v1.6.0 — Self-updater + 9 new tools
GitHub self-updater
The Full Edition now checks GitHub Releases for updates and offers a one-click update inside wp-admin (via the update_plugins_github.com hook). No more manual re-installs.
New security tools
- File Scanner — malware / hacked-file finder: scans wp-content for suspicious PHP (eval, base64_decode, shell markers, .php in uploads, …).
- Under Attack mode — emergency lockdown: block XML-RPC, block the REST API for logged-out visitors, disable registration, and per-IP rate limiting. Logged-in users are never affected.
- Login IP allowlist — restrict wp-login / wp-admin to specific IPs or CIDR ranges (fail-open when empty so you can't lock yourself out).
New performance tools
- CDN URL rewrite — serve CSS/JS/images from your CDN.
- Cache Warmup — scheduled crawler that keeps the page cache warm.
New utilities
- Cron event manager — view / run / delete WP-Cron events.
- Email log — record every outgoing
wp_mail. - Broken-link checker — scan posts for dead links.
- AI alt-text — generate image alt text via your own OpenAI key.
These modules are new and lint-clean but not yet QA'd on a live site — test on staging before relying on them.