[wp-trac] [WordPress Trac] #55321: Adding new themes in releases without a global theme auto-update setting renders installations insecure

WordPress Trac noreply at wordpress.org
Wed Mar 9 01:17:13 UTC 2022


#55321: Adding new themes in releases without a global theme auto-update setting
renders installations insecure
-------------------------------+-----------------------
 Reporter:  bertvandepoel      |       Owner:  pbiron
     Type:  enhancement        |      Status:  assigned
 Priority:  normal             |   Milestone:  6.0
Component:  Upgrade/Install    |     Version:
 Severity:  normal             |  Resolution:
 Keywords:  reporter-feedback  |     Focuses:  ui
-------------------------------+-----------------------

Comment (by Otto42):

 We have never turned on auto-updates for any theme. Ever. It seems way too
 dangerous. People modify their themes. Plugins tend to not be directly
 changed.

 This is just my opinion, updating themes directly loses any customizations
 they may have made to files in the theme folder. It's risky. Very, very
 risky.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/55321#comment:6>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list