2.0.13

Released on Oct 01. 2026

💅 Polish​

• WAF UX Suggestion #1156
• opencli waf command usage extended.
• opencli domains-test and opencli domains-cloudflare commands.
• Applications & Dashboard Widget UX Suggestions #1157
• OpenAdmin: all pages with tables can now be sorted by clicking the arrows next to the column names.
• CorazaWAF no longer inspects response bodies (SecResponseBodyAccess Off in /etc/openpanel/caddy/coraza_rules.conf).
• opencli waf enable now disables the OWASP CRS rulesets for Java, Ruby and IIS (REQUEST-944, RESPONSE-952, RESPONSE-954, RESPONSE-956).
• opencli sentinel --startup now starts user containers in stages after a reboot (a few users at a time, waiting on high IO/load) instead of all at once, avoiding an IO storm on servers with many users.
• opencli user-backup now runs tar and compression at low CPU/IO priority (nice -n19, ionice -c2 -n7) so live sites stay responsive during backups, --no-throttle runs it at full speed.

🐛 Bug Fixes​

• Wordpress Manager should show only vulnerabilities applicable to the installed version #1168
• OpenPanel > WAF logs: the Disable button next to a rule ID failed with "rule ID must be a number".
• Reboot from OpenAdmin not working as expected - UI returning success too early #1164
• Wordpress Manager should show only vulnerabilities applicable to the installed version #1168
• opencli waf update could bring back rulesets disabled in OpenAdmin > Security > CorazaWAF when the update changed them. They now stay disabled.
• Fixed bug that prevented the Check passwords against Weakpass.com option working.
• Fixed bugs with opencli user-transfer (OpenAdmin > Users > Transfer to another server) option failing to transfer DKIM, FTP accounts..
• Fixed bugs with opencli server-migrate (OpenAdmin > Server > Migrate) that prevented it to be run from OpenAdmin UI.
• Server migration, account transfer, backup import, account export and Update now are now persisting on OpenAdmin service restart.