TL;DR: 4.3.1.x is a Premium-only development (beta) branch. <Read more>

For a the last year or so, Bots have been attempting to login with empty usernames.

<Read more>

• Workaround issue with user enumeration blocking being triggered by Gutenberg pre-loading Author list. (h/t @brrrrrrrt) [WordPress only]

<Read more>

• Add support for Pingbacks while blocking XML-RPC.

• Add support for blocking by Country. [Premium only]
• Add XML-RPC blocking; allow trusted IPs and Jetpack (h/t @mhweb). [Premium only]

• Finish refactoring to allow inclusion of constants in `wp-config.php` (h/t @iCounsellor).
• Fix MaxMind database update. [Premium only]

• Fix Forbidden error on Posts page for roles below Editor when user enum blocking enabled. [WordPress only]

• Fix empty username detection for multisite.
• Fix harmless warning when activating new multisite install.
• Fix esoteric edge-case where wp-load.php is loaded via a script run from the CLI in a directory with a functions.php file.

v4.3.0 has taken over 6 months to complete - 4 months' hard work and nearly 3 months under the UK's COVID-19 lock-down; originally planned for a November release, there was always "just one more thing".
<Read more>

• Add link to new support forum.
• Fix user enumeration conflict with Gutenberg (h/t @dinghy).
• Fix notices wrt admin menu (h/t @marioivangf).
• Fix harmless XDebug notice (h/t @dinghy).
• Update Freemius library.