As cited
Copy frozen at (site build).
vulnerabilities
WordPress adds automated security checks to block risky plugin releases
WordPress has deployed automated security review of all plugin releases distributed through the WordPress.org update application programming interface (API), with flagged releases automatically blocked before reaching users. The system addresses a gap where plugins could introduce vulnerabilities or malicious code in updates without consistent human review between code commit and production deployment.
Why it matters: WordPress plugin developers and site administrators need to ensure their plugins meet the new automated security checks to avoid release delays, and developers should review their code practices to prevent blocks on legitimate updates.
- Source published
- First seen by Cybersecurity Tracker