[wp-trac] [WordPress Trac] #47061: Site Health Check: WordPress default install behaviour is flagged as security problem

[WordPress Trac]

#47061: Site Health Check: WordPress default install behaviour is flagged as
security problem
----------------------------+-----------------------------
 Reporter:  DavidAnderson   |      Owner:  (none)
     Type:  defect (bug)    |     Status:  new
 Priority:  normal          |  Milestone:  Awaiting Review
Component:  Administration  |    Version:  trunk
 Severity:  normal          |   Keywords:
  Focuses:                  |
----------------------------+-----------------------------
 "Site Health Check" will flag inactive plugins or themes as a security
 issue needing resolving.

 Whereas, WP installs inactive plugins (Akismet, Hello Dolly) by default,
 and releases come bundled with new themes that can get installed on
 existing sites that were using something else (e.g. if you follow the
 "upgrade via FTP" guidance in Codex).

 i.e. WP is going to be handing out recommended "Security" advice to undo
 what WP does.

 Obviously, the resolution depends upon whether it's held that the advice
 that inactive plugins are a security issue is intended to be taken
 seriously by users or not.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/47061>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform