SteadyScore

Changelog

1.0.3

  • Pro: new “Re-check license now” button on the license screen — refreshes license status immediately after renewing or changing domains, instead of waiting for the 12-hour cache.
  • Pro: license revocations (released domain, expired or deactivated license) now disable Pro features promptly instead of coasting on cached status.
  • Pro: AI analysis reliability — long-running custom-plugin analyses keep a 90-second window, and failed analyses show an honest error with a one-click “Retry AI analysis” action.
  • Pro: clearer AI failure messaging — unknown failures no longer mislabeled as “No readable source code found”.

1.0.2

  • Security hardening (WordPress.org plugin review): Google Sheets / Google OAuth / AI analysis REST routes are no longer registered in the free plugin — they are Pro-only and now ship exclusively with the Pro build.
  • Security hardening: the Google OAuth callback now requires a one-time state nonce minted when an administrator starts the connect flow. The nonce is bound to the initiating admin, compared in constant time, consumed on first use (replays rejected), and no site state is modified without it.

1.0.1

  • Free-tier punch-list polish across the dashboard and detail slide-over.
  • Security factor reweighted; renamed to a clear “Security” label in the breakdown.
  • AI recommendation quality rework for more accurate, actionable verdicts.
  • OAuth connect flow hardened with an HMAC state token.
  • Commercial (paid) plugins now gated with honest “rating data unavailable” messaging instead of a blank score.
  • Plugin lifecycle detection: removed-from-WordPress.org (abandoned), not-on-WordPress.org (off-repo), and not-updated-in-2+-years (stale) states now surface as badges and detail copy.
  • Pro build now identifies as “SteadyScore Pro”.
  • Plugin toggle and assorted UI fixes.

1.0.0

  • Initial public release.
  • Scoring engine with six factors and five scoring paths.
  • WordPress.org plugin API integration (Path 1).
  • Wordfence Intelligence vulnerability data (when API key configured).
  • Background scoring via Action Scheduler (no wp-cron load).
  • Dashboard with filtering, sorting, slide-over detail panel, CSV export.
  • Optional Pro tier: commercial plugin scoring, AI recommendations, Google Sheets export, scheduled monitoring, email alerts.

Plugin Website
Visit website

Author
steadypress
Version:
1.0.3
Last Updated
July 3, 2026
Requires
WordPress 6.0
Tested Up To
WordPress 7.0
Requires PHP
8.1

Share Post

Join our newsletter.

Get insights into what’s happening at ChangelogWP right in your inbox. We don’t believe in spam.