AFB Update Watch
| 开发者 | aaronfozzy |
|---|---|
| 更新时间 | 2026年10月19日 07:09 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Plugins change hands. Most sales are harmless, but some buyers have pushed a malicious update to every site running the plugin they bought. WordPress.org does not tell you when a plugin you rely on gets a new owner, so the first you hear of it is often the hack.
AFB Update Watch checks every plugin you have installed from WordPress.org once a day and:
- Spots a change of owner. It records each plugin's author and committers on WordPress.org the first time it sees it, then tells you if they change.
- Spots a closure. If a plugin is closed on WordPress.org, for a security issue or any other reason, you hear about it straight away rather than finding out it stopped getting updates.
- Holds updates until you have checked. A flagged plugin's update is held back, from automatic updates, the Update button and bulk updates alike, until you press release.
- Guards WooCommerce updates. WooCommerce no longer holds itself back when your extensions are not marked as tested with a new version. With the guard on, a new major or minor WooCommerce release is not auto-updated until every active extension says it is tested with it, and you can see exactly which extensions are holding it up. Patch releases always go through.
- Emails you. Alerts go to the admin email, or an address you choose.
安装:
- Install and activate the plugin. On multisite, network activate it.
- Go to Tools, AFB Update Watch (Network Admin, Plugins, AFB Update Watch on multisite) and press Check now to take the first baseline. Otherwise it runs on its own within a minute.
- Optionally set the alert email address.
常见问题:
Does an owner change mean the plugin is malicious?
No. Most ownership changes are perfectly ordinary. It means the people who can push updates to your site have changed, so it is worth reading the changelog and the support forum before you update.
Which plugins are checked?
Plugins installed from WordPress.org. Premium plugins and custom code are not on WordPress.org, so there is nothing to compare against.
Will it stop security updates?
Only for a plugin you have been warned about, and only until you release the hold. Release it as soon as you are satisfied.
What does it send to other servers?
It asks the public WordPress.org plugin API about each installed plugin's slug. Nothing about your site, users or content is sent.
更新日志:
0.1.0
- First release: ownership and closure watch, update holds, WooCommerce untested-extension guard, email alerts.