WordPress Development Stack Exchange is a question and answer site for WordPress developers and administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there any email alert list for security fixes? I'd rather not rely on just an RSS feed.

share|improve this question
I doubt it that you'll get notified earlier. You could just set your RSS reader to check for updates more frequently – onetrickpony Jan 18 '11 at 6:01
up vote 1 down vote accepted

There is a plug-in that will send you an email whenever an update becomes available (security updates and otherwise). This will be one of the easiest ways to get notified via email:

Alternatively, there are usually emails on the WP-Testers email list immediately following an update. You can always subscribe to that to see both when updates are ready and when users find exotic bugs that might affect your system.

Finally, the core team is fairly consistent in blogging about security patches on the WordPress Development Updates site. And, conveniently, the site offers email updates :-)

So there are three different options ... hopefully one will work for you.

share|improve this answer

I know this is an old question, but it's worth adding contemporary information.

There's a security announcement list provided for free by a company called WordFence. They send out relevant information on insecure extensions. Head to their website, and you'll see a signup field (currently it's at the bottom of their site).

That company also makes a plugin called WordFence (free and paid versions available) which has a large number of security features for your website. When you install that plugin, your site becomes part of the greater WordFence network which determines common attack patterns through crowd-sourcing. So your site is protected if someone else's WordPress site is attacked.

I also recommend regularly checking the WPScan Vulnerability Database site managed by a team of security testers. It's essentially a database of known WordPress core, plugin and theme vulnerabilities.

share|improve this answer
+1 for WPScan. It has a mailing list as well which is worth joining – Andre Lackmann Mar 12 '15 at 0:35

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.