Title: Atelixo Changelog Digest
Author: nicognito23
Published: <strong>October 14, 2026</strong>
Last modified: October 14, 2026

---

Search plugins

![](https://s.w.org/plugins/geopattern-icon/atelixo-changelog-digest.svg)

# Atelixo Changelog Digest

 By [nicognito23](https://profiles.wordpress.org/nicognito23/)

[Download](https://downloads.wordpress.org/plugin/atelixo-changelog-digest.1.0.0.zip)

 * [Details](https://wordpress.org/plugins/atelixo-changelog-digest/#description)
 * [Reviews](https://wordpress.org/plugins/atelixo-changelog-digest/#reviews)
 *  [Installation](https://wordpress.org/plugins/atelixo-changelog-digest/#installation)
 * [Development](https://wordpress.org/plugins/atelixo-changelog-digest/#developers)

 [Support](https://wordpress.org/support/plugin/atelixo-changelog-digest/)

## Description

When plugin updates are available, WordPress does not show what they contain unless
you open each changelog one by one. So updates are either applied blindly or postponed,
security fixes included.

Atelixo Changelog Digest adds a **Dashboard  Changelog Digest** screen that lists
every pending plugin update with:

 * the installed version and the new version;
 * only the changelog entries **between those two versions** (long ranges show their
   start, with the rest behind a “Show full changelog” toggle);
 * a red **Requires PHP** badge, from the official WordPress.org data, when your
   server runs an older PHP version than the update requires;
 * **Security** and **Breaking / Important** badges based on keywords found in those
   entries, each followed by the lines that triggered it, keywords in bold;
 * a link to the plugin’s page on WordPress.org.

Plugins with a security badge or an incompatible PHP requirement are listed first.

#### Your consent first

After activation, nothing is requested from WordPress.org. A notice on the Plugins
screen (only there) explains what will be sent and offers an **Enable checks** button;
each user can dismiss it, and the digest screen offers the same button. The notice
never appears elsewhere in the admin and disappears for good once checks are enabled.
Once enabled, the plugin’s row offers **Stop checks**, which deletes the cached 
changelogs and stops all requests until checks are enabled again. Deactivating the
plugin does the same.

#### Read-only

The digest never updates anything. Use the regular Updates or Plugins screen to 
update.

#### Safe and lightweight

 * Changelogs come from WordPress.org as HTML and are always cleaned before display:
   scripts, event handlers, styles and non-http(s) links are removed, and only basic
   formatting is kept.
 * Changelogs are fetched in the background after WordPress finds new updates, and
   cached per plugin version. Nothing is requested from WordPress.org on the front
   end or on other admin screens.
 * No JavaScript, and only a few lines of CSS on the digest screen.

Premium plugins (updates that do not come from WordPress.org) are listed with “Changelog
not available”.

### External services

This plugin connects to the WordPress.org Plugins API (`https://api.wordpress.org/
plugins/info/1.2/`) to read the changelog of plugins that have a pending update.

 * **Consent**: no request is made and no background task is scheduled until an 
   administrator (a user who can update plugins) clicks **Enable checks**, in the
   notice shown on the Plugins screen after activation or on the Changelog Digest
   screen. **Stop checks** on the plugin’s row (or deactivating the plugin) withdraws
   this consent: the scheduled task is removed and cached changelogs are deleted.
 * **What is sent**: the slug (folder name) of each plugin with a pending update
   from WordPress.org, one request per plugin, along with the standard WordPress
   HTTP headers (WordPress version and site URL in the user agent). No personal 
   data is sent.
 * **When**: only while checks are enabled: right after **Enable checks**, in the
   background via WP-Cron after WordPress has checked for plugin updates, and when
   an administrator opens the Changelog Digest screen and some changelogs are not
   cached yet (at most 2 requests per page view). Each changelog is cached for 7
   days for a given version. Never on the front end or on other admin screens.
 * **Not sent**: plugins without a pending update, and updates that do not come 
   from WordPress.org.

This service is provided by WordPress.org: [WordPress.org privacy policy](https://wordpress.org/about/privacy/).

## Installation

 1. Upload the plugin to `/wp-content/plugins/` or install it from the Plugins screen.
 2. Activate it.
 3. Click **Enable checks** in the notice on the Plugins screen (or on **Dashboard  
    Changelog Digest**). There is nothing else to configure.

## FAQ

### Can I trust the Security and Breaking badges?

They are hints, not guarantees. They are based on keywords and phrases (for example“
security”, “vulnerability”, “XSS”, “CVE”, “breaking change”, “minimum PHP version”,“
no longer supported”) found in the changelog entries of the update. A changelog 
can mention a security fix without these words, or use them for something harmless.
The absence of a badge never means that an update contains no security change: always
read the changelog.

Each badge lists the changelog lines that triggered it, with the matching keywords
in bold, so you can judge for yourself.

The **Requires PHP** badge is different: it comes from the official WordPress.org
data and is reliable. It is only shown when your server’s PHP version is too old
for the update.

### Why does a plugin show “Could not determine the exact version range”?

Changelogs have no standard format. When the version headings cannot be recognized(
or the changelog only links to an external page), the digest shows the latest entries
instead, collapsed.

### Why does a plugin show “Changelog unavailable right now”?

WordPress.org could not be reached, or returned an unexpected answer. The digest
tries again later; other plugins are not affected.

### Who can see the digest?

Users who can update plugins (`update_plugins`). If your site defines `DISALLOW_FILE_MODS`,
nobody has this capability and the digest is not available.

### My site uses DISABLE_WP_CRON

Background fetching only runs when WP-Cron runs. Without it, changelogs are fetched
when you open the digest, 2 at a time: reload the page to load the next ones.

### Does it work on WordPress Multisite?

Multisite is not officially supported in version 1.0 and has not been tested. Use
it on single-site installations.

### Why does the digest only show an “Enable checks” button?

The plugin waits for your consent before requesting anything from WordPress.org.
Click **Enable checks**: changelogs are then fetched and the digest is displayed.

### What is removed on deactivation, “Stop checks” and uninstall?

Deactivation and “Stop checks” remove the cached changelogs (a single option), the
consent setting, the lock and the scheduled event; after reactivation, checks must
be enabled again. Uninstall removes the same data plus each user’s “notice dismissed”
setting.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“Atelixo Changelog Digest” is open source software. The following people have contributed
to this plugin.

Contributors

 *   [ nicognito23 ](https://profiles.wordpress.org/nicognito23/)

[Translate “Atelixo Changelog Digest” into your language.](https://translate.wordpress.org/projects/wp-plugins/atelixo-changelog-digest)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/atelixo-changelog-digest/),
check out the [SVN repository](https://plugins.svn.wordpress.org/atelixo-changelog-digest/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/atelixo-changelog-digest/)
by [RSS](https://plugins.trac.wordpress.org/log/atelixo-changelog-digest/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 1.0.0

 * First release.

## Meta

 *  Version **1.0.0**
 *  Last updated **15 hours ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 6.0 or higher **
 *  Tested up to **7.1.3**
 *  PHP version ** 7.4 or higher **
 * Tags
 * [changelog](https://wordpress.org/plugins/tags/changelog/)[Plugin Updates](https://wordpress.org/plugins/tags/plugin-updates/)
   [release notes](https://wordpress.org/plugins/tags/release-notes/)[security](https://wordpress.org/plugins/tags/security/)
   [updates](https://wordpress.org/plugins/tags/updates/)
 *  [Advanced View](https://wordpress.org/plugins/atelixo-changelog-digest/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/atelixo-changelog-digest/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/atelixo-changelog-digest/reviews/)

## Contributors

 *   [ nicognito23 ](https://profiles.wordpress.org/nicognito23/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/atelixo-changelog-digest/)