Plugins No Longer in WordPress Directory
Plugins No Longer in WordPress Directory. Checks for installed plugins that are no longer in the WordPress.org Plugin Directory.
When a plugin is removed from the WordPress.org Plugin Directory no warning is provided in the WordPress admin area if that plugin is installed in a website. Plugins can be removed for the following reasons:-
- they are found to break the GPL
- they are found to break the directory rules
- other plugins by the author are found to be a problem and all are removed pending investigation
- the author asks for it to be closed
- the author asks for it to be closed because they are re-releasing under a different name
- it is being investigated after non-specific complaints
- there is a security vulnerability
If the plugin contains a security vulnerability the website could be vulnerable to being exploited until the plugin is deleted from the installation or a security update is released and applied.
If you want WordPress to begin alerting when installed plugins have been removed from the directory please make sure to vote for implementing that in WordPress. In the mean time, this plugin adds a page to WordPress to check if any plugins installed in WordPress are on a list of plugins that are no longer in the WordPress.org Plugin Directory so that WordPress administrators are alerted to the issue.The plugin will also separately list any plugins that have not been updated in the WordPress.org Plugin Directory in over two years.
For removed plugins that have a security vulnerability, a link to a security advisory maybe included in the results of the check.
To insure that plugins that have returned to the WordPress.org Plugin Directory since the list was last updated are not incorrectly warned about, the plugin rechecks the WordPress.org Plugin Directory to confirm any installed plugins that are on the list have not returned to the directory.
Plugins No Longer in WordPress Directory. The check is done using the plugin’s directory (folder) name which could lead to plugins that have never been in the plugin directory to be flagged if they use the same name as a plugin that was in the WordPress.org Plugin Directory. If you become aware of a plugin this happening to please contact us so that we can put a check in place to prevent that from happening anymore.