Core checksums

For the checksum comparison, WordPress/WM Guard sends the installed WordPress version and package locale to the official WordPress.org checksums API. Results are cached for twelve hours.

Plugin directory

To check for closed or long-unmaintained plugins, the respective plugin identifier is sent to the official Plugin Info API. Results are cached for 24 hours.

Neutral user agent

WM Guard uses a neutral WM Guard/<version> user agent for these requests. This avoids the standard WordPress user agent that can normally contain the site address.

For more information about data processing by WordPress.org, consult the WordPress.org privacy policy.