Skip to content

v1.0.0

Choose a tag to compare

View all tags
@austinginder austinginder released this 12 May 18:38
· 4 commits to main since this release
v1.0.0
b9d0919

A WP-CLI plugin that audits your WordPress install against the WP Registry — a public database of hashed plugins, themes, and files. Every component is SHA-256 hashed locally and looked up against the registry; no file contents leave your site.

Since hashes are content-addressable, an audit on one site automatically covers every site running that exact build — including premium plugins not on WordPress.org.

Commands

  • wp registry check — survey every component (clean / vulnerable / malware / unaudited).
  • wp registry show <slug> — full findings for one component (severity, vulnerability type, file location, code snippet, recommendation).
  • wp registry update — apply patched versions for any vulnerable components on this site.

Install

wp plugin install https://github.com/WPRegistry/wp-registry/releases/latest/download/wp-registry.zip --force --activate

Requirements

  • WordPress 5.6+
  • PHP 7.2+
  • WP-CLI

Privacy

The plugin sends component slugs, versions, and content hashes to the registry. It does not send your site URL, file contents, user data, or any other identifying information.

Assets 3
Loading