unable to detect when a plugin is deleted from repo

  • Hi,

    On one site I manage, I had an old plugin running, that was no longer available for download on the WP repo for security reasons, however since we didn’t get a notification, the website was hacked, we were able to quickly recover the site and clean infected files, but this showed one significant issue with the plugin updates setup, it works well for newer versions of plugins, but for plugins that are removed from the WP repo, how do we get a notification on our WP site that we should remove it accordingly? is there a workaround for this? thank you.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    The WordFence plugin will monitor that and notify you when an installed plugin is removed from the repo.

    Thread Starter Motaz Shazly

    (@motaz_shazly)

    That’s helpful to know @sterndata thank you, still, the fact that it doesn’t exist out of the box is a major security flaw in the plugins update setup and I think should be considered as a priority to fix in a following release soon.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘unable to detect when a plugin is deleted from repo’ is closed to new replies.

Tags