# How to deal with abandoned and closed WordPress plugins

> A plugin without updates for two years, or one closed on wordpress.org, will not receive security fixes. Replace it before it becomes the way in.

WordPress & WooCommerce · HTML version: https://getreport.app/learn/wordpress-abandoned-plugins

## Plugins closed on wordpress.org

Passing looks like: No detected plugin has been closed on wordpress.org.

**Why it matters.** wordpress.org closes plugins for unfixed security issues or guideline violations. A closed plugin gets no updates and often has a known vulnerability.

**How to fix it.**

1. Replace the plugin now; the reason shown by wordpress.org tells you how urgent it is.
2. Until then, keep the site behind a firewall plugin and check the vulnerability databases for the plugin name.

## Abandoned plugins

Passing looks like: Every detected plugin has a recent update.

**Why it matters.** A plugin nobody maintains will not get security fixes and eventually breaks with a WordPress update. Two years without a release is the usual sign that it is abandoned.

**How to fix it.**

1. Look for a maintained alternative with the same feature and replace the plugin; test on staging first.
2. If it is essential and small, consider paying a developer to take it over.

Check your own page: https://getreport.app/