WP Toolkit - Product News

[trialotto]

@custer

I might be able to run through all product news posts, but maybe there is a simple answer to a simple question : is the wc cli now (fully or partially) functional through the (wp) cli utilities?

Kind regards...

 

[custer]

@trialotto It's not added yet, but the team is looking into adding wc-cli support as we speak. If it's easy to support, we'll add it in the upcoming major release. I'll keep you posted.

 

[custer]

Hi everyone, WP Toolkit v6.9 is now available! Changelog:

6.9.0 (12 Nov 2025)​

• [+] (cPanel)(Gradual rollout) WP Toolkit's WordPress plugin responsible for protecting sites with Vulnerability Protection now also provides GUI for accessing certain WP Toolkit functionality inside WordPress admin dashboard. This GUI is now available on cPanel servers:
  • Site admins can access vulnerability information directly inside the plugin GUI. More features will be added in the next plugin updates
  • The plugin now detects when plugins and themes are installed or updated directly through WordPress, so it will apply mitigation strategies immediately
  • To enable GUI on the existing plugin installations, add the following lines to config.ini file:
    • integrationPluginApi = true
      • integrationPluginUiModuleEnabled = true
    • integrationPluginEventModuleEnabled = true
  • To give site administrators the opportunity to install the plugin, add integrationPluginPromo = true to config.ini file
  • To install the plugin on all new WordPress installations automatically, add installIntegrationPluginToNewSites = true line to config.ini file
    • Set this option to false if you want to disable this behavior before it becomes default in the subsequent WP Toolkit updates
• [+] Backups made in WP Toolkit v6.9 and newer can be easily restored on different servers and even platforms (from Plesk to cPanel and the other way around). To restore a backup made on another domain or server:
  • Create a new WordPress site on the target domain
  • Upload the backup
  • Make sure the Hide backups from other domains option is off
  • Find your backup in the list and restore it. Relevant paths and URLs will be updated automatically during the restoration process
• [+] (Plesk) Added official support for Debian 12 and Debian 13 OSes
• [+] (Gradual rollout) Issues menu in the site card header was split into several categories for better visibility of issues and easier access
• [+] Vulnerability protection rules and other mitigation policies are now applied immediately in most cases without waiting for an hourly maintenance task
• [+] Vulnerability protection rules are now applied to ignored low-risk vulnerabilities
• [+] WP Toolkit now properly supports cloning and copying data between WordPress installations that use Redis Object Cache plugin
• CLI option -password will be deprecated in the next major version of WP Toolkit (v6.10). ADMIN_PASSWORD environmental variable should be used instead
• Addressed a couple of issues that caused WP Toolkit to spam error messages in server logs under various circumstances
• Accessibility improvements
• Security improvements
• (cPanel) Feature Showcase text for WP Guardian addon is now shorter
• [-] Malformed PHP files in WordPress should no longer be able to break WP Toolkit interface. (EXTWPTOOLK-13707)
• [-] Enabling "take over wp-cron.php" feature on a server with a lot of WordPress sites no longer fails with Invalid usage of pm_Settings::set error. (EXTWPTOOLK-13657)
• [-] Disabling vulnerability protection now displays factually correct notification message. (EXTWPTOOLK-13755)
• [-] Failed Smart Updates should now properly clean up after themselves, removing all traces of cloned installation files created during the Smart Update process. (EXTWPTOOLK-10448)
• [-] WP Toolkit no longer rejects plugins and themes with underscore characters in version used outside of Version field. (EXTWPTOOLK-9313)
• [-] Updating vulnerability database should no longer fail with errors in a number of cases. (EXTWPTOOLK-13832)

 

[Dmytro]

Hi. Changelog says "To install the plugin on all new WordPress installations automatically, add installIntegrationPluginToNewSites = true line to config.ini file" , how can I find config.ini?

 

[Kaspar]

@Dmytro from the earlier 6.8.0 release

• [+] (Plesk) WP Toolkit now has its own WordPress plugin that provides access to certain WP Toolkit functionality from within WordPress admin dashboard
  • Currently site admins can access vulnerability information inside the plugin GUI. More features will be added in the next plugin updates
  • The plugin detects when plugins and themes are installed directly through WordPress, so it will apply mitigation strategies immediately, without waiting for the regular check from WP Toolkit
  • To install the plugin on all new WordPress installations automatically, add installIntegrationPluginToNewSites = true line to panel.ini (Plesk) or config.ini (cPanel) file.
    
    • Set this option to false if you want to disable this behavior before it becomes default in the subsequent WP Toolkit updates
    • To enable the GUI on all non-manual plugin installations, make sure to add the following lines as well:
      • integrationPluginApi = true
      • integrationPluginUiModuleEnabled = true
      • integrationPluginEventModuleEnabled = true