Security Monitoring - Abandoned Plugins and Themes
under review
Aurelio Volle
Description:
Our upcoming security monitoring enhancement will bolster your website's security by introducing the detection of abandoned plugins and themes. This feature provides you with vital insights into potential security vulnerabilities associated with outdated and unsupported plugins and themes, enabling proactive action to safeguard your website.
Key Benefits:
- Security Awareness:Identify and address abandoned plugins and themes to minimize the risk of security breaches and vulnerabilities.
- Proactive Protection:Stay ahead of potential security threats by taking action on unsupported and outdated software components.
How Can You Help Us?
- Vote:Show your interest and support by voting for this feature on our roadmap.
- Share Your Ideas:Have additional suggestions or ideas related to security monitoring? We're all ears! Share your thoughts with us.
- Tell Us Why This Is Important for you?Share your personal insights on why this feature is important to you to help us understand your perspective.
S
S Ruby
Please include the option to disable these warnings for certain plugins and sites.
Because very rarely I use an old plugin or theme by intention, and I take responsibility for this and know what I do.
Sometimes I cannot convince a customer to update an old plugin (because he/she does not want to renew the license for example). And I do not want to receive warnings by Umbrella all the time.
Aurelio Volle
marked this post as
under review
Aurelio Volle
Merged in a post:
Detect Abandoned or Removed Plugins from WordPress.org Repository
S
Steven
It would be incredibly helpful if WP Umbrella could automatically detect when a plugin installed on a managed site has been abandoned (no updates for 1+ year) or removed from the WordPress.org repository.
This feature would allow us to take timely action on potential security or compatibility issues before they become problems. Ideally, the detection should include:
- A flag for plugins not updated in 12+ months
- A flag for plugins no longer available on WordPress.org
- Optional email or dashboard notifications when such plugins are found
- A report or filter to easily view all flagged plugins across all sites
This would enhance the security monitoring and plugin management capabilities of WP Umbrella and help agencies and site managers maintain cleaner, safer sites.
Russ Michaels
this should also check for any plugins or themes removed from wordpress.org repository.
It would be handy if it integrated with wordfence to pull any alerts from that too.
Barnabas
Russ Michaels: patchstack integration will be added soon
C
Charles Metzger
If the only thing this feature does is add the date each plugin was last updated, it would be a huge help. It boggles my mind that WP doesn't include that information on a site's plugin page.