CYBERSECURITYTRACKER
Permanent story citation

WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 7246

As cited

Copy frozen at (site build).

vulnerabilities

WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution

WordPress is implementing automated security reviews for all plugin updates distributed through WordPress.org to detect potential security issues before release. The system analyzes updates continuously, complementing existing reviews that apply only to new plugin submissions.

Why it matters: WordPress administrators and plugin developers are affected: automated review screening reduces the window for compromised or vulnerable plugins to reach sites, lowering exposure to supply-chain attacks through the plugin ecosystem.

VendorsWordPress
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary