# Remember to check your WordPress plugins often **URL:** \ **Category:** Third Party News\ **Created:** [June 6, 2026, 7:58am UTC](https://forum.virtualmin.com/t/remember-to-check-your-wordpress-plugins-often/137380 "2026-06-06T07:58:35Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![Joe](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/joe/32/9_2.png) [@Joe](https://forum.virtualmin.com/u/Joe)\ **Post date:** [June 6, 2026, 7:58am UTC](https://forum.virtualmin.com/t/remember-to-check-your-wordpress-plugins-often/137380/1 "2026-06-06T07:58:35Z")
Howdy all, I just saw this pass by on one of my feeds and figured now is as good a time as any to remind everyone again to keep a close eye on security updates, now more than ever. I know Updraft is a pretty popular plugin for WordPress, so if you’re using it…get on this, sounds potentially quite serious: > **[Important security update for UpdraftPlus and UpdraftCentral users](https://teamupdraft.com/blog/important-security-update-for-updraftplus-and-updraftcentral-users/)** > > A critical security update has been released for UpdraftPlus and UpdraftCentral. Learn who is affected, how to update, and how to stay protected. ---
**Author:** ![shoulders](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/shoulders/32/10086_2.png) [@shoulders](https://forum.virtualmin.com/u/shoulders)\ **Post date:** [June 6, 2026, 9:19am UTC](https://forum.virtualmin.com/t/remember-to-check-your-wordpress-plugins-often/137380/2 "2026-06-06T09:19:23Z")
what are you recommendations on automatic updates? **for me** - Critical sites e.g. eCommerce/Mission Critical I have no automatic updates - For ma and pa sites (eg 5 page sites etc…) I have - plugin automatic updates on - minor WordPress updates only Using a real cron for WordPress makes these updates guaranteed and allows your site to run smoother without using the pseudo cron. ---
**Author:** ![Joe](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/joe/32/9_2.png) [@Joe](https://forum.virtualmin.com/u/Joe)\ **Post date:** [June 6, 2026, 9:55am UTC](https://forum.virtualmin.com/t/remember-to-check-your-wordpress-plugins-often/137380/3 "2026-06-06T09:55:29Z")
I’m hesitant to suggest any automatic updates now. There have been so many supply chain attacks…including WordPress plugins. e.g. there was the recent giant pile of WordPress plugins that were acquired and immediately injected with malware. So, an official upstream update included malware…if you updated immediately after those got released, you got popped. I’m recommending: 1. Minimize plugins. If you don’t really need it, get it out of your systems. 2. Keep up with who owns/develops your plugins. 3. Read the release notes or change log. If it’s open source, look at the actual commits. I don’t like it, but things are getting hairy out there. ---
**Author:** ![shoulders](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/shoulders/32/10086_2.png) [@shoulders](https://forum.virtualmin.com/u/shoulders)\ **Post date:** [June 6, 2026, 8:32pm UTC](https://forum.virtualmin.com/t/remember-to-check-your-wordpress-plugins-often/137380/4 "2026-06-06T20:32:25Z")
> [@Joe](#): > > here have been so many supply chain attacks…including WordPress plugins. This is definitely the new meta and I had forgotten about it. `WordPress Org` should do something about this. I certainly will not be using that other plugin website or that fork of WordPress. ---
**Author:** ![Joe](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/joe/32/9_2.png) [@Joe](https://forum.virtualmin.com/u/Joe)\ **Post date:** [June 6, 2026, 8:52pm UTC](https://forum.virtualmin.com/t/remember-to-check-your-wordpress-plugins-often/137380/5 "2026-06-06T20:52:09Z")
The WordPress folks have been doing stuff about it for years. They scan for known malware, etc. and they removed all of those plugins and banned the developer and rolled a repair patch with the next version of WordPress. But, we live in dangerous times. Machines with only modest guidance can find and exploit software at rate far faster than humans can fix it. ---
**Author:** ![Le\_Gallois](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/l/9dc877/32.png) [@Le\_Gallois](https://forum.virtualmin.com/u/Le_Gallois)\ **Post date:** [June 7, 2026, 1:41pm UTC](https://forum.virtualmin.com/t/remember-to-check-your-wordpress-plugins-often/137380/6 "2026-06-07T13:41:41Z")
> [@Joe](#): > > But, we live in dangerous times. Tell me about it. Lock it down folks. The internet never had enough controls before in my honest opinion, AI is just an unbridled demon stallion running free to cause untold havoc … Flee. David ---
**Author:** ![KitchM](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/k/8c91f0/32.png) [@KitchM](https://forum.virtualmin.com/u/KitchM)\ **Post date:** [June 12, 2026, 11:29pm UTC](https://forum.virtualmin.com/t/remember-to-check-your-wordpress-plugins-often/137380/7 "2026-06-12T23:29:09Z")
Thanks, Joe. Good to know about this. ---
**Author:** ![system](https://cdn.forum.virtualmin.com/uploads/default/original/2X/c/cd96d761e326db4b2bef94886a639109bd7a8e76.svg) [@system](https://forum.virtualmin.com/u/system)\ **Post date:** [July 2, 2026, 11:29pm UTC](https://forum.virtualmin.com/t/remember-to-check-your-wordpress-plugins-often/137380/8 "2026-07-02T23:29:47Z")
Closed on July 2, 2026, 11:29pm UTC This topic was automatically closed 20 days after the last reply. New replies are no longer allowed.