The toolbar
Six buttons sit at the top of the Installations tab. Most accept multiple selected sites at once. Tick the checkboxes on the rows you want, then click the toolbar button.| Button | What it does |
|---|---|
| Install | Open the install wizard for a fresh WordPress site. Pick the domain, set the admin user, password, and language, click Install. Three to five minutes end to end. |
| Scan | Find any WordPress installs on the account that aren’t yet under WP Toolkit’s management (manual installs, restored backups). Detected sites appear in the list. |
| Updates | Bulk update wizard. Pick which sites, which components (core, plugins, themes), apply now or schedule. |
| Security | Run a multi-site security scan. Each site gets a 0–10 risk score with the issues that contributed to it. |
| Detach | Stop managing a site through WP Toolkit. The WordPress install stays on disk and keeps running, WP Toolkit just stops tracking it. Use this for sites you’d rather manage manually. |
| Remove | Delete the WordPress install entirely (files and database). Irreversible. cPanel asks you to confirm. |
The per-site row
Each WordPress site is one row in the list. The row has the site name on the left, a label slot, four status badges, and a row of icons on the right.
Add label
A free-form tag for the site. Useful when you have ten WordPress sites and want to mark which is Production, which is Staging, which is the Client – Acme project. Labels show up in the row and you can sort by them. Click Add label, type the text, hit enter. Click the label again to edit or remove it.Security Risk badge
A score from 0 to 10. Lower is safer. The number reflects the open security issues on the site: outdated core, plugins or themes with known CVEs, missing recommended hardening, weak admin password, and so on. Click the badge to open the security report for that one site. Each issue has a short description and either an Apply button (for one-click fixes) or a Learn more link (for issues that need a manual decision). The badge is colour-coded:| Score | Colour | What it means |
|---|---|---|
| 0.0 – 0.5 | Grey | No known issues. Site is up to date and hardened. |
| 0.6 – 3.0 | Yellow | Minor improvements available. |
| 3.1 – 6.0 | Orange | One or more recommended fixes worth applying. |
| 6.1 – 10 | Red | Critical vulnerabilities present. Patch as soon as possible. |
SSL/TLS badge
Tells you whether the site has a working HTTPS certificate. Click to open the SSL settings, where you can request a Let’s Encrypt cert through cPanel’s SSL Certificates tool, force HTTPS sitewide, or pick a different cert.UPDATES badge
Highlights when WordPress core, a plugin, or a theme has an update available. Click to open a page that lists every component with a pending update on this site and gives you Update All or per-component Update.Issue badge
Catch-all for non-security problems WP Toolkit detected: a broken database connection, missing files, a permission mismatch, a stuck cron. The number in the badge is the count of open issues. Click to see the list and the suggested fix.Quick-action icons (right column)
The five icons on the far right are shortcuts to per-site features. Hover for the label.| Icon | Shortcut to |
|---|---|
| Shield | The Security report for this site |
| List | The full plugin and theme update report |
| Folder | File Manager rooted at this site’s directory |
| Refresh (circle) | Re-check status (pulls fresh data from the install: version, plugin list, last login) |
| External link | Open the site’s frontend in a new tab |
| Three-dot menu | Everything else: Clone, Copy Data, Move, Back Up, Logs, Maintenance mode, Detach, Remove |
Filter and sort
The Filter button at the top right of the list lets you narrow by:- Update status (up to date / has updates)
- Security score band
- Label
- WordPress version
- PHP version
Install a new site
Pick the domain and path
Choose from any domain or subdomain on the account. The path field is optional, leave blank for the document root.
Set the WordPress admin
Username, password (or Generate), email address. Pick a real email; you’ll need it for password recovery.
Pick a site title and language
Both editable later from the WordPress admin or from the site’s Dashboard tab in WP Toolkit.
Choose plugins and themes (optional)
The wizard offers a curated set of starter plugins and themes. Skip this and install your own later if you prefer a clean start.
Bulk update
Tick the sites
Check the box on every site you want to update. Or tick WordPress sites at the top to select all.
Pick what to update
Toggle WordPress core, plugins, themes, or each individual plugin / theme. With Smart Update on, WP Toolkit clones each selected site, runs the update on the clone, runs a set of checks, and gives you a report; you review and decide whether to push to live.
Common issues
A site I installed manually doesn't appear in the list
A site I installed manually doesn't appear in the list
Click Scan. WP Toolkit walks the account, finds WordPress installs that aren’t yet tracked, and adds them. If a site still doesn’t show up after a scan, it may live outside
public_html or in a non-standard subdirectory; open a ticket and we’ll attach it.The Security score won't budge
The Security score won't budge
Open the security report for the site. Some fixes need a manual decision (changing the admin username, removing a vulnerable plugin you’re still using). One-click fixes are marked with an Apply button; others say Learn more.
Updates fail with a memory error
Updates fail with a memory error
PHP memory limit. Open PHP Settings & Management, bump
memory_limit to 256M (or 512M for big sites), retry the update.I want to manage a site outside WP Toolkit
I want to manage a site outside WP Toolkit
Click Detach on the row. The WordPress install stays on disk and keeps running, WP Toolkit stops tracking it. Re-attach later with Scan.