I would look at finding the IP address of the WordPress website.
For example, downloading bbpress manually gives me the link https://downloads.wordpress.org/plugin/bbpress.2.5.8.zip which when using ping in command prompt gives me the IP address of
66.155.40.188 (this matches the subdomain of downloads.wordpress.com)
I would whitelist the IPs found by @gmazzap as I found them too, however the download section as a different subdomain could and seems to be a different server.
I expect that when we update through the WP admin, that it essentially sends the link through to this same location.
Related Posts:
- What’s the difference between get_home_path() and ABSPATH?
- Modifying WordPress core files
- Why do some core functions get wp_ while others do not? What’s the rule?
- $GLOBALS array for WordPress
- What are custom_css and customize_changeset used for?
- What are some reasons why you should not hack WordPress core files?
- How To/What triggers a WordPress auto update?
- Rewriting a core function?
- What is the purpose of this line of code in wp_trim_excerpt? [closed]
- What CSS minifier does WP core use?
- What’s $GLOBALS[‘wp_settings’][‘media’][’embeds’]?
- Function to change a label (Username) in a core WordPress File (wp-includes/general-template.php)
- How do I set a custom WordPress update repository?
- WordPress classes explained
- No longer able to attach S3 bucket files to emails being sent by WordPress due to PHPMailer security update
- What problems maybe happen if I remove “wp-” prefix from wordpress folders and files?
- WP Core: Where are terms populated for the admin edit screen?
- What is the WP_Internal_Pointers core class?
- How to contribute to WordPress Core using Tortoise SVN?
- Create a patch using TortoiseSVN
- Loading WP core Thickbox through frontend
- Isn’t requiring a file before it’s loaded by WordPress itself a symptom of bad code? [closed]
- How to find out where the data.model is?
- Why WordPress Core Functions Not Using function_exists()?
- how does the rendering works?
- When is the wp-mail.php in the WP root requested?
- Is the information returned by get_bloginfo( ‘version’ ) always the same as the one in version.php?
- How to add a forward slash to the end of wordpress home?
- Using native wp image support instead of timthumb
- Should /wp-includes/js/* folder be blocked in robots.txt file for a WordPress website?
- IP Address Whitelist to Allow WordPress Core Auto Updates
- Can mediaelement-and-play core JS be dequeued?
- WordPress auto update for core but use local package
- WordPress 4.8 – Can’t find variable: wp
- What is responsible for triggering “robots-template.php” file or “wp_robots_noindex()” core function out of it?
- Add image or video tags to WP Sitemap
- Where can I find the definitive list of core blocks in html form
- When do we use wp_slash?
- Difference between core and processor
- Looking for WordPress System Diagrams
- Clarification on filters and hooks
- How to disable `SQL_CALC_FOUND_ROWS` [duplicate]
- Why are double-periods (“..”) invalid in a WordPress image filename?
- Does anyone have a visual breakdown of core hooks and when they are fired?
- How to set ipv6 address as siteurl?
- Why does my hand-written plugin installer fail to find `request_filesystem_credentials`?
- How to access my site using IP Address? [closed]
- Script dependencies for post.js
- Check if a user already voted [closed]
- Replacing the default content created while the site creation
- Gutenberg List Extension Block
- Display posts if specific country
- PHP notice coming from the WordPress core?
- Changing the comments link produced by the get_comments_link() and get_comments_pagenum_link() functions
- Store brute-force IP addresses
- Attachment Page Permalink/URL Rewrite Issue. How to change the actual rewriting?
- Restricting user login by IP address
- How can I hide the IP of registered commentators?
- Restricting access to a single MultiSite site based on IP — possible?
- WordPress Multisite domain mapping with different IPs
- Changing WordPress core without hacking core
- Least expensive way to get table prefix in multisite installation
- Spammers attacking my WordPress Site – Removing URL field from core? [closed]
- Dynamically update Site/WordPress Address
- How to override wp_insert_comment()
- Can I hook into wp_update_core outside of the admin?
- Is there a wp-config.php option or constant that I can set to allow me to download nightly / beta builds?
- Do I need to use jQuery for my template?
- Is it possible for a plugin to force reading and writing of uploaded images to a database instead of to a filesystem?
- Comment IP Plugin – Fixing onfocus=’this.select()’
- Change of IP Address
- How to get theme’s info from wordpress.org/themes using api.wordpress.org?
- Best way to salvage a very old WP site
- IP addresses to block to stop WP auto-update?
- Show a different link based on IP
- redirect to a child theme based on the town of Internet users in france with the verification of the ip address
- DNS – Change WordPress Site Name?
- Create a Page template selector page
- Usage of var keyword in the core
- Limit action in comment according to IP
- how to move another machine or server without dealing with IP
- Access web server in local LAN using domain name instead of IP
- REST api returns 404 on some WordPress sites
- Notice on core function
- wp_insert_post always returns 0 on one site, extensive testing done, can’t get to the bottom
- Updating wordpress from my Linux distro’s repository
- Internal Redirections?
- How to change current category to another in wordpress
- WP-CLI: detect altered core files and restore them automatically
- wp-cli core install unknown: fatal: file /etc/postfix/main.cf: parameter mail_owner: user postfix has same user ID as _postfix
- “Conditional query tags do not work before the query is run. Before > then, they always return false. “
- WordPress redirect users from certain countries to subpage of language version
- WordPress core update fails – no issues with plugin updates
- Upacking the package… stalls, but installs plugin
- Detecting IP Address of someone using ‘copy’ function [closed]
- Hook or function to check if performing a WP Core update?
- I changed the site address and wordpress address from localhost to my ip and it doesn’t work anymore
- How can I save the selected page in the dropdown after anyone clicks on Save Changes?
- How can I save the selected page in the dropdown after anyone clicks on Save Changes?
- Does wp_safe_redirect() no longer works?