Automatic updates delayed 24h

  • Resolved wanderndeluxe

    (@wanderndeluxe)


    2 weeks, 1 day ago

    Hi guys!

    As it seems, WordPress has introduced a new 24h delay in rolling out automatic updates for plugins (see: https://www.linkedin.com/posts/tonyzeoli_yes-wordpress-offers-automated-plugin-and-share-7472273513786298368-VDQA/). As far as I understand this happens for security reasons: there have been cases, where malicious code has been distributed via automatic updates.

    This has an impact on your plugin as well: At the moment, when I get a notication via NinjaFirewall, that a security update is available, I am not able to install this update immediately (due to the 24h delay) from the wordpress dashboard in the backend.

    I wanted to inform you about this discrepancy. Maybe you want to change your notification message with a future release or send a second notification/reminder as soon as the plugin update is available for distribution.

    What do you think about this?

Viewing 1 replies (of 1 total)
  • Plugin Contributor bruandet

    (@bruandet)

    2 weeks ago

    I’m aware of it, but I don’t think there’s a way to know when exactly the plugin will be available for auto update from your WordPress dashboard.

    As it is a security issue, I recommend you manually update it as soon as you receive NinajFirewall’s notification. That’s important because during that 24-hour window, a hacker who noticed that was a security update could attack your site.


Viewing 1 replies (of 1 total)

You must be logged in to reply to this topic.