• Resolved sumitchikane

    (@sumitchikane)


    I want to stop wordfence email alert “The plugin needs an upgrade alert” i want email alert when wordpress get updated but not when plugin get updated. Currently I am using wordpress version 4.6.1 and wordfence version 6.2.6.

Viewing 5 replies - 1 through 5 (of 5 total)
  • Hi sumitchikane,
    A possible way to achieve that is to disable “Alert on warnings” option from (Wordfence > Options => Alerts).

    Thanks.

    I just wanted to add to what Alaa said.

    While I understand why you might think disabling plugin and theme notifications is a good idea, I would have to respectfully disagree. We think most hacked WordPress sites these days can be traced back to plugins and themes that weren’t updated. One of our best analysts, when asked, puts the number close to 90% that can trace the hack to some plugin or theme that wasn’t updated.

    Most good plugin and theme vendors fix their vulnerabilities quickly and WordPress core is very good about fixing vulnerabilities and a fix will emerge almost immediately. Therefore, keeping your site up-to-date is one of the most effective things you can do to prevent a hack. It is also why upgrading quickly when a security fix emerges is important.

    As a side note, the vast majority of WordPress vulnerabilities are in plugins. You can see this data here: https://wpvulndb.com/

    There have, however, been some serious theme related vulnerabilities that have allowed hackers to gain complete control of WordPress sites. The timthumb.php vulnerability is an example of this. It was a library with a severe vulnerability that was used by a wide range of theme vendors.

    Knowing all this, we couldn’t really call ourselves a serious security vendor if we considered plugin or theme updates ‘advice’ or a ‘notification’ and nothing more. We would highly advise you to either leave the alerts on and address them when you get them, or put another system in place to make sure updates are applied as they become available. Leaving them unpatched can have serious consequences and at Wordfence we don’t want you to miss something that can be so devastating.

    tim

    Tim, your post makes a lot of sense, only it’s not real-life. I’m sitting here with Wordfence Dashboard telling me “An Update is available for a plugin” and when I click on that link Wordfence says: Plugins — Your plugins are all up to date.

    Please tell me how to turn this idiotic notification off, it does nothing to help, only confuses and takes more time out of my day.

    To disable the useless alerts, is what Alaa suggests the correct procedure?

    MTN

    @mountainguy2 perhaps this notification from an old scan, because as I remember you run a scan once a week?
    What I suggested above will only disable “The plugin needs an upgrade alert” email alert as it’s one of the “warnings” alerts.

    Thanks.

    I too want to disable “plugin update needed” notification. It’s still telling me I need to update even though I updated and marked as “fixed”. I have another plugin that monitors and alerts me to plugin updates, so I don’t need it for WordFence.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘How to stop plugins out of date alert from wordfence’ is closed to new replies.