October brought several updates to WP Ghost, with changes to both WP Ghost Premium and the free version.
One of the biggest additions is a new firewall generation with the latest 2026 threat protection. There are also updates to firewall rules, custom paths, SSL certificate verification, and security checks.
We’ve also continued working on other improvements that make security settings easier to manage and help the plugin behave more consistently across different WordPress configurations.
Let’s take a look at what’s new.
October Updates for WP Ghost Premium
UPDATE: WP Ghost Premium 9.1.05
This release includes several security updates related to communication with the account server.
-
Security update: The plugin always verifies the account server’s SSL certificate when it checks the licence or looks for updates, also on websites that run without HTTPS.
-
Security update: Replies from the account server can only update the licence and the white label branding, never paths, firewall rules or IP lists.
-
Fix: The licence and account tokens are sent only to the account server, no longer with the QUIC.cloud IP list request on LiteSpeed servers.
-
Fix: The weekly security summary email uses the white label plugin name instead of WP Ghost.
-
Update: On white label websites, the weekly security summary is switched off once when the plugin updates. Turn it back on in Advanced > Notifications.
-
Update: Translated the new texts in all bundled languages.
UPDATE: Introducing the 9G Firewall in WP Ghost Premium 9.1.06
This release introduces the 9G Firewall, the new firewall generation with the latest 2026 threat protection.
9G is WP Ghost’s 2026 firewall generation and strongest Firewall Strength. It blocks the latest WordPress attacks on admin-ajax, the REST API and uploads. Learn more here.
There are also two additional updates:
-
Update: The plugin verifies the SSL certificate on its own path and security check requests.
-
Update: Translated the new texts in all bundled languages.
UPDATE: WP Ghost Premium 9.1.08, live on account.wpghost.com
The next release brings several improvements to firewall rules and path security.
Here’s what’s changed:
-
New: Throttle AI training crawler bots so a crawl spike cannot exhaust the server, configurable on the 2026 Ghost Firewall.
-
Update: Whitelisted IPs are trusted across all firewall rules.
-
Update: Firewall path checks respect custom admin and login paths.
-
Update: Path settings reject weak or duplicate custom names so every path stays safe and unique.
-
Update: Remove Unsafe Headers moved to the Header Security section.
-
Update: Cleaner firewall settings layout on mobile.
These changes cover both how the firewall handles trusted IPs and how it works with custom WordPress paths.
UPDATE: WP Ghost Premium 9.1.09 (2 November 2026), live on account.wpghost.com
As we move into November, new updates continue.
The latest Premium release includes:
-
Update: Security update for the link rewriter.
-
Update: Better stability on sites with a custom REST API path.
-
Update: Change Paths confirmation cards fit narrow screens.
-
Update: Clearer Security Check message for vulnerabilities without a fix.
October Updates for WP Ghost Free
The free version also received the 9G Firewall and several of the same improvements introduced in Premium.
UPDATE: WP Ghost Free 7.0.15
This release introduces the 9G Firewall, the new firewall generation with the latest 2026 threat protection.
9G is WP Ghost’s 2026 firewall generation and strongest Firewall Strength. It blocks the latest WordPress attacks on admin-ajax, the REST API and uploads. Learn more here.
Other changes include:
-
Update: The plugin verifies the SSL certificate on its own path and security check requests.
-
Update: Firewall checks comment and form submissions on levels 3 and 4.
-
Update: Password and payment fields stay private in the threat log.
-
Update: Country database saved in the uploads folder and downloaded in the background.
-
Update: Security Check warns about PHP2Shell (CVE-2026-109618).
-
Update: Translated the new texts in all bundled languages.
UPDATE: WP Ghost Free 7.0.16, live on wordpress.org
The next free version release brings several improvements to firewall rules, custom paths and the settings interface.
Here’s the full list:
-
Update: Whitelisted IPs are trusted across all firewall rules.
-
Update: Firewall path checks respect custom admin and login paths.
-
Update: Path settings reject weak or duplicate custom names so every path stays safe and unique.
-
Update: Remove Unsafe Headers moved to the Header Security section.
-
Update: Cleaner firewall settings layout on mobile.
These updates bring the same changes to trusted IP handling, custom path checks and firewall settings that were also included in WP Ghost Premium updates.
A Quick Note About WP Ghost Pricing
We’ve also finished updating prices across all our WP Ghost websites and store pages.
You can find the updated information here:
We made the rebrand because our community loved the idea. But we also want to maintain all these websites.
P.S. If you’ve known us as Hide My WP Ghost, you might be wondering what happened to the name. Hide My WP Ghost was renamed WP Ghost in 2025. It’s the same WordPress security plugin, developed further under a new name that better reflects its broader focus on hack prevention, not just hiding WordPress paths.
Some of our websites and pricing pages still use the Hide My WP Ghost name. We’ve decided to maintain them because we know not everyone has time to keep up with every announcement. The important thing to know is this: whether you know us as Hide My WP Ghost or WP Ghost, you’re looking at the same product.
What’s Next for WP Ghost?
October brought plenty of changes, but we’re not done working on WP Ghost.
We have more ideas for improving the plugin, and we’d like to hear what you think should come next.
Is there something you’d like to see added to WP Ghost? Perhaps an existing feature you’d like us to improve, or something that would make managing your site’s security easier?
Take a look at our Roadmap here and share your ideas with us. We’d love to know what you’d like to see in future updates.
