diff --git a/.github/workflows/auto-pr.yml b/.github/workflows/auto-pr.yml
index ae26510e..54c37760 100644
--- a/.github/workflows/auto-pr.yml
+++ b/.github/workflows/auto-pr.yml
@@ -8,14 +8,11 @@ jobs:
     if: github.ref_type == 'branch'
     runs-on: ubuntu-latest
     steps:
-    -
-      name: Checkout Branch ${{ github.ref_name }}
-      uses: actions/checkout@v4
-    -
-      name: Create Pull Request
-      uses: bfren/pull-request@v2
-      with:
-        github_token: ${{ secrets.PAT }}
-        destination_branch: main
-        pr_title: ${{ github.ref_name }}
-        pr_body: "Merging branch to create ${{ github.ref_name }}."
+      -
+        name: Checkout Branch ${{ github.ref_name }}
+        uses: actions/checkout@v4
+      -
+        name: Create Pull Request
+        run: gh pr create -B main --title "${{ github.ref_name }}" --body "Merging branch to create ${{ github.ref_name }}."
+        env:
+          GITHUB_TOKEN: ${{ secrets.PAT }}
diff --git a/Dockerfile.esh b/Dockerfile.esh
index d8ab82ee..993c1a71 100644
--- a/Dockerfile.esh
+++ b/Dockerfile.esh
@@ -32,9 +32,10 @@ ENV \
     BF_WP_DISABLE_MAJOR_UPDATES=1 \
     # whether or not to enable HTTPS behind a proxy server
     BF_WP_ENABLE_HTTPS_BEHIND_PROXY=1 \
-    # set to 0 if you don't want the NinjaFirewall plugin to be installed automatically and setup
-    # to run in full WAF mode (you will still have to enable it in the WordPress backend)
-    BF_WP_INSTALL_NINJAFIREWALL=1 \
+    # set to 1 if you want the NinjaFirewall plugin to be setup to run in full WAF mode
+    # (you will still have to enable it in the WordPress backend)
+    # NB: this must be 0 until you have installed WordPress or you will not be able to access the site
+    BF_WP_INSTALL_NINJAFIREWALL=0 \
     # set to 0 if you don't want the WebAuthn plugin to be installed automatically
     BF_WP_INSTALL_WEBAUTHN=1 \
     # set to 0 to use WordPress cron instead of system cron (will reduce performance)
diff --git a/VERSION b/VERSION
index 4d43ac3e..604e1338 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-6.4.10
\ No newline at end of file
+6.4.11
\ No newline at end of file
diff --git a/php7.4/Dockerfile b/php7.4/Dockerfile
index 45b35e06..c7f52480 100644
--- a/php7.4/Dockerfile
+++ b/php7.4/Dockerfile
@@ -32,9 +32,10 @@ ENV \
     BF_WP_DISABLE_MAJOR_UPDATES=1 \
     # whether or not to enable HTTPS behind a proxy server
     BF_WP_ENABLE_HTTPS_BEHIND_PROXY=1 \
-    # set to 0 if you don't want the NinjaFirewall plugin to be installed automatically and setup
-    # to run in full WAF mode (you will still have to enable it in the WordPress backend)
-    BF_WP_INSTALL_NINJAFIREWALL=1 \
+    # set to 1 if you want the NinjaFirewall plugin to be setup to run in full WAF mode
+    # (you will still have to enable it in the WordPress backend)
+    # NB: this must be 0 until you have installed WordPress or you will not be able to access the site
+    BF_WP_INSTALL_NINJAFIREWALL=0 \
     # set to 0 if you don't want the WebAuthn plugin to be installed automatically
     BF_WP_INSTALL_WEBAUTHN=1 \
     # set to 0 to use WordPress cron instead of system cron (will reduce performance)
diff --git a/php8.0/Dockerfile b/php8.0/Dockerfile
index 598a0748..00d22410 100644
--- a/php8.0/Dockerfile
+++ b/php8.0/Dockerfile
@@ -32,9 +32,10 @@ ENV \
     BF_WP_DISABLE_MAJOR_UPDATES=1 \
     # whether or not to enable HTTPS behind a proxy server
     BF_WP_ENABLE_HTTPS_BEHIND_PROXY=1 \
-    # set to 0 if you don't want the NinjaFirewall plugin to be installed automatically and setup
-    # to run in full WAF mode (you will still have to enable it in the WordPress backend)
-    BF_WP_INSTALL_NINJAFIREWALL=1 \
+    # set to 1 if you want the NinjaFirewall plugin to be setup to run in full WAF mode
+    # (you will still have to enable it in the WordPress backend)
+    # NB: this must be 0 until you have installed WordPress or you will not be able to access the site
+    BF_WP_INSTALL_NINJAFIREWALL=0 \
     # set to 0 if you don't want the WebAuthn plugin to be installed automatically
     BF_WP_INSTALL_WEBAUTHN=1 \
     # set to 0 to use WordPress cron instead of system cron (will reduce performance)
diff --git a/php8.1/Dockerfile b/php8.1/Dockerfile
index bf047dfd..46e3102c 100644
--- a/php8.1/Dockerfile
+++ b/php8.1/Dockerfile
@@ -32,9 +32,10 @@ ENV \
     BF_WP_DISABLE_MAJOR_UPDATES=1 \
     # whether or not to enable HTTPS behind a proxy server
     BF_WP_ENABLE_HTTPS_BEHIND_PROXY=1 \
-    # set to 0 if you don't want the NinjaFirewall plugin to be installed automatically and setup
-    # to run in full WAF mode (you will still have to enable it in the WordPress backend)
-    BF_WP_INSTALL_NINJAFIREWALL=1 \
+    # set to 1 if you want the NinjaFirewall plugin to be setup to run in full WAF mode
+    # (you will still have to enable it in the WordPress backend)
+    # NB: this must be 0 until you have installed WordPress or you will not be able to access the site
+    BF_WP_INSTALL_NINJAFIREWALL=0 \
     # set to 0 if you don't want the WebAuthn plugin to be installed automatically
     BF_WP_INSTALL_WEBAUTHN=1 \
     # set to 0 to use WordPress cron instead of system cron (will reduce performance)
diff --git a/php8.2/Dockerfile b/php8.2/Dockerfile
index a7a10be0..c849fa8c 100644
--- a/php8.2/Dockerfile
+++ b/php8.2/Dockerfile
@@ -32,9 +32,10 @@ ENV \
     BF_WP_DISABLE_MAJOR_UPDATES=1 \
     # whether or not to enable HTTPS behind a proxy server
     BF_WP_ENABLE_HTTPS_BEHIND_PROXY=1 \
-    # set to 0 if you don't want the NinjaFirewall plugin to be installed automatically and setup
-    # to run in full WAF mode (you will still have to enable it in the WordPress backend)
-    BF_WP_INSTALL_NINJAFIREWALL=1 \
+    # set to 1 if you want the NinjaFirewall plugin to be setup to run in full WAF mode
+    # (you will still have to enable it in the WordPress backend)
+    # NB: this must be 0 until you have installed WordPress or you will not be able to access the site
+    BF_WP_INSTALL_NINJAFIREWALL=0 \
     # set to 0 if you don't want the WebAuthn plugin to be installed automatically
     BF_WP_INSTALL_WEBAUTHN=1 \
     # set to 0 to use WordPress cron instead of system cron (will reduce performance)
diff --git a/php8.3/Dockerfile b/php8.3/Dockerfile
index d027c18b..a87a2516 100644
--- a/php8.3/Dockerfile
+++ b/php8.3/Dockerfile
@@ -32,9 +32,10 @@ ENV \
     BF_WP_DISABLE_MAJOR_UPDATES=1 \
     # whether or not to enable HTTPS behind a proxy server
     BF_WP_ENABLE_HTTPS_BEHIND_PROXY=1 \
-    # set to 0 if you don't want the NinjaFirewall plugin to be installed automatically and setup
-    # to run in full WAF mode (you will still have to enable it in the WordPress backend)
-    BF_WP_INSTALL_NINJAFIREWALL=1 \
+    # set to 1 if you want the NinjaFirewall plugin to be setup to run in full WAF mode
+    # (you will still have to enable it in the WordPress backend)
+    # NB: this must be 0 until you have installed WordPress or you will not be able to access the site
+    BF_WP_INSTALL_NINJAFIREWALL=0 \
     # set to 0 if you don't want the WebAuthn plugin to be installed automatically
     BF_WP_INSTALL_WEBAUTHN=1 \
     # set to 0 to use WordPress cron instead of system cron (will reduce performance)
diff --git a/php8.4/Dockerfile b/php8.4/Dockerfile
index 0d488257..7c870dc7 100644
--- a/php8.4/Dockerfile
+++ b/php8.4/Dockerfile
@@ -32,9 +32,10 @@ ENV \
     BF_WP_DISABLE_MAJOR_UPDATES=1 \
     # whether or not to enable HTTPS behind a proxy server
     BF_WP_ENABLE_HTTPS_BEHIND_PROXY=1 \
-    # set to 0 if you don't want the NinjaFirewall plugin to be installed automatically and setup
-    # to run in full WAF mode (you will still have to enable it in the WordPress backend)
-    BF_WP_INSTALL_NINJAFIREWALL=1 \
+    # set to 1 if you want the NinjaFirewall plugin to be setup to run in full WAF mode
+    # (you will still have to enable it in the WordPress backend)
+    # NB: this must be 0 until you have installed WordPress or you will not be able to access the site
+    BF_WP_INSTALL_NINJAFIREWALL=0 \
     # set to 0 if you don't want the WebAuthn plugin to be installed automatically
     BF_WP_INSTALL_WEBAUTHN=1 \
     # set to 0 to use WordPress cron instead of system cron (will reduce performance)