Plugin forced updates needs to stop!

  • DB

    (@destructiveburn)


    4 weeks ago

    Hello, I normally don’t complain but this is starting to become a trend that needs to stop.
    I have noticed lately, that some plugins have been forcing automatic updates even when it’s disabled. THIS NEEDS TO STOP!

    I have noticed this with Siteorigin and I requested them to stop and they did, but the fact they were able to do it was concerning because if they can so can others. Just now, WooCommerce just did the same thing. This is becoming to be a trend and you need to release an update to stop this from happening.

    Yes updates are good for security reasons but there is a good reason to not have auto-updates and that reason is sometimes something might go wrong when updating. If these plugins can force it by ignoring the auto-update this is a BIG problem. It’s best to let the user decide. Important to make backups first then update. Not let these plugin companies decide for me or others. Sure I can complain to WooCommerce about it but that solves nothing. Someone else will do it. WordPress, you need to fix this. This is absolutely wrong.

    I control my updates with backups first then update. Not some random plugin developer choosing to do it and bypass the Disabled auto-updates function.

Viewing 3 replies - 1 through 3 (of 3 total)
  • George Appiah

    (@gappiah)

    4 weeks ago

    From the documentation:

    By default, only minor releases – such as for maintenance and security purposes – and translation file updates are enabled on most sites. In special cases, plugins and themes may be updated.

    I couldn’t find any official source within the 30 seconds I googled, but my understanding is that the dashboard toggle doesn’t change this.

    But you have full control of what gets updates automatically or even completely disable ALL automatic updates by adding the appropriate update configuration to your wp-config.php file: https://it.wordpress.org/support/article/configuring-automatic-background-updates/

    I personally find this a fair middle ground between helping the many people who never maintain their WordPress sites (force minor/security updates automatically) and giving full control to the relatively few who absolutely want full control over updates (let them define exactly what they want in the wp-config.php.

    Thread Starter DB

    (@destructiveburn)

    4 weeks ago

    I guess I was missing define( ‘AUTOMATIC_UPDATER_DISABLED’, true ); in my wp-config.php
    I just had define( ‘WP_AUTO_UPDATE_CORE’, false );

    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    4 weeks ago

    The wordpress security team has the ability to force out updates in case of extraordinary issues. Here’s some doc on that: https://developer.wordpress.org/plugins/wordpress-org/plugin-security/#automatic-plugin-security-updates

Viewing 3 replies - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.