WordPress has announced a new 24-hour cooldown period for plugin and theme updates, aimed at improving security across its platform. This initiative, dubbed ‘Protect The Shire,’ is a response to rising security threats and aims to ensure that all 78,000 plugins and themes on WordPress.org are as secure as possible.
The ‘Protect The Shire’ Initiative
This initiative focuses on enhancing the security of WordPress plugins and themes by implementing a review period before updates are automatically distributed. The goal is to leverage both human and AI resources to identify potential vulnerabilities and prevent malicious code from being deployed.
Impact of Changes on Site Owners
Site owners will need to adapt to this new update process, which may delay the availability of new features or fixes. While this may be inconvenient, the added security checks are designed to protect sites from potential threats. Owners should stay informed about updates and manage their plugins accordingly.
Response to Security Threats
The decision for a cooldown period comes after various security incidents across the WordPress ecosystem and other platforms. By allowing time for thorough reviews, WordPress aims to balance the need for timely updates with the necessity of maintaining site security.
Frequently Asked Questions
What is the 24-hour cooldown for plugin updates?
It is a new policy that delays the distribution of plugin updates for 24 hours to allow for security reviews.
What is the goal of the ‘Protect The Shire’ initiative?
The initiative aims to secure all 78,000 plugins and themes available on WordPress.org.
How will this change affect my site’s security?
The cooldown period is designed to enhance security by allowing for thorough reviews of updates before they are automatically applied.