Plugin updated while closed

  • Resolved Mihai Papuc

    (@mihaipmp)


    2 years ago

    This plugin (https://wordpress.org/plugins/unyson/) is closed for a few months now, the reason stated on it’s page being:

    This plugin has been closed as of October 11, 2023 and is not available for download. Reason: Security Issue.

    Monitoring the Github issue tracking the security bug I read that a new version of the plugin has been released: https://downloads.wordpress.org/plugin/unyson.zip.

    Although that link works and it downloads a newer version of the plugin, compared to the version that the plugin had when its page was closed, the plugin still remains closed.

    If the plugin was updated in the WP repository after being closed, does that mean that it could be reopened?

    I was unable to find a clarification reading the documentation, maybe somebody knows something that I missed in the docs or at least how the things work in practice.

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Moderator James Huff

    (@macmanx)

    2 years ago

    That just means the plugin developer has provided an updated version for review by the Plugins Team. It doesn’t mean it satisfies why the Plugins Team closed the plugin.

    Honestly, it’s been closed for half a year over a security issue, so I recommend switching to an alternative at this point.

    At worst, they don’t want to fix the security issue. At best, they are unable to in a very generously timely manner.

    Thread Starter Mihai Papuc

    (@mihaipmp)

    2 years ago

    @macmanx, thanks for your reply!

    Unfortunately, changing the plugin is not really an option, as this is basically the visual builder used by the site’s theme. To change it, the entire site would need to be redone – something that the site owner is not interested in doing.

    This is one of the reasons why I hate visual builders.

    Moderator James Huff

    (@macmanx)

    2 years ago

    Totally agree, especially with WordPress having a built-in visual builder now: https://wordpress.org/documentation/article/site-editor/

    I’d reitterate to the client one more time that a security issue which has gone not-fixed for 6 months is a perfect reason to switch to a new theme, hopefully a Block Theme.

    But, they’ll pay you either way, whether it’s changing the theme now or cleaning a compromised site later. 😉

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Plugin updated while closed’ is closed to new replies.