Plugin updates

The plugin checks Wigoh's update channel once every 12 hours, sending only its version number. When a new version exists, WordPress shows it under Plugins like any other update.

Before WordPress installs the update, the plugin checks the package's SHA-256 checksum against the published manifest and verifies its signature with the release public key shipped in the plugin. A package that fails either check is refused. Release packages applied to your site are verified the same way.

The Connected WordPress page shows each site's Plugin version so you can see which sites are behind.