WordPress.org Now Auto-Blocks Risky Plugin Releases
Every WordPress.org plugin release passes a six-hour security cooldown, and since 9 September 2026 a high-risk score halts distribution with no human in the loop.
plugins
Every WordPress.org plugin release passes a six-hour security cooldown, and since 9 September 2026 a high-risk score halts distribution with no human in the loop.