Disable WordPress Update Notifications and auto-update Email Notifications

Disable WordPress Update Notifications and auto-update Email Notifications has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Disable WordPress Update Notifications and auto-update Email Notifications has a vendor fix available, so running the current release closes it.

All of these findings were reported by Rio Darmawan. Disable WordPress Update Notifications and auto-update Email Notifications is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Disable WordPress Update Notifications and auto-update Email Notifications vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2023-34029

Disable WordPress Update Notifications <= 2.3.3 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

1 records


2023-05-30 00:00	Disable WordPress Update Notifications <= 2.3.3 - Cross-Site Request Forgery Disable WordPress Update Notifications… <= 2.3.3	`CVE-2023-34029`	4.3 Medium	Rio Darmawan	Yes

Showing 1–1 of 1 reports

Latestv2.4.2

Disable WordPress Update Notifications and auto-update Email Notifications

Author

Prem Tiwari

4.2(19)

84/100

Last Updated

2025-06-10 (1y ago)

Active Installs

10,000+

Downloads

80,918

Requires WP

5.0+

Requires PHP

Tested up to

WP 6.8.8

Created

2016-04-14 (11y ago)

Homepage | Documentation | Support This plugin will completely disables the Plugins, Themes, and WordPress core update notifications displayed by WordPress based on your plugin settings. Apart from this it will also disable auto-update Email Notifications. 🎉 Disable auto-update Email Notifications Since WordPress 5.5 version, if you have enabled plugin and theme auto-update you will receive an automated email notifications when any plugin or theme auto-update is successful or failed. If you manage a dozen of websites, then the you will receive the constant stream of auto-update notifications emails and may be it annoying you. I have added a new feature to cure the problem by automatically Disable auto-update Email Notifications for plugins and themes auto-update email notifications. 👉 Most importantly, This plugin is free and always will be free.

View on WordPress.org