WordPress Implements Automated Plugin Security Reviews to Prevent High-Risk Updates

WordPress has introduced automated security reviews for plugin updates using AI and Jetpack Scan to block high-risk releases before distribution. The process includes a 6-hour cooldown period, risk scoring, and mandatory fixes for developers to resolve security issues.

WordPress has announced it's launching an automated security review for every release of a plugin before it's distributed through the WordPress.org update API so as to analyze it for potential security issues and ensure there are no risks involved.

"New plugins are reviewed before they enter the directory, but updates ship continuously after that," David Perez, WordPress Official Plugin

Read original article