WordPress adds automated security checks to block risky plugin releases

Sep 10, 2026 - 13:00
WordPress adds automated security checks to block risky plugin releases

WordPress’ automated security review will now assess every plugin release before it is distributed through the WordPress.org update API. Releases considered a potential security risk will be blocked automatically. “A plugin can be secure today and introduce a vulnerability, or malicious code, in a future release. Until now there was no consistent review step between a release being committed and that release reaching millions of sites,” David Perez, Co-Lead, WordPress Official Plugin Repository Team, explained. … More

The post WordPress adds automated security checks to block risky plugin releases appeared first on Help Net Security.