Repository navigation
WPGuard 0.4.0 turns repeated WordPress work into a reviewable workflow. It can patch one Gutenberg block, verify the native revision created by a write, test a page on a separately registered staging site, update plugins and themes with health checks and automatic restoration, and authorize narrow unattended jobs through explicit preapproval policies.
Companion sites can now use a dedicated WordPress Application Password. Optional WPScan intelligence returns clean, vulnerable, or unknown component status and can warn or block approval. Existing shared-key companion installations remain compatible.
Read SECURITY.md before connecting a site. WPGuard is built for trusted operators and keeps preview, packet, correction, snapshot, and rollback coverage explicit per tool.
Install: use the attached companion ZIP (WordPress 5.6+, PHP 8.0+), or run ghcr.io/cgallic/wpguard-mcp:0.4.0 on Linux amd64 or arm64. The server and companion are separate components. See the installation guide.
The attached .sha256 file verifies the companion ZIP.
Full Changelog: v0.3.1...v0.4.0