diff --git a/abra.sh b/abra.sh
index fbe4f79..771223b 100644
--- a/abra.sh
+++ b/abra.sh
@@ -2,7 +2,7 @@ export PHP_UPLOADS_CONF_VERSION=v4
 export ENTRYPOINT_CONF_VERSION=v8
 export ENTRYPOINT_MAILRELAY_CONF_VERSION=v2
 export MSMTP_CONF_VERSION=v4
-export HTACCESS_CONF_VERSION=v4
+export HTACCESS_CONF_VERSION=v5
 export USERS_CONF_VERSION=v1
 
 wp() {
diff --git a/compose.yml b/compose.yml
index cee1193..47e3e81 100644
--- a/compose.yml
+++ b/compose.yml
@@ -3,7 +3,7 @@ version: "3.8"
 
 services:
   app:
-    image: "wordpress:6.9.4"
+    image: "wordpress:6.9.5"
     volumes:
       - "wordpress_content:/var/www/html/wp-content/"
     networks:
diff --git a/htaccess.tmpl b/htaccess.tmpl
index a682446..d549d4b 100644
--- a/htaccess.tmpl
+++ b/htaccess.tmpl
@@ -8,14 +8,6 @@
     Require all denied
 </Files>
 
-# Block wp2shell CVE-2026-63030
-<IfModule mod_rewrite.c>
-RewriteEngine On
-RewriteCond %{QUERY_STRING} rest_route=.*/batch/v1 [NC]
-RewriteRule .* - [F,L]
-RewriteRule ^wp-json/batch/v1 - [F,L]
-</IfModule>
-
 {{ if eq (env "MULTISITE") "" -}}
 # BEGIN WordPress