WordPress Toolkit in Plesk

WordPress Toolkit is Plesk’s dedicated WordPress management interface. It goes beyond simple installation: it manages updates, clones sites, runs security checks, and provides Smart Update for safe automated updates.

Accessing WordPress Toolkit

Plesk panel → WordPress (left sidebar) or from a subscription → WordPress.

The toolkit shows all WordPress installations across all your subscriptions with their version, update status, and security score.

Installing WordPress

Go to WordPress → Install.

Select the domain and installation path (leave blank for root).

Set the admin username, password, and email.

Choose language.

Click Install. Toolkit downloads WordPress, creates the database, and configures wp-config.php automatically.

Managing updates

The toolkit dashboard shows which installations have outdated core, plugins, or themes.

Update one site

Click the site → Updates → select what to update → Update.

Update all sites at once

WordPress → Update All: updates core, plugins, and themes across all installations in one action.

Automatic updates

Click a site → Updates → Auto Update → enable automatic core, plugin, and theme updates. The toolkit runs updates in the background without any manual action.

Smart Update

Smart Update is WordPress Toolkit’s safest update method. It clones your site, applies updates on the clone, runs visual regression checks comparing screenshots before and after, and only applies updates to the live site if nothing visually broke.

Click the site → Smart Update.

Toolkit clones the site to a staging environment.

Updates are applied to the clone.

Visual comparison runs automatically: Toolkit screenshots key pages and compares them.

Review the comparison report. If everything looks correct, click Apply to Production.

If something broke, click Discard: your live site was never touched.

Cloning sites (staging)

Clone a production site to a staging subdomain for safe testing:

1. Click the site → Clone
2. Set the staging URL (e.g. staging.yourdomain.com)
3. Click Clone

Changes on the clone don’t affect the live site. Push changes back using Toolkit → Push Data to Production.

Security scanner

Toolkit can scan WordPress installations for known vulnerabilities:

1. Click a site → Security
2. Click Check Security
3. Toolkit reports:
   • Admin username is “admin” (guessable)
   • Debug mode is on
   • Outdated plugins with known CVEs
   • File permissions issues
   • PHP version vulnerabilities

Fix issues by clicking the recommendation next to each finding.

Managing multiple sites efficiently

The toolkit main view shows all WordPress installations in a table. You can:

• Sort by update status to find outdated sites quickly
• Select multiple sites and apply bulk actions (update, activate maintenance mode)
• Search for a specific site by domain or plugin

Useful toolkit operations

Task	Where
Enable maintenance mode	Site → Maintenance Mode → On
Reset admin password	Site → WordPress Admin Password → Change
Access WP Admin directly	Site → Log In to WordPress (auto-login)
View error log	Site → Logs
Export/import database	Site → Database → Export/Import