It is important to note that only one email notification will be sent per event, to avoid any appearance of spam. These notifications differ from our usual email notifications as they are sent immediately after a vulnerability is discovered. Site admins will no longer need to log into WordPress Toolkit for these time-sensitive security issues. The final new security-related feature we want to highlight within WordPress Toolkit is email notifications associated with the results of the Site Vulnerability scan. Also, note that there is no special auto-update policy for WordPress core since minor WordPress auto-updates already handle this case. ![]() ![]() Security updates for vulnerabilities are installed immediately after these vulnerabilities are found. In the case of vulnerable plugins, site admins can also simply opt to have the plugin disabled rather than updated. In other words, if an update currently exists that will fix a known vulnerability, WordPress Toolkit will then handle this entire process by itself. These policies (which must be manually enabled) ensure that any detected vulnerabilities, that are capable of being fixed by installing updates, are addressed automatically. Introduced in WordPress Toolkit version 5.9, and in conjunction with The Site Vulnerability Scan mentioned above, is advanced auto update policies. If any known vulnerability is discovered, WordPress Toolkit marks the website in the interface letting site admins know that they should now take action. ![]() Introduced in WordPress Toolkit version 5.8, the automated vulnerability scan checks the vulnerability database provided by Patchstack each hour to see if any new vulnerability has been reported, then checks every WordPress site under management, including all themes and plugins, for a known vulnerability.
0 Comments
Leave a Reply. |