Security Email Alerts

maltfield
(@maltfield)

5 days, 19 hours ago
How can I subscribe to get critical security (only!) email alerts from WordPress?

A couple months ago, wordpress core fixed a high-severity (9.8/10) security bug which allows an unauthenticated website visitor to perform SQL Injections and achieve arbitrary Remote Code Executions.

Unfortunately, I didn’t learn about this release the day that it was fixed.

How can I get email notifications whenever a new WordPress release is published which patches critical security vulnerabilities?

Note: I do *not* want to signup for a general newsletter nor get an email every time a new version of WordPress is released. I only want to recieve emails when a critical security bug is patched in a new release.

Any answers that include me getting a single email that’s not about a new release of wordpress with patches of critical security vulnerabilities is *not* a valid answer to this question.
- This topic was modified 5 days, 19 hours ago by maltfield.
- This topic was modified 5 days, 19 hours ago by maltfield.
- This topic was modified 5 days, 18 hours ago by maltfield. Reason: fix quotes

Viewing 6 replies - 1 through 6 (of 6 total)

Thread Starter maltfield
(@maltfield)

5 days, 18 hours ago

See also:

* https://wordpress.stackexchange.com/questions/433274/security-email-alerts

Fida – WPMU DEV Support
(@fidawpmudev)

5 days, 10 hours ago

Hello @maltfield ,

I hope you are doing well.

The WordPress News Security category (feed URL) and the Make.WordPress.org Security blog (feed URL) publish official announcements about vulnerabilities, patches, and end-of-support notices. You can subscribe to these feeds so that you’re always informed.

You can subscribe to RSS feeds by using a dedicated feed reader like Feedly, Inoreader, or NetNewsWire, or a browser extension like the RSS Subscription Extension for Chrome.
You can check this article to learn more: https://www.usecarly.com/blog/how-to-subscribe-to-rss-feed/

Kind Regards,
Fida Al Hasan

Rezwan Shiblu
(@rezwanshiblu1952)

5 days, 10 hours ago

There’s no official WordPress mailing list that only sends security alerts, as far as I know.

The closest official source is the security category on the news blog:
https://wordpress.org/news/category/security/

The other thing that actually arrives as email is the auto update notice from your own site. Security fixes ship as minor releases and those auto update by default, so WordPress mails the admin address once it runs.

Moderator threadi
(@threadi)

5 days, 8 hours ago

Yes, you can also subscribe to the RSS feed from the URL mentioned above: https://wordpress.org/news/category/security/feed – external tools probably also allow you to set up email notifications for this.
Thread Starter maltfield
(@maltfield)

5 days, 4 hours ago
Thanks all. RSS feeds are interesting, but not an email.

Does anyone know of a free service that will email me every time there’s a new entry published to an RSS feed?
- This reply was modified 5 days, 4 hours ago by maltfield.
Rezwan Shiblu
(@rezwanshiblu1952)

4 days, 7 hours ago
Blogtrottr does exactly that. Paste the feed URL, choose real time delivery, and it emails you each new item – https://blogtrottr.com

Feedrabbit is the same idea but it caps the number of feeds: https://feedrabbit.com

If you would rather not depend on a third party, rss2email is a small Python tool you can run from cron on your own box: https://github.com/rss2email/rss2email

Either way, point it at https://wordpress.org/news/category/security/feed/ . That category is low volume, so you should only hear from it when something security related is actually published.
- This reply was modified 4 days, 7 hours ago by Rezwan Shiblu.