So you’re looking for a better way to manage WordPress websites? We have you covered! ManageWP is a dashboard that helps you save time and nerves by automating your workflow, so you could focus on things that matter. It is fast, secure and free for an unlimited number of websites.

Everything in One Place

Just the hassle of logging into each of your websites is enough to ruin your day. ManageWP compiles the data from all of your sites on one dashboard, so you can check up on your websites in a single glance. And if you need to take a better look at a particular website, you’re just a click away. Read more

Bulk actions

57 updates on 12 sites? Update them all with a single click. And it’s not just updates. Clean spam, database overhead, run security checks and more – with just one click you can do these things on all your websites at once. Read more

Cloud Backup that just works

A reliable backup is the backbone of any business. And we have a free monthly backup for all of your websites. It’s, incremental, reliable, and works where other backup solutions fail. The free Backup includes monthly scheduled backup, off-site storage, 1-click restore, US/EU storage choice and the option to exclude files and folders. The premium Backup gives you on-demand backups, weekly/daily/hourly backup cycles & more.

Safe updates

Updating plugins & themes is a huge pain, so we came with this: a backup is automatically created before each update. After the update, the system checks the website and rolls back automatically if something’s wrong. And the best part is that you can set these updates to run at 3am, when the website traffic as its lowest.
Read more.

Client Report

Summarize your hard work in a professional looking report and send it to your clients to showcase your work. The free Client Report includes basic customization and on-demand reports. The premium Client Report lets you white label and automate your reports. Read more

Performance and Security Checks

Slow or infected websites are bad for business. Luckily, you can now keep tabs on your websites with regular performance & security checks. The free Security Check & Performance Check come with fully functional checks and logging. Premium versions let you fully automate the checks, and get an SMS or an email if something’s wrong.

Google Analytics integration

Connect multiple Google Analytics accounts, and keep track of all the important metrics from one place. Read more

Uptime Monitor (premium add-on)

Be the first to know when your website is down with both email and SMS notifications, and get your website back online before anyone else notices. Read more

Cloning & Migration (bundled with premium Backup add-on)

What used to take you hours of work and nerves of steel is now a one-click operation. Pick a source website, pick a destination website, click Go. Within minutes, your website will be alive and kicking on a new server. Yeah, it’s that easy. Read more

SEO Ranking (premium add-on)

Be on top of your website rankings and figure out which keywords work best for you, as well as keeping on eye on your competitors. This way you will know how well you stack up against them. Read more

White Label (premium add-on)

Rename or completely hide the ManageWP Worker plugin. Clients don’t need to know what you are using to manage their websites. Read more

Is This All?

No way! We’ve got a bunch of other awesome features, both free and premium, you can check out on our ManageWP features page

Check out the ManageWP promo video.

License

This file is part of ManageWP Worker.

ManageWP Worker is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

ManageWP Worker is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with ManageWP Worker. If not, see https://www.gnu.org/licenses/.

🏢 Your Headquarters for Multi-site Management

What do you get when you use Solid Central to manage and maintain all your WordPress websites from one dashboard? Real-time visibility. Improved time management. Increased productivity. Enhanced performance for the websites you manage. And, you raise the bar on what you can deliver for your clients.

📊 One Central Dashboard to Save You Loads of Time

No more logging into each individual website to view important website data or perform remote WordPress admin actions. Solid Central lets you manage multiple WordPress websites from one dashboard while also allowing you to easily switch to individual view to perform site-specific admin functions when necessary.

What can you do quickly and easily with Solid Central?

• Stay on Top of WordPress Updates – WordPress updates are important for the security and efficiency of WordPress websites. Solid Central completely changes the way you update your WordPress sites—update dozens of sites with one click.
• Bulk Install Themes and Plugins From WordPress.org or Zip Upload – Search and install from WordPress.org and view your WordPress.org profile favorites. Upload theme or plugin zip files or install themes and plugins directly from your Solid Central membership.
• WordPress Uptime Monitoring – Monitor WordPress uptime, downtime & overall performance for all your WordPress websites. Get notification emails when sites go down and view a history of your overall WordPress performance. View uptime stats such as total uptime percentage, total downtime, and number of downtimes for WordPress performance monitoring.
• WordPress Post & Page Manager – View a list of current posts and pages on your site, including the title, author, date last modified, focus keyword, SEO score and SEO readability.
• Remotely Login to WordPress & Switch Between User Accounts – Quickly jump to the WordPress Admin dashboard of your WordPress site where you’ll be instantly logged in from Solid Central. You can also switch between any WordPress user account registered on the site without sharing password info.
• WordPress Comment Manager – View all comments (all, approved, pending, spam, trash) and unapprove, mark as spam, or move comments to trash.
• WordPress Database Optimizations – Make sure your WordPress sites are running efficiently with WordPress optimizations. Central handles actions like cleaning out post revisions, spam comments and more.
• SEO Checker + Google Analytics & Google Search Console Reports – Track key SEO metrics with Central’s SEO Checker and Google Analytics & Google Search Console integration. Central integrates with the Yoast SEO plugin to give you an overview of the health of your SEO efforts.
• Remote WordPress Backups – Run remote backups and restore with Central’s integration with Solid Backups, our WordPress backup plugin.

🔐 Enhancing WordPress Site Security with Solid Central

Improve security for all your WordPress websites by integrating Solid Security with Solid Central.

• WordPress User Manager – WordPress user management in Solid Central allows you to view all users on a website, edit user profiles and delete users remotely. With Central’s Client Dashboard, you can customize how certain users see the WordPress dashboard.
• Two-factor Authentication – Add an extra layer of protection to your Central dashboard login with two-factor authentication. Once enabled, Central will require both a password AND an SMS code sent to your mobile device to log in to the Central Dashboard.
• Whitelist Your IP Address (Solid Security integration) – Temporarily whitelist your IP Address remotely so you don’t get locked out of your website by the Solid Security plugin’s Bad Users feature.
• Release Solid Security Lockouts (Solid Security integration) – View and release any current Solid Security lockouts.

💻 Features Designed for Freelancers and Agencies

Central Pro was made for anyone managing multiple WordPress sites. If you’re building sites for clients, you’ll love how Central makes caring for client sites easier and more profitable.

• WordPress Maintenance Reports – Central Pro includes in-depth WordPress maintenance reporting to show the work involved in maintaining WordPress websites. Email clients beautiful HTML email reports with a summary of update actions you took to keep their site running smoothly.
• Customize the WordPress dashboard for clients/users – With Central Pro, you get Client Dashboard, a WordPress role manager that controls which menu items your clients see in their WordPress dashboard. Don’t want them to have access to plugins, themes or settings? Simplify their dashboard so they only see what they need — like posts and pages.
• Show/Hide Central From the WP Dashboard – To keep your clients or other site users from messing with your Central authentication or removing the plugin, you can choose to hide or show the plugin in the WordPress dashboard of each site you manage with Central.
• Share Your Central Dashboard with Another User – If you have other people on your team that you’d like to task with helping you maintain sites, this feature is a great way to help you easily delegate your workload to other team members.
• Site Notes and Tags – Central’s Notes feature is a handy way to keep notations about your Centraled sites. For example, if you added customizations to theme or plugin files that could be lost with an update, add a reminder. Tag business sites, personal sites, client sites, live, non-live or however you want to be able identify your sites.

📈 WordPress Maintenance Reports for Clients

Make steady, reliable income for WordPress maintenance with Solid Central Pro’s WordPress Maintenance Reports.

• Show Clients the Value of What You Do – Detailed website reports are one of the best ways to show clients the value of a monthly WordPress maintenance plan. Central Pro’s WordPress Maintenance Reports handle the hard work of compiling all the update actions you took, so you can justify the value of what you do.
• White-label Report Emails – Upload your own logo and set custom colors for the header, footer and button color of report emails to better match your company’s branding.
• Summarize Update Actions to WordPress Core, Themes & Plugins + More Website Stats – Reports include all update actions taken within a certain timeframe, both from the Central dashboard and the WordPress dashboard. See a full list of all of the stats included in Central’s WordPress reports.
• Schedule Reports to Automatically Run & Deliver Report Emails – Reports can run on a daily, weekly or monthly basis, and then automatically email reports to clients.
• Email Beautiful, Interactive HTML Reports to Clients – Reports are delivered as beautiful, interactive HTML reports so clients can get a visual summary of the WordPress maintenance you provide. Central handles compiling and organizing update actions and key website stats. See a WordPress maintenance report demo.
• SEO Reporting – Summarize key SEO Stats stats in an easy-to-digest format — showing how your client’s sites are doing in Google and where they can improve. See a WordPress SEO report demo.

☑️ WordPress Updates

• Daily Notification Emails – Get a daily summary of available WordPress updates as a helpful reminder to log in and run updates. Customize the delivery time of your daily notification emails to fit your schedule.
• One-Click Update All – View a summary of all available updates for all your websites and then update them all with one click.
• View Plugin Changelogs – View update logs that include all updates made in Central, including the date of the update, previous version number and new version number.
• View Updates by Site – The in-depth individual site view gives you a detailed view of the available updates for that site, with more WordPress site management action options.
• Sort Updates By Theme or Plugin – View a listing of individual themes and plugins you have installed on your websites along with available update information.
• Ignore Update Option – If you’ve made customizations to your themes and plugins, an update could overwrite your work. Choose to ignore updates for specific themes and plugins.

🔗 Integrations

• WordPress.org – Search and install themes and plugins from WordPress.org remotely from Central. View your WordPress.org profile favorites to save time.
• Solid Backups – Run remote WordPress backups, download your latest backup file, view number of edits since your last Solid Backups backup.
• Solid Backups Stash – View, download and delete your Solid Backups Stash backups, and view a graph of the total amount of Stash space you’ve used.
• Solid Security – Temporarily Whitelist your IP Address remotely so you don’t get locked out of the website. View and release any Solid Security lockouts.
• Google Analytics – Track Google Analytics for multiple WordPress sites. View key metrics from Google Analytics such as traffic, landing pages, keywords, sessions and referrer URLS.
• Google Search Console – Get a quick summary of Google Search Console data, view search analytics, crawl errors and sitemaps info.
• Yoast SEO – Central’s SEO Checker feature integrates with the Yoast SEO Plugin so you can quickly see the SEO status of the content on your WordPress website.
• Gravity Forms – From Central, you can view all the forms you’ve created in Gravity Forms for that site. You can also quickly see how many responses and views each form has received.
• WP101 Plugin – Easily add a complete series of WordPress onboarding tutorial videos to the WordPress dashboard of your client sites with Central’s WP101 plugin integration.

License

This file is part of Solid Central. This plugin is released under the terms of the GNU General Public License.

DISCLAIMER: Under no circumstances do we release this plugin with any warranty, implied or otherwise. We cannot be held responsible for any damage that might arise from the use of this plugin.

If ever you wanted a single panel to manage tons of your WordPress websites from and save the hassle to login all your website’s dashboards separately, you have it here at last. Softaculous provides a single panel where you can add infinite number of WordPress websites for free.

Key Features:

• Entire data of all your websites can be synced in the Softaculous panel so that you may skim through the same without logging in separately. Even if you want to go into detail for any website, you can simply click and you will be logged into the website using the Single Sign On feature.

• Should you want to activate/deactivate a plugin/theme on n number of websites, you can achieve this from the Softaculous panel using Softaculous plugin. Also, you can install and update the plugins/themes on all the websites in one go.

• You can also create Sets of common Plugins and Themes which you want to install on multiple websites together.

• If you are worried about losing your data anytime in the future, we, hereby, resolve all your stress by providing you with the backup feature of your websites. In an unfortunate event, when you loose your website or your website gets corrupted, you can even restore the backup taken previously.

• A new WordPress update is out and you are all stressed up to update your websites? No worries, Softaculous helps you achieve the same without the need to go into the dashboard of each website separately.

• [Coming Soon] Website Monitoring, Cloning, Staging, Push to Live and much more.. Please stay tuned!

Should you have any suggestions to improve Softaculous, want to see some related features in Softaculous to help you in the websites management or if you have any queries, you can open a ticket with us at https://softaculous.deskuss.com/open.php

Modular DS is an all-in-one platform that makes managing multiple WordPress websites easy and efficient, helping you save time, demonstrate the value of your work, and grow a profitable maintenance business.

From a single, intuitive dashboard, you can automate the most important maintenance tasks:

• Manage and update plugins, themes, and WordPress core across multiple sites at once.
• Monitor uptime and performance with real-time alerts.
• Schedule automatic cloud backups and restore them from Modular DS.
• Know how likely a plugin update is to break your site before applying it with Update Copilot, our AI-powered update scoring system.
• Run safe updates to compare changes after updating and quickly roll back if anything goes wrong.
• Perform security scans and get notified of vulnerabilities up to 48 hours before they’re publicly disclosed.
• Optimize your WordPress databases right from Modular DS.
• Create and send automated maintenance reports for clients, including work completed and key metrics from Google Analytics, Search Console, PageSpeed, and WooCommerce.
• Display a custom maintenance mode page to hide unfinished changes while you update or work on a site.

Modular DS is built with usability at its core and supported by a team with over a decade of hands-on experience in WordPress site management, always ready to help when you need it.

Explore more features on our website or get started for free.

Manage and monitor all your WordPress sites in one place

Connect your WordPress sites to Modular DS, access them with one-click login, and manage centralized updates, backups, security scans, uptime monitoring, and more in a single dashboard.

Stay organized with tags and teams, and assign custom roles and permissions to collaborators.

Bulk updates and management

Update, install, activate, or delete plugins, themes, and WordPress versions across multiple websites at once (or one by one).

Backups and restores

Schedule regular, GDPR-compliant backups to safeguard your clients’ sites and data, or create one manually whenever you need.

Choose between full or incremental backups and easily restore entire sites, files, or databases from Modular DS.

Uptime monitoring

Never get caught off guard by downtime. Get notified by email, WhatsApp, Slack, or Discord when any of your websites go down, before your clients even notice.

Customize check frequency, response time, keyword detection, and alert settings to fit your workflow. Modular DS includes one of the most complete uptime monitor tools for WordPress.

Safer, smarter plugin updates

Update Copilot, our AI-powered scoring system, helps you understand how risky a plugin update might be before applying it. It analyzes multiple factors, such as code changes and the historical reliability of the plugin and the latest version based on other users, so you don’t have to make update decisions blindly.

Pair it with safe updates to create restore points, compare “before and after” changes, and instantly roll back if anything goes wrong.

Health, performance, and security scans

Catch vulnerabilities in plugins, themes, and WordPress core up to 48 hours before they’re publicly disclosed, thanks to our integration with Patchstack.

Stay on top of your sites’ health, performance, and security with alerts whenever other issues or errors require your attention, like outdated PHP or an expired SSL certificate.

Database optimization

Clean up post revisions, spam comments, transients, orphaned tables, and more directly from Modular DS. No need for extra plugins.

Keep your websites running smoothly while saving time and having a clear record of every optimization made.

Client reports

Automatically generate and send professional maintenance reports that highlight the work you do behind each site, so clients understand the value of your service and keep paying for it.

Add time logs, dates, and screenshots to showcase the full scope and impact of your efforts.

Reports help you build trust, improve client retention, and turn your WordPress maintenance offering into recurring revenue.

Integrations

Modular DS integrates with Google Analytics, Search Console, WooCommerce, and PageSpeed, giving you an overview of your websites in one place and allowing you to include the data your clients care most about in your reports.

To further strengthen your sites’ security, our Patch & Protect add-on, powered by Patchstack, lets you block vulnerabilities with virtual patching and hardening rules as soon as they’re detected, even before an official update is available.

Support that understands you

Modular DS is the first site management platform with support in both English and Spanish. Whether you have a question or run into an issue, our team has over 10 years of WordPress experience and is here to help you.

Watchful is a web developers toolbox for remotely managing and monitoring multiple WordPress websites. Simply add all your production and staging sites into the Watchful Dashboard and use our tools to monitor uptime, backups, updates to WordPress and core and plugins, and more. You’ll be amazed at how much time and money you save managing your WordPress sites with Watchful.

Top Features at-a-glance

• Backup scheduler and monitor
• Powerful plugin updates, including auto updates
• Uptime monitor & SSL certificate checker
• Best practice, malware, and filesystem scanners
• Early warning system for intruder detection
• SEO audit tool
• Plugin tracker to monitor when plugins have been added and removed
• Google Analytics integration
• Website reporting for your clients
• Customizable dashboard

Our Free Trial will let you test up to 5 sites at once to see how much. You won’t believe how much time you’ll save!

Customizable Dashboard

With your entire portfolio of websites in a single dashboard, you can easily review and prioritize website maintenance tasks. Sort by core version, number of pending updates, backup date, tags and more to optimize Watchful to your workflow.

Powerful Update Technology

The easiest way to protect your websites is to keep WordPress and all of its plugins up-to-date. With Watchful, you can apply updates across your entire portfolio in just one click. Supported updates include WordPress, all of the plugins in the WordPress repo, as well as a growing list of the most popular paid plugins. You can even manage your commercial license keys and remotely register new domains with commercial WordPress software vendors.

Best Practice Scanner

The Site Audit is a best practice scanner that checks your site for security best-practices, hacked or modified core files, and malware. If any problems are detected, advice and/or simple tools are provided to help fix any issues.

SEO Audit

Be sure that the technical aspects of your website are properly configured with the SEO Audit. The audit detects problems such as broken links, missing sitemaps, and content relevance — and recommends fixes — to ensure that your site is performing at it’s very best when indexed by search engines.

Plugin & Extension Tracker

The Plugin & Extension Tracker allows you to easily browse all of the WordPress plugins added to your website and logs any changes for unexpected modifications. By correlating the dates of plugin installation/upgrade to any bugs that arise on your sites, this logging feature greatly improves the troubleshooting process. The tracker also integrates with our system-wide search tools. This makes it fast and easy to locate all of your sites with specific plugins — and even a specific version of a plugin — so that maintenance tasks such as addressing zero-day security issues can be applied quickly and efficiently to only the sites that need them.

Uptime Monitoring

The Uptime Monitor checks your sites every minute of every day to make sure it is online. If your site cannot be reached, a notification is sent and the problem recorded. The monitor displays the last 10 uptime/downtime events and calculates the percentage uptime for the last day, 7 days, 30 days, and throughout the lifetime of your site. This information can be included in your white-label reports (see below).

Google Analytics integration

The Google Analytics integration allows you to instantly get an overview of your website traffic, visitors, most viewed pages, top referral sources, and most commonly searched for keywords. This information can be included in your white-label reports (see below).

White-label Reports

Our white-label reporting tool makes it easy to generate reports for your clients. Reports can be generated on a per-site basis, or based on tags, giving you a lot of flexibility in the report contents. Each report contains data on website uptime, Google Analytics, and logs for the indicated time period showing software updates and other site activity. These great looking reports can be sent to your client(s) to showcase the value of your services.

There’s More!

Watchful has lots more features and tools and is adding more functionality regularly. Check out our website and try the free demo.

License

This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA

The iControlWP WordPress Security Manager is the only solution you need to manage all your WordPress websites.

You need more time and everyday WordPress management eats away at any spare time you create. iControlWP will give you back the time you need to focus on your business.

Our Mission: Give you more free time to focus on your core business

With iControlWP you need fewer WordPress plugins as many tasks you need to perform fall under its umbrella of features. For example:

• No extra plugins to backups / restores
• No extra plugins for uptime monitoring
• No extra plugins to optimize your databases
• No extra plugins to clean up old drafts, comments and post revisions
• No extra plugins to manage WordPress automatic updates

With iControlWP you can:

• Manage ALL WordPress websites from a single, centralized control panel.
• One-click update WordPress Plugin (premium ones too!), Themes, and the WordPress Core.
• Bulk update all plugins, themes and WordPress cores.
• Very finely tune WordPress Automatic Updates for every plugin on every site.
• Manage CloudFlare settings using our unique CloudFlare integration.
• Insert Google Analytics Tracking code.
• Clean up WordPress
  and Optimize WordPress databases
• Manage WordPress Security setting across all your sites.
• Install new WordPress websites automatically, anywhere you have cPanel web hosting
• Automatically log into your WordPress sites without remembering your WordPress login details.
• Collect useful visitor site statistics and view them directly from within your control panel.

Maaq – Manage your WordPress websites

An easy way to manage, monitor & maintain your WordPress websites! This plugin is needed to get the Maaq app working ⚡️🚀.

Bridge

This plugin acts as a bridge to communicate with the Maaq IOS & Android apps. It will connect to the Maaq servers to handle things like events.

You can check out our terms of use & privacy policy here.

This plugin integrates with the WPVulnerability API to provide real-time vulnerability assessments for your WordPress core, plugins, themes, PHP version, Apache HTTPD, nginx, MariaDB, MySQL, ImageMagick, curl, memcached, Redis, and SQLite.

It delivers detailed reports directly within your WordPress dashboard, helping you stay aware of potential security risks. Configure the plugin to send periodic notifications about your site’s security status, ensuring you remain informed without being overwhelmed. Designed for ease of use, it supports proactive security measures without storing or retrieving any personal data from your site.

Data reliability

The information provided by the information database comes from different sources that have been reviewed by third parties. There is no liability of any kind for the information. Act at your own risk.

Using the plugin

WP-CLI

You can use the following WP-CLI commands to manage and check vulnerabilities:

• Core: wp wpvulnerability core
• Plugins: wp wpvulnerability plugins
• Themes: wp wpvulnerability themes
• PHP: wp wpvulnerability php
• Apache HTTPD: wp wpvulnerability apache
• nginx: wp wpvulnerability nginx
• MariaDB: wp wpvulnerability mariadb
• MySQL: wp wpvulnerability mysql
• ImageMagick: wp wpvulnerability imagemagick
• curl: wp wpvulnerability curl
• memcached: wp wpvulnerability memcached
• Redis: wp wpvulnerability redis
• SQLite: wp wpvulnerability sqlite

To configure the plugin you can use:

• Hide component: wp wpvulnerability config hide <component> [on|off]
• Notification email: wp wpvulnerability config email <emails> (comma separatted)
• Notification period: wp wpvulnerability config period <never|daily|weekly>
• Log retention: wp wpvulnerability config log-retention <0|1|7|14|28> (in days)
• Cache duration: wp wpvulnerability config cache <1|6|12|24> (in hours)

All commands support the --format option to specify the output format:

• --format=table: Displays the results in a table format (default).
• --format=json: Displays the results in JSON format.

Need help?

• wp wpvulnerability --help: Displays help information for WPVulnerability commands.
• wp wpvulnerability [command] --help: Displays help information for a WPVulnerability command.

REST API

The WPVulnerability plugin provides several REST API endpoints to fetch vulnerability information for different components of your WordPress site.

• Core: /wpvulnerability/v1/core
• Plugins: /wpvulnerability/v1/plugins
• Themes: /wpvulnerability/v1/themes
• PHP: /wpvulnerability/v1/php
• Apache HTTPD: /wpvulnerability/v1/apache
• nginx: /wpvulnerability/v1/nginx
• MariaDB: /wpvulnerability/v1/mariadb
• MySQL: /wpvulnerability/v1/mysql
• ImageMagick: /wpvulnerability/v1/imagemagick
• curl: /wpvulnerability/v1/curl
• memcached: /wpvulnerability/v1/memcached
• Redis: /wpvulnerability/v1/redis
• SQLite: /wpvulnerability/v1/sqlite

The WPVulnerability REST API uses Application Passwords for authentication. You need to include a valid Application Password in the Authorization header of your requests.

Example Request with Authentication

curl -X GET https://example.com/wp-json/wpvulnerability/v1/plugins -u username:application_password

Replace username with your WordPress username and application_password with your Application Password.

Extra Configurations

“From:” mail (since: 3.2.2)

If, for some reason, you need the emails sent by the plugin to have a From different from the site administrator, you can change it from the wp-config.php by adding a constant:

define( 'WPVULNERABILITY_MAIL', '[email protected]' );

If the constant is active, it will be visible in the configuration screen.

Force hiding checks (since: 4.1.0)

If you want to always hide a specific component, you can define a constant in wp-config.php. When set to true, the option will be checked automatically in the settings screen and the related analysis will be skipped.

Example:

define( 'WPVULNERABILITY_HIDE_APACHE', true );

Available constants: WPVULNERABILITY_HIDE_CORE, WPVULNERABILITY_HIDE_PLUGINS, WPVULNERABILITY_HIDE_THEMES, WPVULNERABILITY_HIDE_PHP, WPVULNERABILITY_HIDE_APACHE, WPVULNERABILITY_HIDE_NGINX, WPVULNERABILITY_HIDE_MARIADB, WPVULNERABILITY_HIDE_MYSQL, WPVULNERABILITY_HIDE_IMAGEMAGICK, WPVULNERABILITY_HIDE_CURL, WPVULNERABILITY_HIDE_MEMCACHED, WPVULNERABILITY_HIDE_REDIS, WPVULNERABILITY_HIDE_SQLITE.

Cache duration (since: 4.1.0)

By default, data from the API is cached for 12 hours. To change this, define WPVULNERABILITY_CACHE_HOURS in wp-config.php with one of 1, 6, 12 or 24. This value overrides the setting screen and WP-CLI command.

define( 'WPVULNERABILITY_CACHE_HOURS', 24 );

Log rotation (since: 4.2.0)

WPVulnerability stores the most recent API responses so you can review recent calls from the new log tab. Define WPVULNERABILITY_LOG_RETENTION_DAYS in wp-config.php to control how many days of entries are preserved. Supported values are 0, 1, 7, 14 or 28; using 0 disables logging entirely.

define( 'WPVULNERABILITY_LOG_RETENTION_DAYS', 14 );

When the constant is present its value is enforced in the settings UI and through WP-CLI, ensuring consistent log rotation across environments.

Security configuration (since: 4.3.0)

WPVulnerability uses a hybrid detection approach for server software (ImageMagick, Redis, Memcached, SQLite): PHP extensions first (most secure), then shell commands as fallback (most accurate). You can control this behavior using security configuration constants in wp-config.php.

Global disable of shell commands:

define( 'WPVULNERABILITY_DISABLE_SHELL_EXEC', true );

Completely disables shell command usage. Falls back to PHP extensions only. Use for maximum security when accuracy loss is acceptable.

Security mode (standard/strict/disabled):

define( 'WPVULNERABILITY_SECURITY_MODE', 'strict' );

• standard – Hybrid detection: PHP extensions first, shell commands fallback (default, best accuracy)
• strict – PHP extensions only, no shell commands (high security, lower accuracy)
• disabled – No software detection at all (maximum security)

Component whitelist:

define( 'WPVULNERABILITY_SHELL_EXEC_WHITELIST', 'imagemagick,redis' );

Allows shell commands only for specified components. Available components: imagemagick, redis, memcached, sqlite. Use for granular control.

Examples:

Maximum security (no shell commands):

define( 'WPVULNERABILITY_SECURITY_MODE', 'strict' );

Only allow ImageMagick shell detection:

define( 'WPVULNERABILITY_SHELL_EXEC_WHITELIST', 'imagemagick' );

Complete disable:

define( 'WPVULNERABILITY_DISABLE_SHELL_EXEC', true );

All shell commands are hardcoded and validated – no user input is involved. Commands are logged for security auditing.

Compatibility

• WordPress: 4.7 – 6.9
• PHP: 5.6 – 8.5
• WP-CLI: 2.3.0 – 2.11.0

Security

This plugin adheres to the following security measures and review protocols for each version:

• WordPress Plugin Handbook
• WordPress Plugin Security
• WordPress APIs Security
• WordPress Coding Standards
• Plugin Check (PCP)

Privacy

• This plugin or the WordPress Vulnerability Database API does not collect any information about your site, your identity, the plugins, themes or content the site has.

Vulnerabilities

• A security vulnerability was found and fixed in version 4.2.2.1. All previous versions (3.3.0 – 4.2.1) are affected. Please update to version 4.2.2.1 or later.

Found a security vulnerability? Please report it to us privately at the WPVulnerability GitHub repository.

Contributors

You can contribute to this plugin at the WPVulnerability GitHub repository.

UpdraftCentral is a powerful remote control dashboard for WordPress that allows you to manage your WordPress sites from one central location.

You can centrally manage backups, updates and more, accessing each site quickly and efficiently.

This plugin is the central dashboard plugin for installing on the site you want your dashboard (the “mothership”). On the sites you want to control, you instead install UpdraftPlus.

Don’t want to self-host a dashboard? A premium cloud version of UpdraftCentral hosted and maintained by us is also available with many more features – with control of 5 sites available for free.

UpdraftCentral is the latest release from the makers of UpdraftPlus, WordPress’ #1 most installed and trusted backup plugin (active on over a million WordPress sites). As a relatively young plugin we’re keen to get your feedback. If you discover a problem, please let us know (rather than slamming us with a bad review!). You can find support or make suggestions here.

Quick links: how to install | how to add a site | FAQs

Features of this self-install version

Built with state-of-the-art technology, UpdraftCentral is full of features that increase your efficiency and productivity.

With UpdraftCentral, you can…

• Quickly manage all your UpdraftPlus backups from a single place (backup, see/edit settings, see/download/delete backups, initiate restore)
• Log in to the WP dashboard of any connected site with a single click.
• Update the WordPress core, plus plugins and themes of any connected site.
• Clearly view updates from all sites and carry them out according to sophisticated filters from a single screen.
• Clean your database on any site by remotely controlling our WP-Optimize plugin, the #1 most-installed WP database optimization plugin
• Control policies for updates via control of Easy Updates Manager
• Manage UpdraftVault storage
• Easily inspect current system information in order to manage site configurations and settings, and troubleshoot problems.
• See below for extra features in UpdraftCentral Premium

UpdraftCentral Advantages:

• No annoying page refreshes and no WP dashboard to get in your way (this is a single-page/dynamic JavaScript application which runs in the front end and on full-screen mode).
• Fast and efficient: all communications are sent directly from the browser where possible, rather than through a back-end server).
• Secure: all communications between sites are RSA encrypted and signed, and every connection has a unique key-pair. Can be run by localhost, so you can have the dashboard website (i.e. the one that controls all the others) off the public Internet.
• Mobile-ready and responsive
• Extensible and developer friendly: it uses WordPress hooks widely, and all of its JavaScript is documented with JSDoc.

Features of UpdraftPlus Premium Cloud:

UpdraftCentral Premium Cloud is a hosted, cloud version of UpdraftCentral which we maintain so that you don’t have to.

It has many more features:

• Run Google Analytics to get an instant overview of important KPIs from all sites
• Easily manage comments on all your sites from one place
• Manage users, giving different levels of access
• Create tags to organize websites into different categories
• Fully supported via a fast, professional ticketed support service and active forum.
• Manage (activate, deactivate or delete) plugins from one or multiple websites all in one place
• Install one or more plugins straight from wordpress.org and automatically activate them
• Manage themes, choose and set your default theme easily and automatically
• Search, choose and click to install themes to one or multiple websites

1 Plugin. 9 Widgets. Awesome Dashboard.

Add new widgets to your WordPress Dashboard. Streamline your workflow and optimize productivity.

Widgets

Dashboard Widgets Suite provides awesome widgets that you can add to your Dashboard with a click:

• Control Panel – Control widgets directly from the Dashboard
• User Notes – Add, edit, delete notes for any user role
• Feed Box – Display and customize any RSS Feed
• Social Box – Display social links from Twitter, Facebook, etc.
• List Box – Display custom lists created via the Menu screen
• Widget Box – Display any theme or WP widget (e.g., Search, Text)
• System Info – Display basic or advanced system information
• Debug Log – Display, customize, reset your WP debug log
• PHP Error Log – Display, customize, reset your server error log

Each widget includes its own set of options for customizing display 🙂

The notes widget is super awesome, designed for serious note takers. You can choose from 3 note formats: Text, HTML, or Code. Check out Installation for more about the User Notes Widget.

Suggest a widget!

Features

Dashboard Widgets Suite provides a slick set of useful Dashboard widgets with some great features:

• Includes 9 awesome Dashboard widgets
• Easy to set up and customize options
• Regularly updated and “future proof”
• Secure, clean, error-free code
• Built with the WordPress API
• Lightweight, fast and flexible
• Focused on performance, loads only enabled widgets
• Enable/disable widgets via Dashboard or plugin settings
• Option to restore 1-column display for the Dashboard
• Shortcodes to display widgets on the frontend
• Many options for customizing widget display
• Works perfectly with or without Gutenberg

Check out the Screenshots for more details!

Suggest a feature!

Privacy

This plugin does not collect or store any user data. It does not set any cookies, and it does not connect to any third-party locations. Thus, this plugin does not affect user privacy in any way.

Dashboard Widgets Suite is developed and maintained by Jeff Starr, 15-year WordPress developer and book author.

Support development

I develop and maintain this free plugin with love for the WordPress community. To show support, you can make a donation or purchase one of my books:

• The Tao of WordPress
• Digging into WordPress
• .htaccess made easy
• WordPress Themes In Depth
• Wizard’s SQL Recipes for WordPress

And/or purchase one of my premium WordPress plugins:

• BBQ Pro – Blazing fast WordPress firewall
• Blackhole Pro – Automatically block bad bots
• Banhammer Pro – Monitor traffic and ban the bad guys
• GA Google Analytics Pro – Connect WordPress to Google Analytics
• Head Meta Pro – Ultimate Meta Tags for WordPress
• Simple Ajax Chat Pro – Unlimited chat rooms
• USP Pro – Unlimited front-end forms

Links, tweets and likes also appreciated. Thank you! 🙂

Tired of having the top of your screen full of notifications coming from all the plugins you’ve installed?

Here is what you will be able to:
* Display or not the notifications depending on users roles.
* Group all your notifications in a notification center located at the right of your page.
* Use the bouton on the top bar to display / hide this notification center.
* Be informed when a new notification is present (thanks to a badge displayed on your admin bar)
* Select the notification types (information/warning/error) you want to be displayed in the notification center. And the ones you would like to be displayed at the top of your screen
* Don’t display notification containing spam words set by the user

Automattic for Agencies is a new agency program that combines the best of Woo, WordPress.com, Jetpack, and Pressable under one roof. Learn more about Automattic for Agencies.

This lightweight plugin securely connects your clients’ sites to the Automattic for Agencies Sites Dashboard, enabling you to manage them from one place and to be notified immediately if any site is experiencing security or performance issues.

This plugin will also enhance the overall Automattic for Agencies portal experience:

• With plugin updates across the sites you manage in just a few clicks.
• Downtime monitoring so you’ll instantly know if a client’s site needs attention.
• And more to come.

Like other Automattic products, this plugin connects to WordPress.com’s servers to provide the best end-user experience. We only sync what’s absolutely necessary to provide our program experience. When connecting your site to the Automattic for Agencies Sites Dashboard, you agree to our Terms of Service.

Allows user to sync Posts, Pages and Custom Post Type with multiple websites.

If you run multiple websites and want to synchronise them automatically and securely for specific post operations, then Sync Post With Other Site is the plugin to use.

You just need to enter website URL & login credentials of other website to sync the post from there.

OVERVIEW

This plugin adds the following major features to WordPress:

• admin page: a “Sync Post” menu to manage remote sites.

• Import and Export: Connected sites’ present posts base can be synchronised manually thanks to the provided import/export tool.

Developers

Development takes place on GitHub. Patches welcome.

If you manage multiple WordPress sites, you may find you get lots of calls about site health as this has been put right in front of your site owners eyes.
This is a good thing if it is your own site but no so good if you are getting calls from non technical clients.

So this plugin removes it. Simple and as lightweight as any code snippet can be.

Additionally if you want to hide the Site Health from the tools menu, you can set

RSHFD_REMOVE_SITE_HEALTH_FROM_TOOLS in wp-config.php to true

 define('RSHFD_REMOVE_SITE_HEALTH_FROM_TOOLS', true);

ONE-CLICK WEBSITE SECURITY WITH VIRUSDIE WORDPRESS PLUGIN

Welcome to the most anticipated website security plugin – Virusdie WordPress Plugin!

Managing website security like malware scanning and removal, website hardening, patch management, real-time website protection against online attacks, and blacklist monitoring – is an automatic pleasure and we can prove it!

• More than 3 million connected websites!
• 99.87% malware and vulnerabilities detection rate. The best detection rate in the industry. Virusdie detects as many threats as possible, including new kinds of threats
• No false positives. False positives rate — less than 0.0002%. You can always be sure that your antivirus won’t mislead you)
• Website cleanup in one click. The industry’s safest automatic cleanup procedures ensure that your site will remain stable after cleanup (automatic malware removal)
• Real-time website protection against attacks by Website Firewall (protection against bad bots, DoS, XSS, SQL injections, suspicious uploads and activities, etc.)
• Virtual and real patch management (website hardening). It makes a virtual patch automatically or updates your vulnerable plug-ins and other site components in seconds, minimizing the risk of future problems.
• Blacklist monitoring and blacklisting tool that help you save time for unblacklisting by an automated un-blacklist wizard.
• Smooth onboarding: only dashboard with all you need. Manage Virusdie tools in a click! Your website is in full view: entire web-security status on one page.
• Friendly and responsive Virusdie support team. We are welcome to help you and answer your questions.

To avoid interruptions to your business, you need to keep your site free of viruses. As they say, shit happens — but when it does, you have to clean it up, and fast. Today, Virusdie makes it possible to resolve 100% of the security issues most businesses face, either fully or partially automatically. We’ve taken powerful website security tools and made them friendly and automatic in WordPress plugin format. Now, you can scan, clean, and protect your site from a single panel with just one click of the mouse. What’s more, you won’t need any help to use Virusdie. This means that you’ll save tons of time while keeping your site’s security under your control!

Free plan feature list:

1. Antivirus:

1. No extreme server CPU load while scanning!
2. Instant malware database update. The antivirus database is automatically updated in the background, so you won’t even have to think about doing anything manually to be sure you can eliminate as many viruses and vulnerabilities as possible.
3. Scans once a month:
   • Scanning website files for malware: all website files (not just CMS’ files), themes, plugins, PHP, JS, HTML, images, files with no type, any binary files and system files, .htaccess, and files with custom types and archives.
   • Scanning website database. Scan posts and comments for bad URLs and suspicious content, scan posts and comments for malware and injections.
   • Scanning for malware types (threats): malware, malicious redirects, Trojans, backdoors, shell scripts, malicious codes, bad URLs and SEO spam, defaces, code injections, browser coin miners.
4. Detailed scan reports with malware and threats description and recommendations.
5. Add files to the exclusion list to ignore them in future scans.

Find out more about Virusdie Antivirus

2. WAF:

1. Don’t slow down your website while you’re using WAF!
2. Instant Firewall rules database update.
3. Bad requests, hacks attempts and attacks detection.

Find out more about Virusdie Firewall

3. Patch Management (website hardening)

1. Instant vulnerabilities database update.
2. Check site (files, themes, plugins and components) for known security vulnerabilities and alerts you if found.
3. Scan once a month.

Find out more about Virusdie Patch Manager

4. Blacklists Monitoring

1. Checking your website more than 60+ blacklists automatically.
2. One-click to un-blacklist.

Find out more about Virusdie Blacklist Monitoring

Premium plan feature list:

(In addition to the free plan’ feature list)

1. Antivirus:

1. Daily scans and Unlimited scans.
2. Automatic malware removal: The safest in the industry automatic malware removal – Your website continues to run stably after the automated cleanup.
3. Unlimited site cleanups.
4. File editor.
5. Malicious code highlighting in the file editor.
6. Pre-cleanup file backups.
7. Exclusion list to add files and ignore them in future scans.

Find out more about Virusdie Antivirus

1. Firewall:

1. Basic bad request protection.
2. XSS and SQL injection protection.
3. DoS-attacks protection.
4. Brute force protection by limiting login attempts.
5. Content scraping protection.
6. Malicious uploads prevention.
7. IP whitelisting/blacklisting.
8. URL blocking.
9. Country blocking.
10. History of blocked requests.
11. Make custom rules to block requests based by: IP Range, Hostname, User Agent and Referrer.
12. Make custom rules generic type for POST/GET requests.

Find out more about Virusdie Firewall

Patch Management:

1. Daily and Unlimited scans.
2. Automatic virtual vulnerability patching (website hardening).
3. Automatic real patch management.

Find out more about Virusdie Patch Manager

Coming soon:

• Teamwork: you will be able to share access to your site with your team. Simple and secure!
• Website sharing. You’ll be able to share your website access with your digital agency who manage your website security – with one click!
• Website insurance and security expert marketplace: for being confident that in the event of a complex website infection or damage to your site, getting help from third-party security experts to restore your site won’t cost you any more than the minimum cost in your insurance policy.
• Firewall statistics and attack attempts reports will be available on the free tier plan! Keep your finger on the website pulse even for free!

Join us on Facebook Community and find out more about Virusdie cloud security tools.