WP Registry v1.2.0

What's changed

• check now reports update for a build the WP Registry has flagged outdated — a newer version exists — and this verdict overrides your site's own update check (the data that can be stale). A build uploaded for audit but already superseded now shows as update instead of lingering as in queue or unaudited.
• upload skips builds the registry already knows are outdated.

v1.1.0

Added

• wp registry upload [<target>] — send unaudited, latest-version, not-already-queued builds to the registry's audit queue (whole site, or a single type/slug / bare slug). --dry-run previews.
• check now reports update (a newer version is available) and in queue (uploaded, awaiting audit), sorted above plain unaudited.

Changed

• check looks up only your site's hashes via prefix-sharded, edge-cached lookups (/hashes/<prefix>.json) instead of downloading the full manifests — far less bandwidth, always fresh, no flicker.
• Plugin slug is now wp-registry-cli (the command remains wp registry).

Install / update:

wp plugin install https://github.com/WPRegistry/wp-registry-cli/releases/latest/download/wp-registry-cli.zip --force

v1.0.0

A WP-CLI plugin that audits your WordPress install against the WP Registry — a public database of hashed plugins, themes, and files. Every component is SHA-256 hashed locally and looked up against the registry; no file contents leave your site.

Since hashes are content-addressable, an audit on one site automatically covers every site running that exact build — including premium plugins not on WordPress.org.

Commands

• wp registry check — survey every component (clean / vulnerable / malware / unaudited).
• wp registry show <slug> — full findings for one component (severity, vulnerability type, file location, code snippet, recommendation).
• wp registry update — apply patched versions for any vulnerable components on this site.

Install

wp plugin install https://github.com/WPRegistry/wp-registry/releases/latest/download/wp-registry.zip --force --activate

Requirements

• WordPress 5.6+
• PHP 7.2+
• WP-CLI

Privacy

The plugin sends component slugs, versions, and content hashes to the registry. It does not send your site URL, file contents, user data, or any other identifying information.