being cut short or lost. Saving the WordPress Writing settings discarded the record of every other option changed in that same save, and a less-than sign in a site title or option value truncated the entry from that point on.
    • Fix plugin and theme names that contain an ampersand being shown with an HTML escape code in place of the character itself, both on the page and in the export, which also stopped them from being found by search.
    • Mask API keys, tokens, and salts in the audit trail. They were previously stored in plain text, and are now masked both as new events are recorded and as existing records are read back.
    • Fix a case where markup returned by the Sucuri API could reach the dashboard without being escaped.
    • Fix removing a file from the Hardening allowlist when its path contains characters that have a special meaning in a regular expression.
    • Require PHP 7.4 and WordPress 6.0 or later, and correct the places in the plugin that still advertised PHP 5 support.

  3. Sucuri Security 2.7.4

    • Improve the Two-Factor Authentication page to load the users list in pages, so it stays fast and reliable on sites with hundreds or thousands of users (for example, WooCommerce stores).
    • Add a search box to the Two-Factor Authentication page to quickly find users by username, email, or display name.
    • Strengthen input validation, access checks, and output escaping.
    • Add a one-click “Disable XML-RPC” option to the Hardening page to close a common brute-force and pingback-based DDoS attack vector, with a warning if an active plugin (e.g. Jetpack) depends on XML-RPC.
    • Fix a fatal error on PHP 8 when the API returns the “messages” field as a string instead of an array.

  4. Sucuri Security 2.7.3

    • Refactor AJAX handler to an explicit dispatch map for improved security and efficiency.
    • Improve 2FA section with more UI clarity.
    • Make light-mode default when no preference is defined. Correct inverted dark/light mode icons.
    • Fix i18n regression in 2FA status and setup templates.
    • Fix duplicate CSS property declarations.

  5. Sucuri Security 2.7.2

    • Fix salt bug in the wp-config file.

  6. Sucuri Security 2.7.1

    • Update on the encryption process for the WAF API key due to problems reported on some users.

  7. Sucuri Security 2.7

    • Fixes a lot of readiness warning/errors from PCP.
    • Updates how the plugin stores WAF API key.

  8. Sucuri Security 2.6

    • Create new permissions library.
    • Fix error causing deletion of WAF API key on clearing cache.

20259 releases

  1. Sucuri Security 2.5

    • Add support for two-factor authentication.
    • This plugin bundles qrcode-generator (MIT) by Kazuhiko Arase. Vendored copy due to npm package-injection concerns. We’ll switch back to npm when feasible. Source: https://github.com/kazuhikoarase/qrcode-generator

  2. Sucuri Security 2.4

    • Update list of files to ignore in integrity check.

  3. Sucuri Security 2.3

    • Add theme toggle switch.
    • Remove an unnecessary section for users without WAF key.

  4. Sucuri Security 2.2

    • Update integrity section.
    • Add a warning when the configured WAF domain does not match site’s domain.

  5. Sucuri Security 2.1

    • Fix dark theme conflicting with Woo styles.

  6. Sucuri Security 2.0

    • Added support for WordPress Core vulnerability scanner.
    • Added support for PHP vulnerability scanner.
    • Added support for plugin’s vulnerability scanner.
    • Added support for theme’s vulnerability scanner.
    • Added support for dark theme!

  7. Sucuri Security 1.9.10

    • Fix bug deleting failed logins.
    • Fix bug causing WAF blocks due user-agent containing domain names with specific words.

  8. Sucuri Security 1.9.9

    • Fix secret key updater bug: Sometimes API return last character to be “\” breaking configuration file
    • Fix Undefined array key “woocommerce_category” PHP warning
    • Fix ErrorException caused by stripping all “/” characters from path to htaccess file
    • Fix warning caused from malformed path to htaccess file

  9. Sucuri Security 1.9.8

    • Add support for configuration of CORS header

202411 releases

  1. Sucuri Security 1.9.7

    • Add support for configuration of CSP header (report only)

  2. Sucuri Security 1.9.6

    • Added support for filters in the audit logs
    • Updated messaging for infected sites

  3. Sucuri Security 1.9.5

    • Updated how the allow PHP files are handled in the integrity tool

  4. Sucuri Security 1.9.4

    • Fixed warning in php 8

  5. Sucuri Security 1.9.3

    • Fixed email notifications error handling

  6. Sucuri Security 1.9.2

    • Improve how the WordPress integrity tool displays added, modified, and removed files

  7. Sucuri Security 1.9.1

    • Add support for configuration of Cache-Control header

  8. Sucuri Security 1.8.44

    • Update Firewall settings page to improve privacy and offer new options to handle API keys

  9. Sucuri Security 1.8.43

  10. Sucuri Security 1.8.42

  11. Sucuri Security 1.8.41

20234 releases

  1. Sucuri Security 1.8.40

  2. Sucuri Security 1.8.39

  3. Sucuri Security 1.8.38

  4. Sucuri Security 1.8.37

20227 releases

  1. Sucuri Security 1.8.36

  2. Sucuri Security 1.8.35

  3. Sucuri Security 1.8.34

  4. Sucuri Security 1.8.33

  5. Sucuri Security 1.8.32

  6. Sucuri Security 1.8.31

  7. Sucuri Security 1.8.30

20215 releases

  1. Sucuri Security 1.8.29

  2. Sucuri Security 1.8.28

  3. Sucuri Security 1.8.27

  4. Sucuri Security 1.8.26

  5. Sucuri Security 1.8.25

20202 releases

  1. Sucuri Security 1.8.24

  2. Sucuri Security 1.8.23

20194 releases

  1. Sucuri Security 1.8.22

  2. Sucuri Security 1.8.21

  3. Sucuri Security 1.8.20

  4. Sucuri Security 1.8.19

20187 releases

  1. Sucuri Security 1.8.18

  2. Sucuri Security 1.8.17

  3. Sucuri Security 1.8.16

  4. Sucuri Security 1.8.15

  5. Sucuri Security 1.8.14

  6. Sucuri Security 1.8.13

  7. Sucuri Security 1.8.12

20178 releases

  1. Sucuri Security 1.8.11

  2. Sucuri Security 1.8.10

  3. Sucuri Security 1.8.9

  4. Sucuri Security 1.8.8

  5. Sucuri Security 1.8.7

  6. Sucuri Security 1.8.6

  7. Sucuri Security 1.8.5

  8. Sucuri Security 1.8.4

20166 releases

  1. Sucuri Security 1.8.3

  2. Sucuri Security 1.8.1

  3. Sucuri Security 1.8.0

  4. Sucuri Security 1.7.19

  5. Sucuri Security 1.7.18

  6. Sucuri Security 1.7.17

201511 releases

  1. Sucuri Security 1.7.16

  2. Sucuri Security 1.7.15

  3. Sucuri Security 1.7.14

  4. Sucuri Security 1.7.13

  5. Sucuri Security 1.7.12

  6. Sucuri Security 1.7.11

  7. Sucuri Security 1.7.10

  8. Sucuri Security 1.7.9

  9. Sucuri Security 1.7.8

  10. Sucuri Security 1.7.7

  11. Sucuri Security 1.7.6

201416 releases

  1. Sucuri Security 1.7.5

  2. Sucuri Security 1.7.4

  3. Sucuri Security 1.7.3

  4. Sucuri Security 1.7.2

  5. Sucuri Security 1.7.1

  6. Sucuri Security 1.7.0

  7. Sucuri Security 1.6.9

  8. Sucuri Security 1.6.8

  9. Sucuri Security 1.6.6

  10. Sucuri Security 1.6.5

  11. Sucuri Security 1.6.4

  12. Sucuri Security 1.6.1

  13. Sucuri Security 1.6.0

  14. Sucuri Security 1.5.7

  15. Sucuri Security 1.5.6

  16. Sucuri Security 1.5.5

201314 releases

  1. Sucuri Security 1.5.2

  2. Sucuri Security 1.5.1

  3. Sucuri Security 1.5.0

  4. Sucuri Security 1.4.9

  5. Sucuri Security 1.4.8

  6. Sucuri Security 1.4.7

  7. Sucuri Security 1.4.6

  8. Sucuri Security 1.4.5

  9. Sucuri Security 1.4.4

  10. Sucuri Security 1.4.3

  11. Sucuri Security 1.4.2

  12. Sucuri Security 1.4.1

  13. Sucuri Security 1.4

  14. Sucuri Security 1.3

20115 releases

  1. Sucuri Security 1.1.6

  2. Sucuri Security 1.1.5

  3. Sucuri Security 1.1.4

  4. Sucuri Security 1.1.3

  5. Sucuri Security 1.1.2

Questions about Sucuri Security’s releases

What is the latest version of Sucuri Security?

2.8.1, released on Oct 14, 2026 (3 weeks ago). It’s tested up to WordPress 7.1.4 and needs PHP 7.4 or later.

How often is Sucuri Security updated?

8 releases in the last year, about one every 40 days. Its first release on WordPress.org dates from November 2011.

Know when your rivals ship

Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.

Start free

Release dates come from the day each version’s folder was made in Sucuri Security’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.