Plugins in scope
Update Gate → Plugins in scope lists every installed plugin and tells you whether its updates are gated.
A plugin is in scope when either of these is true:
- the package URL of its update is not hosted on
downloads.wordpress.org(only an exact host match counts, so a look-alike such asdownloads.wordpress.org.evil.testis in scope); or - WordPress.org has no entry for the plugin in the update data.
When an update is actually running, the real download URL takes precedence, because that is what is being installed.
| Column | Meaning |
|---|---|
| Plugin | Name, version and plugin file. |
| Update source | WordPress.org, Vendor server or Not listed on WordPress.org, with the update host when known. |
| Gated | Yes when the plugin’s updates are inspected. |
| Override | Automatic (follow the rules above), Always gate or Never gate. |
| Trusted until | The expiry date and host of any vendor trust granted from a review, with a Revoke checkbox. |
Change the overrides you need and click Save overrides. Tick Revoke next to a trusted plugin to remove its trust at the same time.
Premium Update Gate itself is out of scope by default. Its releases are verified by the updater (package hash and critical files). Choose Always gate on its row if you want the gate to inspect them as well.
Was this article helpful?
Tell us what was missing