Skip to content
PHP security alert
Two critical PHP flaws (php2shell) were fixed on 21 October. Is your site's PHP patched?
Check in a minute →
Changelog
Ovanap Admin Toolkit 3.10.1 — October 2026
- New: the site scan and Site Health check whether your server’s PHP has the php2shell security fixes (CVE-2026-109618, CVE-2026-109619) and tell you what to ask your host. Why this matters.
- Fixed: the debug check now flags WP_DEBUG when WP_DEBUG_DISPLAY is left unset, because WordPress then shows errors on pages.
Ovanap Admin Toolkit Pro 1.2.0 — October 2026
- Security Check: php2shell patch status, plus the php.ini settings that reduce the risk until your host updates PHP.
- Security Check looks for signs of infection: malware code in wp-config.php, the theme and plugins, spam redirects in .htaccess, scripts from other domains in posts and settings, and administrator accounts created in the last 30 days.
- The report starts with a one-line verdict.
Ovanap Admin Toolkit 3.10.0 — October 2026
- New name: Ovanap Admin Toolkit (formerly OvKit). Settings carry over.
- Scripts and styles now load the standard WordPress way.
- Settings are checked field by field; tracking IDs must match the vendor format.
- Fixed: turning maintenance mode off through an import left search engines blocked.
- Fixed: PHP notices on the hidden login page.
Ovanap Admin Toolkit Pro 1.1.0 — October 2026
- New: Security Check.
- Custom head and body code and the emergency recovery link moved here from the free plugin.
OvKit 3.9.1 — August 2026
- Password reset links work again when the login page is hidden.
OvKit 3.5.3
- Descriptions for every feature.
- Fixed the login form on the hidden login page.
- Attachment pages redirect to their parent post.
- XML-RPC is blocked for every request type.
- Features clean up after themselves when switched off.
OvKit 3.4.0
OvKit 3.0.0