📢 cPFence: New Version Releases & Patch Notes

cPFence

Version 3.3.86.2 (7th September 2025)

Improved

Updated IP ranges database to improve country detection accuracy and coverage in the IPDB module
Addressed several malware false positives reported through WebUI
Addressed several WAF false positives reported through WebUI

cPFence

Version 3.3.87 (9th September 2025)

Added

Quarantine restore in WebUI now marks entries as Restored or Quarantined
Once a file is restored, cPFence automatically updates the status and disables further restoration attempts to prevent duplication or errors

Improved

Enhanced infection log processing and smarter scan log pruning for faster performance and improved protection

cPFence

Version 3.3.88 (12th September 2025)

Added

Search by Server Name or IP Address to quickly switch between servers in the WebUI
New file search inside Edit Configuration Files page in WebUI – instantly locate any file by name

Improved

Enhanced compatibility and performance in both WAF and Malware Protection modules

cPFence

Version 3.3.88.1 (23rd September 2025)

Improved

Resolved false positives triggered by the new Node.js feature
WebUI updated to prepare for the upcoming New WordPress Bulk Tools - manage users, themes, and plugins cluster-wide, on steroids. Coming soon

cPFence

Version 3.3.89 (26th September 2025)

Added

This release introduces the most powerful bulk WordPress management tools in cPFence.
13 new tools to manage Users, Themes, and Plugins per website, per server, or cluster-wide.
Read more: New! Bulk Manage Themes, Users, Plugins, and Updates Across All Sites
- Bulk Install Theme or ZIP
- Bulk Activate Theme by Slug
- Bulk Delete Theme by Slug
- Bulk Create WP User (redesigned)
- Bulk List WP Users
- Bulk Reset All Passwords
- Bulk Reset One User Password
- Bulk Delete WP User (Reassign Content)
- Bulk Delete WP User (No Reassign)
- Bulk Disable Plugin by Slug
- Bulk Enable Plugin by Slug
- Bulk Update All WordPress Sites (Choose exactly what gets updated: core, plugins, themes, translations—or everything)
- Bulk Enable LiteSpeed Heartbeat from WebUI
Ability to control retention period for quarantined files in settings. You can modify QUARANTINE_DAYS in WebUI or config file. Default value is 60.

Improved

Per-website license IP sync improvement
Increased WAF compatibility with popular plugins
"Bulk Enable DNSSEC" tool now skips domains that already have DNSSEC enabled

Fixed

Fixed the WebUI [stream error: TypeError…] that appeared sometimes when running bulk actions on several servers
Fixed incorrect detection of CP main domain when resellers activate their whitelisted control panel feature
Fixed ApiMachine Module to be compatible with new Enhance API recently introduced by Enhance Team

cPFence

Version 3.3.90 (5th October 2025)

Added

ApiMachine Module Expansion – Advanced Nginx Control Tools
Easily manage and automate key Nginx operations across your entire cluster using the Enhance API.
Now available directly in the WebUI — apply changes to all or selected sites across your cluster.
CLI commands are also available for all tools; use cpfence --help for more.
- Bulk enable FastCGI cache
- Bulk disable FastCGI cache
- Bulk clear FastCGI cache
- Bulk add cache exclusion paths
- Bulk remove cache exclusion paths
New PHP Management Tools
Cluster-wide PHP management made simple:
- Bulk restart PHP containers instantly
- Bulk update PHP versions for all or selected domains
SSH Key Auto-Deployment Tool
Instantly configure passwordless SSH access across your servers (main CP only).
Run the following command:
cpfence --deploy-ssh-key
License Alert System
Automatic email notifications when a license fails to validate due to IP or key mismatches, ensuring your server remains protected

Improved

Renamed cache directory from /y/ to /.cpf_cache/ to avoid confusion (Reference)
WebUI now automatically detects and fixes SSH key issues
Quarantined files now have updated modification times upon isolation for improved accuracy

Fixed

Resolved false positives incorrectly identified as spam-related files (spamchunks and spamtags)

cPFence

Version 3.3.91 (8th October 2025)

Added

New Firewall & IPDB Engine
The Firewall and IPDB modules have been completely rewritten for speed and accuracy.
cPFence now performs firewall operations significantly faster while using less CPU and memory.
The difference is night and day - for example, blacklisting a large country like China now takes just seconds instead of 15 minutes
New ASN Management Tool
You can now remove previously blocked ASNs directly from the WebUI or via CLI:
cpfence --remove-asn
Quick Scan Mode – Fast & Lightweight Malware Scanner
This new quick-scan mode bypasses exclusions and skips quarantine actions, even if quarantine is enabled in your settings.
Perfect for fast sanity checks and verifying if exclusions are preventing malware detection.
Available via CLI only:
cpfence --quick-scan

Improved

Additional scanners now automatically skip files outside /var/www to prevent symlink-related issues
Addressed several WAF and Malware false positives for improved accuracy and reliability

Fixed

Resolved issue fetching plugin slugs for certain plugins in the bulk install tool
Fixed a bug where the WebUI sometimes displayed old scan results instead of the latest scan output

cPFence

Version 3.3.92 (15th October 2025)

Added

New Dashboard Charts
Two new visual charts were added to the System Dashboard, providing a clearer overview of attack origins and defense performance at a glance. These insights help you quickly identify which countries generate the most attacks and decide which ones to block or monitor more closely
Country Indicators for IP Lists
Country codes are now displayed next to each IP address in the Top DDoS/Brute-force and IPDB Attacker lists for easier source identification

cPFence System Dashboard Update

Improved

Dashboard layout refined for better readability and information balance
Minor UI consistency updates across all dashboard widgets

cPFence

Version 3.3.93 (19th October 2025)

Added

Custom Account Scanning
You can now quickly start a custom scan on a specific account for faster and more precise detection.
Available in WebUI > Threat & Malware Detection > Custom Scan

Displays both domain and account name for quick identification
New ApiMachine Tools (3 New)
Added new backup management tools using the Enhance API – all can be applied to a single site, a specific server, or your full cluster:
- Initiate full backups for selected websites
- Retrieve detailed backup summaries
- Delete all backups for chosen websites
  
  Available in both WebUI and CLI – run cpfence | grep backups for more info
ASN-Based Blocking in Spam AutoShield Module
You can now blacklist or whitelist entire ASN ranges for enhanced spam control
Available in WebUI > Tools & Utilities > Spam AutoShield Tools

or via CLI – run cpfence | grep asn for details
New WP-AutoShield Bulk Tools
Manage automatic updates for a specific theme or plugin – apply actions to one site, a specific server, or the full cluster:
- Update one specific theme
- Update one specific plugin
- Enable or disable automatic updates for a specific theme
- Enable or disable automatic updates for a specific plugin
  Available in WebUI > Tools & Utilities > WP-AutoShield Bulk Tools > Manage Updates & Cron
  
  or use CLI – run cpfence | grep "automatic updates" for more info
New Disk Speed Test Tool
Quickly identify low-performance disks using: cpfence --disk-speed-check
Ideal for detecting slow HDDs. It’s recommended to disable Proactive Scan if running on low-performance drives. Using HDDs for hosting is not recommended in 2025; they are only suitable for storage and backups

Improved

Disabled the Save button when switching between files in “Edit Configuration Files” to prevent accidental overwrites
ApiMachine Module now skips duplicate accounts for account-level tools (like Restart container, Backups, and Set PHP version) to avoid redundant operations
Several CSS fixes and WebUI interface tweaks
Improved MultiRun tool – now automatically loads all servers in autopilot mode
Run cpfence --multirun to try it, or add manual to restore the old behavior

cPFence

Version 3.3.94 (30th October 2025)

Added

Automatic Outbound Spam Lockdown with Instant Alerts
Read more: Automatic Outbound Spam Lockdown with Instant Alerts
Compared to Enhance’s default behavior:
- Enhance limiter: Temporary throttling, no permanent auto-block, and no notifications
- cPFence protection: Permanent block, real-time alerts, and quick recovery when ready
  To get started, enable the Spam AutoShield Module if not already active:
  cpfence --activate-spam-autoshield
  Outbound spam protection is enabled by default when the Spam AutoShield module is active.
  To disable it, set SPAM_AUTOSHIELD_LIMITS to off in the config file or via WebUI settings
  To manually suspend an email account:
  WebUI: Tools & Utilities → Spam AutoShield Tools → Block / Unblock Outgoing Email
  CLI: Run cpfence | grep out-email for more info
DDNS Whitelisting in cPFence Firewall
Perfect for users with dynamic IPs who need to stay whitelisted in the WebUI
Simply create a free DDNS account (e.g., DuckDNS) and run:
cpfence --add-whitelist-ddns your_ddns_subdomain.duckdns.org --webui
Available through CLI only — run cpfence | grep ddns for more info
Block or Whitelist Spam Emails By Subject in WebUI
Block emails based on specific words in their subject lines
This helps block spam messages from services like Gmail or Outlook that usually bypass filters
Available in WebUI or via CLI — run cpfence | grep subject for details

Improved

Added WAF compatibility with Enhance Control Panel servers using IP-only configurations with no domain
Improved WAF handling for rare Cloudflare edge cases
Updated IP database for more accurate geolocation
Optimized IMAP/POP3 brute-force protection module for better speed and accuracy
All JavaScript files are now bundled within the WebUI for improved stability and faster performance, removing reliance on external sources

cPFence

Version 3.3.95 (4th November 2025)

Improved

Enhanced WAF compatibility with Moodle sites and resolved related issues
Added the username column in the vulnerabilities CSV export for easier identification of site owners

cPFence

Version 3.3.96 (9th November 2025)

Added

Owl v4.0 – Advanced Server Monitoring & Statistics
The all-new Owl v4.0 introduces a unified cluster monitoring system with 30-day performance history and advanced metrics visualization.
Read more: Owl v4.0: Unified Cluster Monitoring with 30-Day Performance History
- New CLI tool to view live Owl statistics: cpfence --owl-stats
- Automatic cleanup of metrics history (retains the last 30 days of data)
- Ability to view currently blocked ASNs from both CLI and WebUI
- New feature to preview quarantined file contents, now sorted by date directly in the WebUI

Improved

Enhanced WAF compatibility and fixed issues affecting some edge cases
Resolved several email and general malware detection false positives
Improved DKIM bulk tool - it now automatically skips domains that already have DKIM enabled or disabled

« Previous Page