{"id":23558,"date":"2013-05-25T12:11:03","date_gmt":"2013-05-25T12:11:03","guid":{"rendered":"https:\/\/wordpress.org\/plugins-wp\/wpcommand\/"},"modified":"2026-08-31T18:44:55","modified_gmt":"2026-08-31T18:44:55","slug":"wpcommand","status":"publish","type":"plugin","link":"https:\/\/mai.wordpress.org\/plugins\/wpcommand\/","author":12345487,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"2.3.8","stable_tag":"2.3.8","tested":"7.1","requires":"6.0","requires_php":"7.4","requires_plugins":null,"header_name":"WP Command and Control","header_author":"SoJu Studios","header_description":"","assets_banners_color":"274d34","last_updated":"2026-08-31 18:44:55","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"","header_author_uri":"http:\/\/supersoju.com\/","rating":0,"author_block_rating":0,"active_installs":10,"downloads":13487,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0":{"tag":"1.0","author":"supersoju","date":"2013-05-25 12:13:20","revision":718181},"1.04":{"tag":"1.04","author":"supersoju","date":"2013-05-28 18:24:10","revision":719494},"1.05":{"tag":"1.05","author":"supersoju","date":"2013-06-14 21:05:59","revision":726804},"1.06":{"tag":"1.06","author":"supersoju","date":"2023-05-13 13:18:07","revision":2911988},"1.07":{"tag":"1.07","author":"supersoju","date":"2013-08-20 13:45:40","revision":759270},"1.08":{"tag":"1.08","author":"supersoju","date":"2013-08-20 13:47:49","revision":759274},"1.09":{"tag":"1.09","author":"supersoju","date":"2013-08-26 12:04:53","revision":762400},"1.10":{"tag":"1.10","author":"supersoju","date":"2013-12-13 17:52:30","revision":821265},"1.11":{"tag":"1.11","author":"supersoju","date":"2013-12-13 17:53:13","revision":821267},"1.25":{"tag":"1.25","author":"supersoju","date":"2014-04-28 13:47:53","revision":904139},"1.26":{"tag":"1.26","author":"supersoju","date":"2014-05-08 17:49:48","revision":910646},"2.0":{"tag":"2.0","author":"supersoju","date":"2014-06-30 12:45:51","revision":940939},"2.01":{"tag":"2.01","author":"supersoju","date":"2014-09-10 13:46:51","revision":986461},"2.2.0":{"tag":"2.2.0","author":"supersoju","date":"2015-04-30 15:01:51","revision":1150239},"2.3":{"tag":"2.3","author":"supersoju","date":"2015-12-14 19:06:41","revision":1308343},"2.3.0":{"tag":"2.3.0","author":"supersoju","date":"2015-12-14 19:08:17","revision":1308346},"2.3.3":{"tag":"2.3.3","author":"supersoju","date":"2018-05-10 18:04:26","revision":1872273},"2.3.4.1":{"tag":"2.3.4.1","author":"supersoju","date":"2019-11-25 13:21:27","revision":2200561},"2.3.5":{"tag":"2.3.5","author":"supersoju","date":"2023-05-13 13:18:07","revision":2911988},"2.3.5.1":{"tag":"2.3.5.1","author":"supersoju","date":"2023-05-13 13:18:54","revision":2911989},"2.3.5.2":{"tag":"2.3.5.2","author":"supersoju","date":"2023-08-08 20:45:30","revision":2949603},"2.3.6":{"tag":"2.3.6","author":"supersoju","date":"2025-08-01 15:13:00","revision":3337890},"2.3.7":{"tag":"2.3.7","author":"supersoju","date":"2026-08-31 17:55:34","revision":3674754},"2.3.8":{"tag":"2.3.8","author":"supersoju","date":"2026-08-31 18:44:55","revision":3674807}},"upgrade_notice":[],"ratings":{"1":0,"2":0,"3":0,"4":0,"5":0},"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3650019,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3650019,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.jpg":{"filename":"banner-1544x500.jpg","revision":3650019,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.jpg":{"filename":"banner-772x250.jpg","revision":3650019,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0","1.04","1.05","1.06","1.07","1.08","1.09","1.10","1.11","1.25","1.26","2.0","2.01","2.2.0","2.3","2.3.0","2.3.3","2.3.4.1","2.3.5","2.3.5.1","2.3.5.2","2.3.6","2.3.7","2.3.8"],"block_files":[],"assets_screenshots":[],"screenshots":[]},"plugin_section":[],"plugin_tags":[2549,9899,70498,72023,72024],"plugin_category":[],"plugin_contributors":[82396],"plugin_business_model":[],"class_list":["post-23558","plugin","type-plugin","status-publish","hentry","plugin_tags-auto-update","plugin_tags-multiple-wordpress","plugin_tags-remote-administration","plugin_tags-wpcommand","plugin_tags-wpcontrol","plugin_contributors-supersoju","plugin_committers-supersoju"],"banners":{"banner":"https:\/\/ps.w.org\/wpcommand\/assets\/banner-772x250.jpg?rev=3650019","banner_2x":"https:\/\/ps.w.org\/wpcommand\/assets\/banner-1544x500.jpg?rev=3650019","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/wpcommand\/assets\/icon-128x128.png?rev=3650019","icon_2x":"https:\/\/ps.w.org\/wpcommand\/assets\/icon-256x256.png?rev=3650019","generated":false},"screenshots":[],"raw_content":"<!--section=description-->\n<p>WP Command and Control connects your WordPress site to a central <a href=\"http:\/\/www.wpcommandcontrol.com\/\">WP Command and Control<\/a> dashboard, so you can manage, update, and back up every WordPress site you run without logging into each one separately.<\/p>\n\n<p>Just activate the plugin \u2014 your site registers with your WP Command and Control account automatically, no manual setup step required.<\/p>\n\n<h4>Features<\/h4>\n\n<ul>\n<li><strong>Centralized multi-site dashboard<\/strong> \u2014 track WordPress core, plugin, and theme versions across every connected install from one place.<\/li>\n<li><strong>WordPress 5.5+ native auto-update controls<\/strong> \u2014 granular control over core (minor vs. major), theme, and per-plugin auto-updates, not just an on\/off switch.<\/li>\n<li><strong>Remote core\/plugin\/theme updates<\/strong> \u2014 trigger updates manually or on a schedule, individually or in bulk across sites.<\/li>\n<li><strong>Automated, resumable backups<\/strong> \u2014 full-site backups (database + files) run as a batched job that reports progress and won't time out on constrained hosting, alongside BackUpWordPress integration for scheduled backups.<\/li>\n<li><strong>Update &amp; backup reporting<\/strong> \u2014 generate plugin\/core update and backup-run reports for each site.<\/li>\n<li><strong>Zero-touch onboarding<\/strong> \u2014 a new site joins your account just by activating the plugin.<\/li>\n<li><strong>Security &amp; malware scanning<\/strong> \u2014 integrated with Sucuri for site-level security scans.<\/li>\n<li><strong>Secure by design<\/strong> \u2014 every request is HMAC-SHA256 signed and verified; no arbitrary HTTP callbacks, all data returns directly in the API response.<\/li>\n<\/ul>\n\n<h4>Support<\/h4>\n\n<p>You can email us at support@wpcommandcontrol.com for support.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Install the WP Command and Control plugin either via the WordPress.org plugin directory, or by uploading the plugin files to your server.<\/li>\n<li>Activate the plugin.<\/li>\n<li>Sign up for an account at wpcommandcontrol.com \u2014 your site is added automatically once the plugin is active.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"do%20i%20need%20an%20account%20to%20use%20this%20plugin%3F\"><h3>Do I need an account to use this plugin?<\/h3><\/dt>\n<dd><p>Yes. The plugin is the on-site agent; it connects to your WP Command and Control dashboard at wpcommandcontrol.com, where you view status and trigger actions across all your sites.<\/p><\/dd>\n<dt id=\"what%20happens%20when%20i%20activate%20the%20plugin%3F\"><h3>What happens when I activate the plugin?<\/h3><\/dt>\n<dd><p>It registers the site with your WP Command and Control account automatically \u2014 there's no separate manual \"add site\" step.<\/p><\/dd>\n<dt id=\"what%20wordpress%20and%20php%20versions%20are%20supported%3F\"><h3>What WordPress and PHP versions are supported?<\/h3><\/dt>\n<dd><p>WordPress 6.0 or later, and PHP 7.4 or later.<\/p><\/dd>\n<dt id=\"is%20my%20site%20data%20sent%20to%20a%20third%20party%20during%20a%20backup%3F\"><h3>Is my site data sent to a third party during a backup?<\/h3><\/dt>\n<dd><p>No. Backups run entirely on your own server. The plugin doesn't push files off-site itself \u2014 your dashboard account retrieves the finished backup archive from your site over an authenticated connection when you request it.<\/p><\/dd>\n<dt id=\"how%20are%20requests%20to%20my%20site%20authenticated%3F\"><h3>How are requests to my site authenticated?<\/h3><\/dt>\n<dd><p>Every request is signed with HMAC-SHA256 and verified against your site's API key before anything runs. There are no unauthenticated or \"secret URL\" style endpoints.<\/p><\/dd>\n<dt id=\"does%20this%20plugin%20slow%20down%20my%20site%3F\"><h3>Does this plugin slow down my site?<\/h3><\/dt>\n<dd><p>No. The plugin only runs when your dashboard sends it a signed request \u2014 it doesn't add any always-on frontend or admin overhead.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>2.3.8<\/h4>\n\n<ul>\n<li>Raised minimum requirements to WordPress 6.0 and PHP 7.4<\/li>\n<li>Resumable, batched full-site backups \u2014 backups now run as bounded steps with progress reporting instead of one long request, fixing timeouts on constrained hosting<\/li>\n<li>New authenticated backup archive retrieval and cleanup actions<\/li>\n<li>Unreadable files are now skipped and counted during a backup instead of failing the whole job<\/li>\n<li>Timeout guard for stalled backup jobs<\/li>\n<li>Paginated file manifest support (<code>get_files<\/code>) for large sites<\/li>\n<li>Hardened HMAC request verification (constant-time comparison)<\/li>\n<li>Sanitized and allowlisted filesystem credential handling<\/li>\n<li>Denylisted privilege-escalation-relevant settings from remote option changes<\/li>\n<li>Path-traversal fix on remote file reads, contained to the WordPress install directory<\/li>\n<li>Corrected content size reporting (database + core size)<\/li>\n<li>Added a <code>current_user_can('manage_options')<\/code> capability gate across the whole remote API<\/li>\n<\/ul>\n\n<h4>2.3.7<\/h4>\n\n<ul>\n<li>Enhanced WordPress 5.5+ native auto-update integration<\/li>\n<li>Improved plugin and theme auto-update management<\/li>\n<li>Fixed install_plugin endpoint for better JSON response handling<\/li>\n<li>Added comprehensive input validation and error handling<\/li>\n<li>Enhanced security with improved HMAC verification<\/li>\n<li>Better compatibility with modern WordPress versions<\/li>\n<li>Fixed fatal errors and improved plugin stability<\/li>\n<\/ul>\n\n<h4>2.3.6<\/h4>\n\n<ul>\n<li>Improved auto-update status reporting<\/li>\n<li>Enhanced WordPress core update controls<\/li>\n<li>Better plugin management functionality<\/li>\n<li>Security improvements and bug fixes<\/li>\n<\/ul>\n\n<h4>2.3.5<\/h4>\n\n<ul>\n<li>PHP 8.x compatibility<\/li>\n<\/ul>\n\n<h4>2.0<\/h4>\n\n<ul>\n<li>New options page. Intergrated Security and Malware scans provided by Sucuri<\/li>\n<\/ul>\n\n<h4>1.25<\/h4>\n\n<ul>\n<li>Improved security<\/li>\n<\/ul>\n\n<h4>1.11<\/h4>\n\n<ul>\n<li>New file backup methods available<\/li>\n<\/ul>\n\n<h4>1.10<\/h4>\n\n<ul>\n<li>New Plugin management functions<\/li>\n<\/ul>\n\n<h4>1.0<\/h4>\n\n<ul>\n<li>Initial version<\/li>\n<\/ul>","raw_excerpt":"Remotely manage WordPress core, plugin, and theme updates, automated backups, and security scans from one dashboard.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/mai.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/23558","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mai.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/mai.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/mai.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=23558"}],"author":[{"embeddable":true,"href":"https:\/\/mai.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/supersoju"}],"wp:attachment":[{"href":"https:\/\/mai.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=23558"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/mai.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=23558"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/mai.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=23558"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/mai.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=23558"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/mai.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=23558"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/mai.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=23558"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}