Skip to content
PHP security alert Two critical PHP flaws (php2shell) were fixed on 21 October. Is your site's PHP patched? Check in a minute →
OvKit
Menu
Download free

Changelog


Ovanap Admin Toolkit 3.10.1 — October 2026

  • New: the site scan and Site Health check whether your server’s PHP has the php2shell security fixes (CVE-2026-109618, CVE-2026-109619) and tell you what to ask your host. Why this matters.
  • Fixed: the debug check now flags WP_DEBUG when WP_DEBUG_DISPLAY is left unset, because WordPress then shows errors on pages.

Ovanap Admin Toolkit Pro 1.2.0 — October 2026

  • Security Check: php2shell patch status, plus the php.ini settings that reduce the risk until your host updates PHP.
  • Security Check looks for signs of infection: malware code in wp-config.php, the theme and plugins, spam redirects in .htaccess, scripts from other domains in posts and settings, and administrator accounts created in the last 30 days.
  • The report starts with a one-line verdict.

Ovanap Admin Toolkit 3.10.0 — October 2026

  • New name: Ovanap Admin Toolkit (formerly OvKit). Settings carry over.
  • Scripts and styles now load the standard WordPress way.
  • Settings are checked field by field; tracking IDs must match the vendor format.
  • Fixed: turning maintenance mode off through an import left search engines blocked.
  • Fixed: PHP notices on the hidden login page.

Ovanap Admin Toolkit Pro 1.1.0 — October 2026

  • New: Security Check.
  • Custom head and body code and the emergency recovery link moved here from the free plugin.

OvKit 3.9.1 — August 2026

  • Password reset links work again when the login page is hidden.

OvKit 3.5.3

  • Descriptions for every feature.
  • Fixed the login form on the hidden login page.
  • Attachment pages redirect to their parent post.
  • XML-RPC is blocked for every request type.
  • Features clean up after themselves when switched off.

OvKit 3.4.0

  • Site scan.

OvKit 3.0.0

  • First release.