WP Toolkit extension causing significant server-wide ongoing issues

magestyx

Basic Pleskian
Server operating system version
Almalinux 10
Plesk version and microupdate number
18.0.78 Update #4
We recently setup all new servers and migrated WP sites to them (up to date WP installs). Seeing the new WP Toolkit extension, we thought that looked like a good integration, so we connected it to all sites and installed the plugin onto all sites.
Immediately we started having issues. Every day we'd check on the sites and the WP Toolkit would be connected to a DIFFERENT site on the server than the hosting account we were viewing in Plesk. Almost every site on the server would do this. We'd try to re-scan/re-connect, but WP toolkit would often take 3-4 attempts before it'd find the right site. Then the next day, they'd be scrambled again.
We did flush the WP Toolkit cache - multiple times.
The biggest problem is that the plugin will overwrite the login page on these sites, so clients are locked out. We have hidden login links set using the Admin and Site Enhancement plugin on most sites, and WP Toolkit would change them on all or most of these sites on the server to the login of one of the other sites on the server (not necessarily the wrong site that it's connected to, either).
We finally disconnected WP Toolkit from all sites, and removed the plugin from all sites and even uninstalled the extension from all servers, and yet the login page overwrite is STILL happening. It's actually changing the value in the database. It's happened on multiple new servers - all Plesk Web Pro Edition, Almalinux 10.
It's like an annoying virus we can't get rid of and we regret ever installing this accursed thing. BEWARE of this extension.
Please help.

This morning, per another thread here that likely isn't related, we added the following lines to: /usr/local/psa/admin/conf/panel.ini
[ext-wp-toolkit]
installIntegrationPluginToNewSites = false
rolloutIntegrationPluginToExistingSites = false
integrationPluginApi = false
integrationPluginUiModuleEnabled = false
integrationPluginEventModuleEnabled = false

We won't know of results for a bit, but we're just trying anything we can.
 
Back
Top