Blog Security Guidelines

to ensure latest security and feature updates for WordPress Core, we set the following two variables to have auto updates.

htdocs/wp-config.php:
define('FS_METHOD', 'direct');
define( 'WP_AUTO_UPDATE_CORE', true );

Please do not interfere with auto updates in any way - they will either be enforced and/or your page will be potentially taken offline.

ETH IT Services installs and maintains the following plugins:

• WPMU Dev Dashboard
• WPMU Defender Pro
  Defender Pro allows us potentially detect and fend code changes, malware and other "hacking" activities on your webpage
• Shibboleth (where applicable)

please do not disable or interfere with these Plugins.

All Other Plugins (installed by customer) must be updated and maintained by the customer. We recommend enabling auto updates. ETH IT Services reserves the right to update outdated Plugins without further notice.

You can get an overview of outdated components in WPMU Defender Pro Dashboard.

ETH IT Services installs and maintains the default WordPress themes ("Twenty Twenty", "Twenty Twenty-One", "Twenty Twenty-Two")

All customer-specific themes must be updated by the customer.

ETH IT Services reserves the right to update outdated themes without further notice.