Story thread · 3 reports / 3 sources

WordPress adds automated security checks to block risky plugin releases

helpnetsecurity.com · 4dShare

WordPress’ automated security review will now assess every plugin release before it is distributed through the WordPress.org update API. Releases considered a potential security risk will be blocked automatically. “A plugin can be secure today and introduce a vulnerability, or malicious code, in a future release. Until now there was no consistent review step between a release being committed and that release reaching millions of sites,” David Perez, Co-Lead, WordPress Official Plugin Repository Team, explained. … More → The post WordPress adds automated security checks to block risky plugin releases appeared first on Help Net Security .

First report: Two major security flaws are affecting more than six million WordPress websites — techradar.com, 7d