WordPress Toolkit

The WordPress Toolkit provides centralized management for all WordPress installations on the server. It enables installation, updates, security scans, automatic login and much more.

---

Overview

The WordPress Toolkit displays all detected WordPress installations as cards with thumbnail previews:

Information	Description
Domain	Website domain
Path	Installation path relative to the document root
WordPress Version	Installed WP version
PHP Version	PHP version in use
SSL	SSL status
Auto-Update	Automatic update status
Plugins	Count (with update notice)
Themes	Count (with update notice)

---

Install WordPress

1. Click Install WordPress
2. Fill out the form:

Field	Required	Description
Website	Yes	Select the target website
Path	No	Subdirectory (empty = root)
Title	Yes	Website title
Admin User	Yes	WordPress admin login
Admin Password	Yes	WordPress admin password
Admin Email	Yes	WordPress admin email
Language	Yes	Installation language (e.g. de_DE)
Database	Automatic	Created automatically

1. Click Install

Note

Each WordPress installation is counted as a full website.

The system automatically performs:

• Download of the latest WordPress version
• Creation of a MariaDB database
• Configuration of wp-config.php
• WordPress installation via WP-CLI
• Security adjustments (file permissions, security keys)

---

Auto-Login (SSO)

1. Click the Login button on a WordPress installation
2. You are automatically logged in as a WordPress admin
3. A temporary authentication token is generated via a WordPress plugin

How it works

Auto-Login uses an automatically installed Must-Use plugin (mu-plugin) and transients for secure token transfer. No password is transmitted via the URL.

---

Updates

Update WordPress Core

1. When an update is available, an update badge is displayed
2. Click Update WordPress
3. The update is performed via WP-CLI

Update Plugins

1. Click on a WordPress installation
2. Switch to the Plugins tab
3. Plugins with available updates are marked
4. Click Update individually or Update All

Update Themes

1. Switch to the Themes tab
2. Themes with available updates are marked
3. Click Update

Configure Auto-Updates

1. Click on the Auto-Update setting of an installation
2. Select the desired strategy:

Strategy	Description
Disabled	No automatic updates
Minor Updates	Security and maintenance updates only
All Updates	Install all updates automatically

Recommendation

Enable at least minor updates to promptly close security vulnerabilities.

---

Plugin Management

View Plugins

The plugin list shows per WordPress installation:

Column	Description
Name	Plugin name
Status	Active, Inactive or Must-Use
Version	Installed version
Update	Available update
Risk Info	Known security vulnerabilities and rating

Install Plugin

1. Click Install Plugin
2. Search for the desired plugin
3. Click Install and Activate

Activate / Deactivate Plugin

• Use the toggle in the status column

Delete Plugin

1. Deactivate the plugin
2. Click Delete
3. Confirm the deletion

---

Theme Management

Similar to plugin management, themes can be:

• Installed (from the WordPress repository)
• Activated
• Updated
• Deleted

---

Security Scan

The security scan checks a WordPress installation for known vulnerabilities:

1. Click Security Scan on an installation
2. The scan checks:
3. WordPress core version against known CVEs
4. Plugins against the WPScan vulnerability database
5. Themes against known vulnerabilities

6. Active installations and ratings

7. Results show:

8. CVSS Score — Severity of the vulnerability
9. Fixed in Version — Version containing the fix
10. Reference Links — Links to security advisories

Critical Vulnerabilities

Update plugins and themes with known vulnerabilities immediately. Deactivate affected plugins if no update is available.

---

Database Management

Through the WordPress Toolkit you have direct access to:

• phpMyAdmin SSO for the WordPress database
• Database prefix and table list
• Database size

---

WP-CLI

WP-CLI commands can be executed through the panel:

1. Select a WordPress installation
2. Navigate to the WP-CLI tab
3. Enter a WP-CLI command
4. The output is displayed in real time

Common Commands

Command	Description
wp plugin list	List all plugins
wp theme list	List all themes
wp user list	List all users
wp cache flush	Flush cache
wp search-replace 'old' 'new'	Search and replace in the database
wp db export	Create database dump
wp cron event list	Show scheduled tasks

---

Caching

WordPress caching options:

Option	Description
OPcache	PHP OPcache for faster PHP execution
Redis	Object cache via Redis (if available)
Page Cache	Recommendation for cache plugins

---

Clone WordPress

1. Click Clone on an installation
2. Select the target website
3. The system copies all files and the database
4. URLs are automatically updated via wp search-replace