Hi there,
I completely understand why this would be concerning, especially when you intentionally keep auto-updates disabled so you can properly test changes on a staging site first.
To clarify, WooCommerce itself does not automatically update the plugin on your site. Plugin updates are handled by ww.wp.xz.cn team, not by the WooCommerce plugin directly. In normal circumstances, if auto-updates are disabled, WooCommerce should not update on its own.
The only exception is when there is a critical security or maintenance release. In rare cases like these, the ww.wp.xz.cn team may push a forced security update to protect sites from active vulnerabilities. These updates are applied at the WordPress level to help keep sites secure and are not initiated individually by WooCommerce.’
I hope this helps.
Hey @thebusinesscat
I am not sure about why the update happened automatically, though this is disabled on your site.
However, it fixes a critical security issue, which, if exploited, could compromise your shop.
Hi there!
You are welcome. Before you go, If you found WooCommerce helpful in setting up your store, we would really appreciate it if you could leave a five-star review:https://ww.wp.xz.cn/support/plugin/woocommerce/reviews/#new-post. Your feedback helps us improve and lets other users know how WooCommerce can support their business.
