[wp-trac] [WordPress Trac] #55185: Auto-updates despite disabled

WordPress Trac noreply at wordpress.org
Thu Feb 17 13:50:29 UTC 2022

#55185: Auto-updates despite disabled
 Reporter:  Psychosopher  |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Plugins       |     Version:
 Severity:  normal        |  Resolution:
 Keywords:  close         |     Focuses:
Changes (by SergeyBiryukov):

 * keywords:   => close
 * component:  General => Plugins


 Hi there, welcome back to WordPress Trac!

 This is explained in the [https://wordpress.org/support/article
 Configuring Automatic Background Updates] support article:
 > By default, automatic background updates only happen for plugins and
 themes in special cases, as determined by the WordPress.org API response,
 which is controlled by the WordPress security team for patching critical
 vulnerabilities. To enable or disable updates in all cases, you can
 leverage the `auto_update_$type` filter, where `$type` would be replaced
 with “plugin” or “theme”.

 Based on the linked support topic, it looks like patching a securiy issue
 in the plugin is exactly what happened here, which is why an automatic
 update was pushed even if it was not explicitly enabled.

Ticket URL: <https://core.trac.wordpress.org/ticket/55185#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform

More information about the wp-trac mailing list