Annoying e-mail alerts not following alert level prefs

Hi @clmisi, thanks for getting in touch.

This is an example of a “Critical” severity Wordfence alert, where a plugin version with an unpatched security vulnerability has been found installed on your site during a scan. The vulnerability is then given a rating out of 10 for how serious or easily exploitable it may be. You can click on the vulnerability information link provided in the scan result that will give you more information.

Naturally we’d recommend updating any vulnerable plugin immediately to the patched (or most recent) version rather than wait until your update cycle comes around.

Thanks,
Peter.

HI @wfpeter,

many thanks for your quick answer. What effect has the classification in the alert prefs to choose from?
Again, it says vulnerability : medium, i get the e-mail anyway.

You said, that you recommend updating any plugin immediately, so what is my choice then?
It is my responsibility to decide to update in maintenance circles or not. I personally don’t like to be overruled by software.
That would force many people to let the plugins be updated automaticaly, which is a security risc too because it could and did happen, that the complete site did work anymore after an update. That would be then out of my sight.

kind regards
Clmisi