Alerts
Update Gate → Alerts collects everything the gate, the hidden-plugin detector and the integrity watch want you to know about.
Running checks by hand#
The buttons at the top of the screen run the checks immediately instead of waiting for the daily cron:
| Button | What it does |
|---|---|
| Run all checks now | Hidden-plugin scan followed by the integrity check. |
| Scan for hidden plugins | Only the hidden-plugin scan. |
| Check file integrity | Only the integrity check, creating baselines for plugins that have none. |
Under the buttons you see when the last full check ran, when the last hidden-plugin check ran and from which vantage point (the daily scan or the Plugins screen), and when the next scheduled check is due.
Alert views and actions#
Use the Open, Dismissed, Resolved and All links to filter the list. Each alert shows its severity, title, type, message, a Details panel with the affected files and data, when it was first seen, how many times it has recurred and when it was last seen.
| Action | When to use it |
|---|---|
| Resolve | You fixed the problem. The alert is raised again if the condition comes back. |
| Dismiss | The condition is expected (for example a plugin that hides itself on purpose). The alert stays quiet if the same condition is seen again. |
| Reopen | Bring a dismissed or resolved alert back to Open. |
| Accept changes | Only on “files changed without an update” alerts: accept the current files as legitimate and use them as the new baseline. |
| Open review | Only on alerts linked to a held update: jump to the review. |
Alerts are de-duplicated by fingerprint, so a repeat of the same condition updates the occurrence counter instead of creating a new alert. Approving or rejecting a review closes its held-update alert, and matching files close integrity alerts automatically.
Severities#
| Severity | Raised by |
|---|---|
| Critical | Hidden plugin, hidden active plugin, force-loaded plugin, tampered plugin list, hidden must-use plugin, hidden drop-in |
| High | Code files (PHP, JS, server config) changed without an update; gate error (fail open or fail closed) |
| Medium | Non-code files changed without an update; update held for review; update installed with a Review verdict; risky update let through because the vendor is trusted |
While Critical alerts are open, an error notice appears on every admin screen, and the Alerts menu item shows a badge with the number of Critical and High alerts.
Integrity baselines#
The bottom of the screen lists every baseline: plugin, version, number of files, when it was taken and from what source, and when it was last checked. See Feature Overview for how baselines are created.