The WordPress team has rolled out a significant update to the Plugin Check plugin, which now automatically generates security reports after each plugin update. This new feature, effective from October 27, 2025, aims to enhance the quality and security of plugins available on WordPress.org.
Key Takeaways
- Automatic security reports for plugins launched on October 27, 2025.
- Helps developers fix issues before manual reviews, improving plugin quality.
- Security reports will be emailed to authors post-update for better practices.
How Does the Plugin Check Work?
The Plugin Check plugin conducts checks on all plugin updates, identifying security, compatibility, and compliance issues. This proactive approach allows developers to rectify problems before their plugins undergo manual review, ultimately leading to higher quality submissions.
Why Is This Important?
This update is crucial for website owners and developers. By receiving automatic security reports, developers can ensure their plugins meet safety standards, which helps protect users from potential vulnerabilities. It’s a step toward maintaining a secure WordPress ecosystem.
What Are the Future Plans?
The goal is to eventually send these security reports directly to plugin authors via email after updates. This initiative is designed to further promote best practices in plugin development and enhance overall security across WordPress sites.
Frequently Asked Questions
What new feature has been introduced in the Plugin Check plugin?
The Plugin Check plugin now automatically generates security reports after each plugin update.
When did the automatic security reports feature become effective?
This feature became effective on October 27, 2025.
How does the Plugin Check plugin enhance plugin safety?
It conducts checks on plugin updates to identify security, compatibility, and compliance issues before manual reviews.
Why are these security reports important for developers?
They help developers ensure their plugins meet safety standards, protecting users from vulnerabilities.
What are the future plans for the Plugin Check plugin?
The goal is to send security reports directly to plugin authors via email after updates to promote best practices.