[wp-trac] [WordPress Trac] #57159: Add scheduled events in the site health report.

[WordPress Trac]

#57159: Add scheduled events in the site health report.
----------------------------+------------------------------
 Reporter:  sebastienserre  |       Owner:  (none)
     Type:  enhancement     |      Status:  new
 Priority:  normal          |   Milestone:  Awaiting Review
Component:  Site Health     |     Version:
 Severity:  normal          |  Resolution:
 Keywords:  2nd-opinion     |     Focuses:
----------------------------+------------------------------

Comment (by rawrly):

 Hello johnbillion and sebastionserre.

 I found this ticket when investigating a WP-Cron concern cited by
 CVE-2023-22622 and believe there is one solution for both this CVE and the
 problem you are concerned about sebastienserre. If WP-Crons are broken, or
 not running on a timely schedule it can cause hard to track issues or
 other problems in the Application.

 One of the more serious examples would be the auto-update functionality,
 which relies on WP-Cron to complete.

 CVE-2023-22622 is describing concern that if WP-Cron is failing or running
 sporadically, users should be made aware (so they can take action) instead
 of silently failing. To address this, WordPress can add a notification if
 WP-Cron tasks can be detected as not running.

 Would it solve your concerns sebastienserre if wp-admin had a notification
 that WP-Cron tasks were running off schedule, or not at all? This is
 different than your original request, but may fulfill it just the same. As
 johnbillion mentioned, there are plugins available for improved management
 of WP-Cron tasks.

 ---

 The detection of WP-Cron issues can be done using WP-Cron itself, creating
 a WP-cron "heartbeat" task that logs it's last run time and alerts the
 administrator if it identifies the WP-Cron task itself runs too
 infrequently.

 This will detect WP-Cron runs intermittently, but since it relies on WP-
 Cron it will not function if WP-Cron is disabled.

 There needs to be at least one mechanism outside of WP-Cron that checks
 the WP-Cron queue for issues such as scheduling delays. If this mechanism
 is part of wp-admin, perhaps displayed in the dashboard (to be more
 prominent that site health) it would alert users WP-Cron is failing to run
 and direct them to proper support documentation. (This support
 documentation may need to be found or written)

 ---

 I am looking forward to hearing your thoughts and ideas for this matter.
 Thank you.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/57159#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform