WordPress.org has announced a new account security measure that will require accounts with capabilities to update plugins and themes to activate two-factor authentication (2FA) mandatorily.
The enforcement is expected to come into effect starting October 1, 2024.
« Accounts with commit access can push updates and changes to plugins and themes used by millions of WordPress sites worldwide, » the