v1.6.5 - Plugin icon + Check-for-updates

Install / update

Download dicestack.zip below (not "Source code") and upload via Plugins -> Add New -> Upload Plugin, or use one-click update.

Changes

• The Full Edition now shows its icon on the WordPress Plugins and Updates screens (no more blank icon on GitHub-updated installs).
• Added a "Check for updates" link in the DiceStack dashboard footer (Full Edition) that forces a fresh check against GitHub Releases.

v1.6.4 - Full Edition badge + self-updating counts

Install / update

Download dicestack.zip below (not "Source code") and upload it via Plugins -> Add New -> Upload Plugin, or accept the one-click update.

Changes

• The dashboard now shows a Full Edition badge, so it's always clear which build you're running (the WordPress.org build never shows it).
• The tool count in the dashboard is driven by the module registry, so it updates itself automatically as tools are added — no more hard-coded numbers going stale.
• Plugin header / readme use a stable "200+" instead of an exact count that ages each release.

v1.6.3 - Core file integrity

Install / update

Download dicestack.zip below (not "Source code") and upload it in WordPress via Plugins -> Add New -> Upload Plugin, or accept the one-click update if the Full Edition is already installed.

Core file integrity

The File Integrity Monitor now has a Core integrity page (Scan now + a results table) and detects unknown / injected .php files inside wp-admin and wp-includes — a common hiding place for backdoors — in addition to modified and missing core files. It checks your core against the official WordPress.org checksums and pairs with the File Scanner (which covers wp-content) for a complete malware sweep.

v1.6.2 - Smarter File Scanner

Install / update

Download dicestack.zip below (not "Source code") and upload it in WordPress via Plugins -> Add New -> Upload Plugin. Or, if the Full Edition is already installed, it will offer this as a one-click update.

---

Smarter File Scanner

The File Scanner now flags malware-shaped patterns instead of any file that merely uses base64_decode/eval/exec, so legitimate themes and vendor libraries (Nette, Monolog, update checkers, theme engines) are no longer wrongly flagged. It catches obfuscated/encoded payloads, dangerous functions fed request input, decode chains, remote include/exec, known web-shell markers, and PHP hidden inside fake image uploads. Validated against legit + malicious samples with zero false positives and zero misses.

Includes everything from 1.6.0/1.6.1: GitHub self-updater, security suite (File Scanner, Under Attack mode, Login IP allowlist), CDN rewrite, Cache Warmup, Cron manager, Email log, Broken-link checker, AI alt-text, and the developer power tools (Code Snippets, Database Tools, wp-config editor).

v1.6.1 - Developer tools

Full-Edition-only developer utilities, gated behind admin capabilities with in-UI warnings and safe defaults (not on WordPress.org): Code Snippets, Database Tools (read-only by default), and a wp-config constant editor (backs up the file before saving). Test on staging and keep backups.

v1.6.0 — Self-updater + 9 new tools

GitHub self-updater

The Full Edition now checks GitHub Releases for updates and offers a one-click update inside wp-admin (via the update_plugins_github.com hook). No more manual re-installs.

New security tools

• File Scanner — malware / hacked-file finder: scans wp-content for suspicious PHP (eval, base64_decode, shell markers, .php in uploads, …).
• Under Attack mode — emergency lockdown: block XML-RPC, block the REST API for logged-out visitors, disable registration, and per-IP rate limiting. Logged-in users are never affected.
• Login IP allowlist — restrict wp-login / wp-admin to specific IPs or CIDR ranges (fail-open when empty so you can't lock yourself out).

New performance tools

• CDN URL rewrite — serve CSS/JS/images from your CDN.
• Cache Warmup — scheduled crawler that keeps the page cache warm.

New utilities

• Cron event manager — view / run / delete WP-Cron events.
• Email log — record every outgoing wp_mail.
• Broken-link checker — scan posts for dead links.
• AI alt-text — generate image alt text via your own OpenAI key.

These modules are new and lint-clean but not yet QA'd on a live site — test on staging before relying on them.

v1.5.6 — Full Edition

Separation from the WordPress.org edition

• Added an Update URI header and renamed this build to DiceStack (Full Edition). WordPress will now never auto-update the GitHub full build into the leaner WordPress.org build (or vice-versa), even though they share a slug.

Fixes

• Fixed the WordPress 6.7 _load_textdomain_just_in_time "translation loaded too early" notice caused by the hidden-login tool.
• Restored the hidden-login (rename wp-login URL) tool, which had stopped working after modules moved to init-time loading — it now initialises on init.

v1.5.5

Fixes

• WordPress 6.7 compatibility: fixed the _load_textdomain_just_in_time was called too early notice — modules now load on the init action, so no translated text is requested before init.
• Dashboard scrolling: the admin dashboard now uses a single page scrollbar with a sticky sidebar instead of a nested inner scroll area.
• Navigation: added a Dashboard link pinned to the top of the DiceStack admin menu, so you can always return to the main screen even with many tools (and post-type pages) enabled.

No feature or behaviour changes beyond the above.

DiceStack 1.5.4 — Full Edition (185 tools)

DiceStack — free all-in-one WordPress plugin. 185 modular tools, zero bloat.
Enable only what you need; disabled tools load zero code.

💡 This is the full GitHub edition (185 tools). It includes power tools that aren't on the WordPress.org listing — File Manager, .htaccess editor, header/footer code, custom CSS, and SVG upload. The WordPress.org version is a leaner 178-tool build without those.

What's new in 1.5.4

• 🧩 Smarter module loading — the dashboard now shows only the tools present in your build, so counts, categories, and the sidebar always stay accurate.
• 🛒 Clearer dependencies — WooCommerce tools now show a plain "WooCommerce is not installed" message with a one-click install link, instead of looking enableable.
• ⚙️ Per-tool settings — tools with their own screen now surface their settings directly.
• ✅ Plugin Check clean — passes WordPress Plugin Check with no errors or warnings.
• 🎨 Bundled Dice Codes branding in the dashboard.

Install

• From this release: download dicestack.zip below → wp-admin → Plugins → Add New → Upload Plugin → Activate.
• Lean version: also available free on WordPress.org (auto-updates).

Requirements

WordPress 6.0+ · PHP 7.4+

🌐 Plugin home · 📖 Docs · Built by Dice Codes