My site was not updated automatically, but I’ve updated manually, read this notice:
https://woocommerce.com/posts/critical-vulnerability-detected-july-2021/
Hi @pwaara 👋
See, this question is more oriented to the WordPress Core rather than for WooCommerce itself.
The auto-update and plugin management is a functionality from the WordPress core. So please reach out to the following support forum for better guidance about this issue:
https://wordpress.org/support/forum/how-to-and-troubleshooting/
Moreover, you could ask your hosting provider for more insights about this.
Cheers 🙂
Auto-updates are neither enabled nor disabled by default. For security updates, WordPress.org can enable them for especially serious security issues.
You can manually disable updates if you like, of course, and we have instructions for doing exactly that: https://wordpress.org/support/article/configuring-automatic-background-updates/
But by default, security updates are enabled for plugins, themes, and core.
Thread Starter
pwaara
(@pwaara)
I have received an email from the Woocommerce team explaining the situation. I have updated all of my sites to the latest version in their current branch. (Many had already been updated automatically.) I will update them to the latest version after I can test the update on my dev sites.