Plugin

Changelog

A full record of every release, what changed, what was fixed, and what was added.

Latest version: 1.0.4

New xSpeed Cache — cache purge sync via xspeed_after_purge_all (full purge).

New Groundwork for automatic edge rule management. A periodic cron check detects when deployed rules are out of date and redeploys automatically. Full zero-touch rule management is being built out across upcoming releases.

New Edge rules auto-deploy when a supported ecommerce, membership, LMS, or booking plugin is activated or deactivated.

New Admin notice after plugin updates shows whether a rule update is pending or needs manual action, with a last deployed timestamp and a Deploy now button.

New WP-CLI commands: wp bunny deploy, wp bunny purge, wp bunny status, wp bunny rules. Deploy and purge across all client sites via SSH without touching the admin.

New Public PHP API for third-party plugin integration. Seven hooks including wpbc_is_connected, wpbc_status, wpbc_purge_all, wpbc_purge_url, and wpbc_deploy.

New REST API endpoints under /wp-json/wpbc/v1/ for external integrations. Authenticated via X-WPBC-Token header. Includes status, purge, purge-url, and deploy endpoints.

New API documentation tab in the plugin admin with all endpoints, filters, actions, and copy-paste code examples.

Security Full security audit of all new code. REST token verified with hash_equals to prevent timing attacks. All inputs sanitized, all output escaped.

Internal This release begins a move toward fully automatic WAF rule management. The goal is that site owners never need to think about deploying rules. Future releases will continue expanding this.

Fixed WordPress.org was serving an incorrect version due to a mismatched stable tag. Corrected with this release.

Improved Shield WAF event log panel redesigned with a proper table layout, sticky headers, scrollable area, and colour-coded action badges.

New Vary Cache by Accept-Language — automatically configured on the pull zone when WPML, Polylang, or TranslatePress is active, so each language gets its own CDN cache entry.

New Shield WAF event log panel on the Stats tab. Enter your Shield Zone ID in Settings to view blocked IPs, triggered rules, and URLs for the last 1, 6, 24, or 72 hours.

New Request Coalescing toggle in Settings. When enabled, Bunny combines simultaneous requests for the same uncached resource into a single origin fetch.

New Admin notice after plugin updates prompting you to redeploy edge rules. Dismissible per version with a direct link to the Edge Rules tab.

Internal Tested up to WordPress 7.1.

New wpbc_shield_bypass_ips filter — third-party plugins can add trusted IPs and CIDR ranges to the Bunny Shield WAF bypass list without any changes to this plugin.

New wpbc_shield_bypass_urls filter — third-party plugins can disable Bunny Shield WAF inspection on specific URL path patterns. Deploys as rule 75 when in use.

New wpbc_cache_bypass_urls filter — third-party plugins can add URL paths to the Bunny CDN cache bypass list. Deploys as rule 76 when in use.

New wpbc_compatible_plugins filter — third-party plugins can register themselves in the Integrations tab with their own name, company, and compatibility note.

Fixed Plugin settings (API key, pull zone) could be wiped during plugin updates, option imports, or multisite operations. Added a sanitize guard that aborts if the incoming data does not look like a real Settings form submission.

Security Added a pre_update_option filter as a second line of defence — if anything tries to overwrite a configured API key with an empty value, the write is silently blocked and the existing configuration is preserved.

Fixed Bunny edge cache now always purges when a cache plugin is updated, regardless of the "Plugin / theme updates" trigger setting. Previously the purge was skipped if that toggle was off.

New BerqWP — cache purge sync via berqwp_flush_all_cache and berqwp_purge_cdn (full purge) and berqwp_flush_page_cache (per-URL).

New SWIS Performance by EWWW Image Optimizer — cache purge sync via swis_complete_cache_cleared and swis_site_cache_cleared (full purge) and swis_cache_by_url_cleared (per-URL).

Internal Tested up to WordPress 7.0.1.

New Initial public release on WordPress.org.

New 74 Bunny.net pull zone edge rules across 9 categories: Core WordPress, HTML Caching, Ecommerce, Membership, LMS, Booking and Events, Static and Performance, Security Headers, and WAF / Trusted IPs.

New One-click deploy and redeploy via Bunny.net API. Rules are tracked by GUID and updated in place on redeploy, no duplicates created.

New Cache purge sync for 15 WordPress cache plugins including WP Rocket, LiteSpeed Cache, W3 Total Cache, FlyingPress, and more.

New Automatic bypass rule detection for 6 ecommerce platforms, 13 membership plugins, 9 LMS plugins, 4 booking and events plugins, 5 multilingual plugins, and 8 SEO plugins.

New Cache warmer with automatic sitemap detection across 8 supported SEO plugins and WordPress core sitemaps.

New Trusted IP / WAF whitelist support, auto-batched across up to 5 IPs or CIDRs per rule.

New Debug logging for purge trigger events, configurable in Settings.

Internal Plugin does not connect to any Nahnu Plugins server. All outbound connections go directly from the WordPress installation to the user's own Bunny.net API.