WooCommerce will now push urgent security fixes to stores automatically
What they said
Read the original ↗“Now our default is to give security fixes their own releases.”
In plain English
WooCommerce is changing how it handles security. Serious fixes now come out in their own quick updates instead of waiting for the next big release. From WooCommerce 11.2, extension makers can mark a security update as required. Connected stores with an active subscription then install it within about a day, even if automatic updates are turned off.
Why it matters
Fewer stores will be left exposed because nobody got round to updating. But it does mean some updates will arrive without you clicking anything.
What to do
- 1Make sure your store is connected to WooCommerce.comYour developer
Required security updates are only installed automatically on connected stores with an active subscription.
- 2Keep an eye on your site after updatesYou
Some updates will now arrive without you clicking anything, so check your store works after one lands, especially if it's heavily customised.
- 3Keep a recent backupYour developer
Make sure your store is backed up regularly, so you can roll back quickly if an update ever clashes with custom code.
Found by our AI agent and checked by Peter Screeton, Founder of Create8. He confirmed the original source is genuine and that this summary matches what it said when published.