YunoHost-Apps / wordpress_ynh

WordPress package for YunoHost
https://wordpress.org/
GNU General Public License v3.0
26 stars 30 forks source link

Make install and activation of plugins optional #207

Open bugsysop opened 1 year ago

bugsysop commented 1 year ago

Describe the bug

At every update this app re-install and activate three plugins (wp-fail2ban-redux, companion-auto-update, authldap) without information to the YNH user/admin, and without request of consent.

This is a security concern and an ethical issue.

Context

Steps to reproduce

```sh
sudo yunohost app update wordpress
```

Expected behavior

  1. Inform clearly the user/admin before running the upgrade.
  2. Request of an explicit consent to proceed.