MainWP Dashboard: Self-hosted WordPress Management for Agencies
| 开发者 | mainwp |
|---|---|
| 更新时间 | 2026年10月14日 01:21 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1.3 |
| 版权: | GPLv3 or later |
| 版权网址: | 版权信息 |
标签
下载
5.4.0.12
4.1.4
4.1.4.1
4.1.5
4.1.5.1
4.1.9
4.1.9.1
4.3
6.0.10
3.5.4
4.1.7
3.5.3
6.1.1
4.2.4
5.4.0.20
6.1.3
4.4.0.2
4.4.2
4.4.3.1
4.4.3.2
3.5.7.1
4.1.3
4.1.3.1
4.5.3.1
4.0.4
4.5.3.2
4.6.0.1
3.5
4.0
4.0.1
4.0.7.2
4.5
5.0.1
6.0.11
6.1.2
5.0.3.1
4.5.1.3
5.0.3.1.1
3.5.6
4.0.7
4.4.3.3
5.0.2
5.2
4.1.6
4.1.8
4.4.3
5.2.1
5.3
4.0.3
4.0.5
4.1.10.1
4.1.11
4.2.7
5.2.2
5.3.1
5.3.4
5.3.5
4.0.7.1
4.4
5.1.1
5.3.3
4.2
5.4.0.3
5.4.0.4
5.4.0.5
4.2.3
4.5.0.1
4.5.3
5.4.0.7
5.4.0.8
4.1.1
4.1.10
4.1.10.3
4.1.12
4.2.1
4.2.2
4.2.6
4.4.0.3
5.0.3
5.0.3.2
5.4.0.10
5.4.0.15
5.4.0.17
5.4.0.19
4.1.8.1
4.4.0.1
4.4.0.4
5.3.2
5.4.0.11
4.1.2
4.2.5
4.3.0.1
4.4.1
5.4
5.4.0.1
5.4.0.14
5.4.0.23
5.4.0.9
5.1
5.4.0.13
5.4.0.6
5.4.1
3.4.7
3.4.8
3.5.2
4.0.6
4.1.10.2
4.2.6.1
4.5.1
5.4.1.1
6.0.1
3.5.7
6.0.2
4.3.0.2
5.0
5.4.0.21
6.0.3
6.0.4
6.0.5
6.0.6
4.1
4.4.3.4
5.3.5.1
5.4.0.16
5.4.0.18
5.4.0.22
6.0.7
6.0.8
3.5.5
4.0.2
4.5.1.1
6.0.12
6.1.5
6.1.4
6.1.8
6.2
3.4.6
4.0.7.3
4.2.4.1
4.2.7.1
4.3.1
4.5.1.2
4.6
5.4.0.2
6.0
6.0.9
6.1.6
6.2.1
6.2.2
3.4.9
3.5.1
4.5.2
6.1
6.1.7
6.2.3
4.1.2.1
6.3
详情介绍:
Managing multiple WordPress sites can be a time-consuming and frustrating task. The MainWP Dashboard empowers you to take back your time by allowing you to efficiently manage and secure all your WordPress sites from your own centralized Dashboard.
Designed for agencies, freelancers, and web professionals, MainWP offers comprehensive control with a privacy-first approach. Harness the power of MainWP for updates, backups, and more, ensuring your sites are always running smoothly and securely.
Features for Advanced WordPress Management:
- Centralized Updates: Keep all your WordPress sites up-to-date with single-click updates.
- Secure Backups: Implement scheduled or on-demand backups for complete site security.
- Manage both your sites and your clients with the Client Management module
- The built-in Cost Tracker allows you to easily keep track of client costs
- Private and Self-hosted: Your data stays yours, with full privacy and control.
- Setting up MainWP is straightforward, install the dashboard on a private WordPress site, add the MainWP Child plugin to your other WordPress sites, and take control.
- Integrations: Add-ons in this category enable seamless connections with popular third-party services and plugins, allowing you to integrate the tools you already use directly into your MainWP Dashboard.
- Extensions: These are custom-built, standalone add-ons developed exclusively for the MainWP Dashboard, designed to add unique and specialized functionality to enhance your WordPress management experience.
安装:
Note: MainWP is not tested on or designed for multisite installs.
However, we have user reports that most functions work correctly, but support will be limited. We DO NOT recommend installing the MainWP Dashboard plugin on a multisite install.
- We HIGHLY recommend a NEW WordPress install for your MainWP Dashboard.
- Once you have set up the separate WordPress website, install the MainWP Dashboard plugin following your normal installation procedure, either the automatic process by searching MainWP or by uploading the MainWP plugin to the '/wp-content/plugins/' directory.
- Once installed then Activate the plugin through the Plugins menu in WordPress.
- Add your first Child Site to the MainWP Dashboard - Documentation
- Set your MainWP Settings - Documentation
屏幕截图:
常见问题:
What sets MainWP apart from other WordPress management platforms like ManageWP or InfiniteWP?
MainWP is a self-hosted, open-source WordPress management plugin that prioritizes user privacy and customization. Unlike SaaS (Software as a Service) platforms like ManageWP, WPUmbrella, or WPRemote, MainWP gives you complete control over your data and allows for extensive customization through its open-source architecture.
Can MainWP handle bulk updates for WordPress core, plugins, and themes?
Yes, MainWP makes it easy to perform bulk updates for WordPress core, plugins, and themes across all your managed sites. With just a few clicks, you can ensure all your sites are running the latest versions, saving you valuable time and effort.
How does MainWP help with client management for WordPress agencies and freelancers?
MainWP offers a robust client management system that allows you to organize sites by client, assign tags, and generate customizable client reports. This streamlines your workflow and helps you provide better service to your clients by keeping all their site information organized and easily accessible.
Does MainWP offer any features for tracking costs associated with managing WordPress sites?
Yes, MainWP has a built-in Cost Tracker. This feature allows you to:
- Record and categorize expenses for each site
- Set up recurring costs
- Generate detailed cost reports
- Gain insights into your expenditure distribution
- Track payments received and upcoming renewals
What security features does MainWP offer to protect my WordPress sites?
MainWP prioritizes security by providing features like real-time security monitoring, malware scanning, and vulnerability detection. The plugin also integrates with popular security plugins.
Can I use MainWP to manage WordPress sites hosted on different servers or hosting providers?
Yes, MainWP is designed to work with WordPress sites hosted on any server or hosting provider.
How does MainWP handle WordPress site backups?
MainWP offers multiple backup options, including built-in backup solutions for popular hosting providers and integrations with some of the most installed backup plugins.
How do you pronounce MainWP?
MainWP is a unique name that we created for our company, so it's understandable if you're unsure about how to pronounce it. Here's the easiest way to remember: Main + WP = MainWP Think of it as the word "Main" followed by the letters "WP" (pronounced as "double-u pee"). In phonetic notation, it would look like this: /ˈmeɪn ˈdʌbəl juː ˈpiː/. But don't worry if you pronounce it differently – we answer to almost anything, including WP Main and WPMain!
I have an idea for MainWP; how do I let you know?
Please follow the steps outlined in the MainWP Voice so you can add your idea to the MainWP Community to be voted on.
I have more questions. Do you have any other information?
Yes, we have a quick FAQ with many more questions and answers here.
Where do I report security bugs found in this plugin?
Please report security bugs found in the source code of the MainWP plugin through the Patchstack Vulnerability Disclosure Program. The Patchstack team will assist you with verification, CVE assignment, and notify the developers of this plugin.
更新日志:
6.3 - 10-13-2026
- Security: Strengthened permission checks, site-access validation, and request handling throughout the Dashboard.
- Added: Introduced Knowledge, a central place to store your agency’s information and working instructions for clients and sites, which connected MCP and AI tools can access and manage according to each user’s permissions.
- Added: Introduced a “Connect an AI Tool” panel in the Application Password success dialog and onboarding notice, with prefilled MainWP MCP server configurations for Claude Code, Cursor, and VS Code.
- Added: Introduced an “AI” menu with a landing page for Knowledge, MainWP MCP, and MainWP Control.
- Added: Introduced guided setup pages for MainWP MCP and MainWP Control, allowing users to create an Application Password and copy the ready-to-use configuration without leaving the page.
- Added: General Settings option to check for abandoned plugins and themes using their local file date when WordPress.org has no last-updated date. (PR906) - thanks laukatudev
- Fixed: Automatic-update emails now follow their saved notification settings.
- Fixed: Ignored updates no longer appear in Dashboard update counters.
- Fixed: Cost Tracker prices no longer lose their value after an upgrade.
- Fixed: Client Overview now works correctly for restricted Team Control users and hides management controls they cannot use.
- Fixed: Client notes now preserve supported formatting while safely handling potentially unsafe content.
- Fixed: Saving a site no longer removes its Google Analytics mapping or displays an unnecessary uptime-monitoring warning.
- Fixed: Client imports and management now validate and safely handle client details and images.
- Fixed: Site deletion now cleans related data consistently and avoids partially removing a site when deletion
- Fixed: Resolved an issue where successful WordPress core auto-updates were incorrectly recorded as failed.
- Fixed: Resolved issues with automatic update notification emails by including WordPress core updates with their previous and new version numbers and preventing PHP warnings for sites with core-only updates.
- Fixed: Improved uptime monitoring accuracy when multiple heartbeat records have the same timestamp.
- Fixed: Improved reliability of website uptime notifications when monitoring data is returned in different formats.
- Fixed: Plugin and theme pages now handle missing or empty website data as an empty list and display a count of zero.
- Fixed: Plugin update checks now use the plugin’s key when update information does not provide a slug, helping ignored-update settings apply consistently across automatic, scheduled, and manual checks.
- Fixed: Ignored plugin updates are now counted consistently when filtering and displaying updates.
- Updated: Improved the redaction of sensitive data in connection failure details when raw response data is displayed.
- Updated: Restored user, event, and site filtering to the Network Activity widget, including saved filters and the User column.
- Updated: Improved site connection and synchronization with clearer setup guidance, more useful diagnostics, and configurable MainWP Child request timeouts.
- Updated: Updates started through MCP and AI tools can now be previewed and require confirmation before running. Ignored updates and site-wide update exclusions are no longer installed.
- Updated: Improved Team Control permissions throughout the Dashboard so users and API keys can access only the sites and information assigned to them.
- Updated: Upgraded the bundled PHPSecLib library to address upstream security issues and improve compatibility.
- Updated: REST and Abilities responses so restricted requests receive a not-found response for inaccessible records.
- Updated: API-key authentication to apply only to MainWP REST routes and reject keys whose owners no longer exist.
- Updated: REST v2 behavior for batch operations, session destruction, monitoring settings, and per-site update results.
- Updated: Site-deletion hooks to run only after successful deletion and removed the mainwp_ga_delete_site hook from ordinary site updates.
- Security: Hardened REST API key authentication, permissions, lifecycle, and caching.
- Fixed: PHP fatal error when saving Monitoring settings while uptime monitoring is enabled.
- Fixed: Resolved an issue where enabling global uptime monitoring left monitors for previously added sites disabled.
- Fixed: Removing a website now also removes its associated monitors and monitoring data.
- Fixed: Improved database schema comparisons to correctly handle nullable defaults without misinterpreting markers inside quoted SQL values.
- Fixed: Database upgrades now ensure group records include the required identifier and primary key.
- Fixed: Resolved an issue affecting tag updates through REST API v2.
- Fixed: Update rows now leave the version field blank when version information is unavailable.
- Fixed: Resolved inconsistencies when processing update and synchronization responses.
- Updated: Improved upgrade status reporting for plugins, themes, and translations, including clearer handling when upgrades begin or cannot proceed.
- Updated: Strengthened authenticated and renewal request signatures with a longer, cryptographically random nonce.
- Updated: Missing primary monitors are now repaired automatically, restoring monitoring for affected sites.
- Updated: Clarified the notices on the “Edit Client” and “Edit User” screens that leaving fields blank preserves their existing values on child sites.
- Updated: Improved tag readability by validating background colors and automatically selecting contrasting black or white text.
- Fixed: Improved database size notices on the Operations and Client Overview pages with appropriate spacing and context.
- Fixed: Sorting by URL in the Connection Status widget.
- Fixed: File input field sanitization issues specific to Windows hosts.
- Fixed: Prevented unnecessary loading overlays and processing errors when the overlay is unavailable.
- Added: New Database section to Server Information with database version, size, prefix, privilege status, and table health information.
- Added: System Monitor for WordPress cron health with scheduled checks, fallback execution, and manual triggering.
- Added: Command Palette trigger in the header for quicker navigation in supported WordPress setups.
- Added: Optional request signature verification for authenticated requests using structured signing details and request IDs.
- Added: Support for exact client field names and values, including empty values and "0", in searches and API requests.
- Added: Validation of supported groups, actions, and item formats for REST API batch requests.
- Added: Automatic cleanup of cost records when clients or tags are deleted through the REST API.
- Added: Re-introduced the User column in the Network Activity widget.
- Updated: Improved privacy-safe diagnostics for unexpected responses without recording sensitive response content or URLs.
- Updated: Improved validation and normalization of JSON input for GET and DELETE capability requests.
- Updated: Improved REST API error handling for invalid, ambiguous, oversized, malformed, or incorrectly typed request data with clear 400 responses.
- Updated: Expanded REST API batch operations, API key management, and cost tracking associations.
- Updated: Adjusted the Plugin Details modal height.
- Updated: Standardized site name URL formatting in Insights Events by removing HTTP prefixes and trailing slashes.
- Fixed: Improved self-connection checks by using the standard AJAX endpoint and more reliable request and response validation.
- Added: Support for the Cloudways REST API v2 in "API Backups"", with secure access-token authentication and continued support for legacy API credentials.
- Added: Option to bypass cache during Uptime Monitoring checks, with global and per-monitor settings to help improve the accuracy of site availability checks.
- Added: Localized titles for Network Activity changes involving site registration, users, comments, URLs, homepage settings, date and time, updates, language, site title, and site icon.
- Updated: Improved activity log entries for system settings and database changes with clearer, more descriptive object titles.
- Updated: default Network Activity settings to exclude additional event types from logging.
- Updated: Improved the connection status table layout in the "Connection Status" widget for a cleaner, more focused presentation.
- Updated: HTTP response options are now shown only in global settings, preventing them from appearing in individual monitor configurations.
- Fixed: Corrected Site Health calculations and REST API responses so health scores accurately reflect each site's status, including sites with missing, malformed, negative, or critical issue data.
- Fixed: Corrected multiple REST API v2 schemas and pagination settings for automatic updates, uptime monitoring, expected status codes, tag site counts, and client custom fields, including support for the deprecated
pre_pagealias. - Fixed: Improved REST API validation and response handling to reject malformed settings, prevent PHP 8 errors and unintended batch operations, validate custom option names, and exclude sensitive or internal data from responses.
- Fixed: Improved REST API validation so invalid monitoring values, unsupported enum formats, and unsupported batch update requests return appropriate errors.
- Fixed: Ensured uptime monitors correctly report a DOWN status when no HTTP status code is received.
- Fixed: Resolved an issue that could leave the site removal process stuck in the "Removing" state on some hosting environments.
- Updated: Redesigned the "Connection Status" widget with tabbed filtering, live connection totals, paginated site details, in-widget reconnection, and more accurate staging site status reporting.
- Updated: Improved uptime monitoring retry scheduling so retries occur only after a valid retry time has been set and the configured retry interval has elapsed.
- Updated: Improved REST API pagination compatibility and expanded schemas for monitoring settings, update flags, expected statuses, and site counts.
- Updated: Replaced the generic __() JavaScript translation function with a namespaced MainWP translation helper to prevent conflicts with other scripts.
- Dev: Added the mainwp_add_site_top_navigation and mainwp_add_site_tabs_content hooks to support custom navigation and tab content on the "Add Site" screen.
- Fixed: Corrected misspelled "Required" indicators for the "Site URL," "Admin Username," "Security ID," "Client Name," and "Client Email" fields in the setup wizard.
- Added: Added an additional connection retry when the expected site data is not returned on the first attempt, improving connection reliability.
- Updated: Improved the loading performance of the "Network Activity" widget by limiting the overview to activity recorded within the last 24 hours.
- Updated: Improved the loading performance of the "Updates Overview" widget by optimizing update queries, separating summary totals from detailed action data, and loading site and update details only when needed.
- Fixed: Corrected the display of site health indicators in the sites monitoring table so they now follow the configured site health setting.
- Fixed: Corrected the text color in the "Help" popup when using the default light theme.
- Added: Added a confirmation prompt when disabling "Installed Plugins Sync" in the "Advanced" settings to help prevent accidental changes.
- Added: Added Site Lockdown Security for MainWP to the available extensions catalog.
- Updated: Improved DNS resolution for connection and uptime monitoring checks by limiting lookups to relevant A, AAAA, and CNAME records.
- Fixed: Improved core auto-update retry behavior by re-queuing failed updates when the last failure is older than 6 hours.
- Updated: Improved uptime monitoring scheduling so the latest check time is saved more reliably before checks begin.
- Updated: Server information displays to keep the “Last Run” value accurate for child site uptime monitoring.
- Updated: Import clients process so it does not require associated child sites.
- Security: Restricted access to MainWP
bulkpostandbulkpagecustom post type functionality by requiring themanage_optionscapability. - Fixed: Improved Plesk API URL construction to properly handle slash combinations in request paths and prevent potential request errors.
- Fixed: Resolved an issue where the "Manage Sites" list did not immediately reflect changes to a site's suspension status.
- Fixed: Resolved a support modal overlay issue on the Lighthouse Integration page.
- Added: Category management for custom post types now shows site associations through contextual tooltips/popups, making it easier to see which sites contain each category.
- Updated: Updated page navigation links that open in new tabs to include proper attributes, helping protect user sessions.
- Fixed: Resolved a duplicate
LIMITclause in the log archive batch query to prevent query errors during log processing. - Updated: Improved directory permission handling for user and site directories to ensure more consistent access control across the Dashboard.
- Updated: Simplified REST API availability checks for v1 and v2 endpoints to streamline behavior and reduce internal validation complexity.
- Important: Version 6.1 includes internal connection handling changes. Rolling back to a version earlier than 6.1 may temporarily disconnect child sites from your MainWP Dashboard. If this happens, reconnect the affected sites from the Manage Sites page using the Reconnect bulk action.
- Security: Strengthened protection for internal key files by replacing predictable file names with secure, non-guessable identifiers and tightening directory permissions for related storage locations.
- Security: Improved protection of stored extension license keys by encrypting them at rest and avoiding unnecessary plaintext caching.
- Security: Updated API credential fields to display masked placeholders instead of stored values, preventing sensitive keys from being exposed in page HTML.
- Security: Removed sensitive authentication fields from REST API site responses to prevent credentials from being exposed through API requests.
- Security: Improved REST API key storage by hashing new consumer secrets at rest while maintaining compatibility with existing keys.
- Security: Removed unused legacy connection and API key handling paths, with safer comparison handling for any existing legacy records.
- Fixed: Improved validation when restoring saved table layouts to ensure saved column structures match the current table, preventing broken or incorrect table displays after updates.
- Fixed: Resolved an issue with saving plugin and theme notes on Auto Update pages.
- Fixed: Resolved an issue with fetching child site favicons when connecting a site.
- Fixed: Resolved an issue where installed plugin and theme names were not displayed in the Object column in Network Activity.
- Fixed: Enhanced application stability by refining initialization conditions for admin notifications related to log database monitoring.
- Fixed: Improved group visibility filtering to ensure users without management permissions only see groups they are authorized to access.
- Fixed: Typos and inconsistencies in user login event log descriptions and action identifiers for improved clarity and consistency across Network Activity logs.
- Updated: Improved code quality and internal handling in several areas.
- Updated: Improved uptime column rendering in the sites list with intelligent caching for faster display of uptime information.
- Updated: Updated the PHPSecLib library to the latest version.
- Updated: Refreshed the light theme using the newer dark theme structure for improved consistency across the Dashboard UI.
- Updated: Tuned the light theme shell, navigation, top bar, shadows, and client icon rendering for a more polished interface.
- Updated: Improved the "Manage Updates" action for outdated themes in Site Hardening to open the relevant "Theme Updates" tab.
- Fixed: Improved site management stability with enhanced handling of site data to prevent errors in edge cases.
- Fixed: An issue with logging auto-updates in the Network Activity logs.
- Updated: Improved performance when performing bulk syncing.
- Dev: Preserve response envelope for
_fieldsREST API v2 requests in sites controller.
- Fixed: Improved performance when performing bulk updates.
- Fixed: The "Updates Overview" widget now includes only connected child sites in its overview counts.
- Added: A duplicate cost action to create a prefilled copy of an operational cost. (Feature request by Stéphane)
- Added: A WordPress tab path to access ignored core updates through the existing "View Ignored Updates" button.
- Added: Support for the
custom_fieldsparameter in thesitesREST API endpoint. - Added: "Copy Permalink" and "Copy ID" actions to the pages and posts table dropdown menus.
- Updated: Server Information report exports now always use English to make support requests easier to review.
- Updated: Cache invalidation is now limited to fewer scenarios to reduce unnecessary cache clearing.
- Updated: Changed the default value of the
mainwp_module_log_disable_cron_logfilter tofalseso cron logging remains enabled by default. - Updated: Kept abandoned check actions visible in empty states for easier access.
- Updated: Centralized screenshot URL generation and thumbnail metadata across pages for more consistent and maintainable preview behavior.
- Fixed: Improved performance when performing bulk updates.
- Added: A WordPress tab path to access ignored core updates through the existing "View Ignored Updates" button.
- Added: Support for the
custom_fieldsparameter in thesitesREST API endpoint. - Updated: Kept abandoned check actions visible in empty states for easier access.
- Updated: Centralized screenshot URL generation and thumbnail metadata across pages for more consistent and maintainable preview behavior.
- Fixed: The "Updates Overview" widget now includes only connected child sites in its overview counts.
- Added: A duplicate cost action to create a prefilled copy of an operational cost. ([Request by Stéphane])[https://voice.mainwp.com/p/cost-tracker-duplication]
- Added: "Copy Permalink" and "Copy ID" actions to the pages and posts table dropdown menus.
- Updated: Server Information report exports now always use English to make support requests easier to review.
- Updated: Cache invalidation is now limited to fewer scenarios to reduce unnecessary cache clearing.
- Updated: Changed the default value of the
mainwp_module_log_disable_cron_logfilter tofalseso cron logging remains enabled by default.
- Fixed: Resolved an issue that could reduce concurrency during plugin and theme installation and update processes.
- Fixed: Improved site selection for continued updates to reduce missed or duplicate update runs.
- Fixed: Restricted monitor widget data to authorized sites only and improved monitor status query performance.
- Updated: Improved site loading performance by optimizing site queries and refining filtering, sorting, and cache handling.
- Fixed: Improved uptime monitoring status tracking and retry behavior for failed health checks to provide more reliable monitoring results.
- Fixed: String concatenation in
mainwp.jsthat introduced an extra semicolon when rendering site links. - Fixed: Resolved an issue that could reduce sync concurrency during site synchronization.
- Added: Global search for filtering all system report tables.
- Added: A detected issues summary and report tables for each system report section.
- Updated: Improved diagnostics for REST API reachability and dashboard self-connect checks, including safer handling of unexpected response body output.
- Updated: Refreshed the "Server Information" page UX with cleaner issue summary rows and more consistent section spacing.
- Updated: Expanded Network Activity tracking to monitor core, plugin, and theme updates handled by WordPress auto-updates.
- Updated: Improved performance by better isolating data so settings and options are correctly scoped per child site.
- Updated: Click handler to sidebar site items to toggle accordion when clicking outside title/content.
- Updated: Adjusted dark theme CSS so sidebar accordion title/content use transparent background.
- Fixed: Corrected a typo in the "Remove Site" button ID attribute that caused the button to malfunction.
- Fixed: Improved the stability of the site synchronization process to prevent issues with the Regression Testing feature.
- Fixed: Resolved an issue where the Network Activity feature continued logging events even when the feature was disabled.
- Fixed: An issue during site registration where URLs with and without the
wwwsubdomain were handled inconsistently. - Added: Added detailed sync monitoring with per-call timing and execution data to the Custom Event Monitor.
- Added: Added an option to set a custom Network Activity data retention period in child site databases.
- Added: Added size monitoring and cleanup actions for Network Activity-related database tables on child sites.
- Updated: Optimized the log archiving process with improved database operations to resolve performance issues related to the Network Activity feature.
- Updated: Redirect URL and enhanced feedback handling in the Cost Tracker module.
- Fixed: Resolved an issue causing unresponsive text editor elements in the Pro Reports add-on.
- Fixed: Corrected an issue where an unwanted text string was displayed on the Media Library page.
- Updated: Reorganized system initialization to improve menu configuration timing and better align with WordPress action hooks.
- Fixed: Corrected a typo in the "Add Site" step of the Quick Start Wizard.
- Fixed: Prevented a redundant confirmation modal from appearing when running updates immediately after removing a child site from the "Manage Sites" screen.
- Updated: Improved informational messaging on the Add-ons page for better clarity.
- Updated: Moved the search field in the "Install Add-ons" modal so it remains available across all tabs.
- Updated: Refined accordion element border radius styling for better visual consistency.
- Security: Updated the
phpsecliblibrary to address a recently disclosed vulnerability. The issue does not affect MainWP in normal usage.
- Fixed: Resolved a WordPress database error caused by a call to a legacy database table.
- Fixed: Display consistency for WordPress core updates.
- Fixed: Client assignment when updating sites via the REST API.
- Fixed: Adjusted logic for website preview image rendering to improve consistency in the interface.
- Added: Added an empty page placeholder to the "Application Passwords" page for a clearer experience when no items are available.
- Added "Execution Sync" log category with a NOTICE level (orange) and automatic start/end sync entries to surface runtime-based sync progress.
- Updated: Removed the unwanted border radius from accordion elements in "Manage Plugins" and "Manage Themes."
- Updated: Removed the "Close" button and added a close (X) icon to the "Add Application Password" modal for a cleaner interface.
- Updated: Added a page reload after successfully creating an application password so the new entry appears immediately.
- Updated: Improved update visibility handling to display appropriate empty-state messages when no updates are available for WordPress core, plugins, themes, and translations.
- Updated: Enhanced tab navigation and activation logic for the updates interface.
- Updated: Enhanced plugin update filtering logic to more reliably handle ignored updates with improved support for both legacy and new formats of ignore indicators.
- Updated: Removed the
mainwp_delete_siteaction hook registration from the constructor of the MainWP database site actions class. - Updated: Email footer link label changed from "Extensions" to "Add-ons" and the developer documentation link.
- Fixed: Resolved an issue where the "Update Tag" button remained disabled when only the tag color was changed.
- Fixed: Prevented a PHP warning caused by attempts to read a non-existent property.
- Fixed: Restored the broken hamburger menu button to ensure mobile navigation works correctly.
- Fixed: Corrected child site assignment during Cost Tracker imports.
- Fixed: Improved pagination handling when cached results are used to ensure accurate offsets and result display.
- Fixed: Removed caching from auto-update detection to provide accurate real-time results.
- Updated: Improved icon alignment in the mobile menu for a cleaner layout.
- Updated: Added border radius to accordion elements and refreshed background colors for better visual consistency.
- Updated: Slightly reduced padding for second-level navigation items to improve spacing.
- Updated: Renamed the "API Access" menu item label for improved clarity.
- Updated: Enhanced extension package handling and verification during updates for improved reliability.
- Updated: Increased auto-update logging frequency from 15 minutes to 5 minutes for more timely monitoring.
- Dev: Applied minor SQL syntax formatting adjustments for improved consistency and code standardization.
- Fixed: Fixed duplicate event titles appearing in the logs overview.
- Fixed: Fixed REST API site data retrieval to correctly handle ability-based lookups, ensuring site information is properly returned in API responses.
- Fixed: Fixed Abilities API pagination handling to ensure consistent integer values across client and update lists.
- Fixed: Fixed an issue where the second-level navigation could cover a dropdown menu on some pages.
- Updated: Enhanced event filtering to include related event variants for more accurate results.
- Updated: Enhanced script loading by reorganizing the initialization sequence and explicitly defining resource dependencies for improved performance.
- Updated: Added extensive translator comments throughout the application to provide better context for localization efforts, clarifying placeholder meanings and string usage patterns.
- Updated: Improved translation domain consistency by adding explicit mainwp text domain parameters to translation functions.
- Updated: Enhanced string formatting by standardizing placeholder styles for improved translation handling.
- Updated: Refined WordPress filesystem integration for improved file handling reliability.
- Updated: Updated the informational message shown when the "Network Activity" table becomes too large for better accuracy.
- Updated: Improved Abilities API input validation for batch job operations.
- Updated: Enhanced Abilities API site status checking with uptime-based monitoring support.
- Updated: Standardized site naming format across all operations in the Abilities API.
- Dev: Added the mainwp_module_logs_get_log_records hook.
- Removed: Removed bundled moment.js and clipboard.js scripts and fell back to the versions included in WordPress core.
- Fixed: Database update routines now check for and remove only schema elements that actually exist (columns and indexes), preventing errors during upgrades.
- Added: Plugin search now includes a dedicated MainWP Child plugin card.
- Updated: Improved update/install error handling to avoid noisy failures and reduce risk of incomplete updates.
- Updated: Lower dimmer z-index, raise top header z-index to prevent UI elements overlapping.
- Updated: Refine modal responsive rules to fix layering and sizing for the "Install Add-ons" modal.
- Dev: A new public hook handler to "Log_Manager" that exposes log record retrieval via the
mainwp_module_logs_get_log_recordsfilter.
- Fixed: Improved monitor record handling by filling missing monitor IDs from the related site ID and preventing unintended site ID updates when partial monitor data is received.
- Fixed: Navigation menu rendering to prevent ID conflicts and duplicate element references.
- Fixed: Nonce input handling in setup and posting forms for better form submission reliability.
- Fixed: An issue with setting the
activeclass on the active tab menu item on the Manage Plugins and Manage Themes pages. - Fixed: Resolved an issue where the date picker would no longer open in the Network Activity filters after a date/time value was set.
- Fixed: An issue where sorting in Sites > Updates did not persist after page reload.
- Fixed: An issue where using Page Reset on a child site's Operations page incorrectly redirected to Manage Sites.
- Fixed: Resolved an issue where post categories were not showing when creating posts in bulk.
- Fixed: A usability issue where the "Enable Site Health monitoring" tooltip could cover dropdown options in the "Quick Setup Wizard".
- Fixed: A usability issue where the confirmation modal after creating a new user did not close automatically.
- Fixed: An issue where the page could remain blank after closing the add-on promo modal because it didn't reload properly.
- Fixed: Resolved various browser console errors caused by duplicate element IDs and related issues.
- Fixed: Corrected multiple typos across the plugin UI.
- Fixed: An issue where the "Get Tags" REST API endpoint returned no results.
- Fixed: Resolved multiple PHP warnings related to undefined variables.
- Fixed: Admin link generation to ensure consistent and reliable access to WordPress admin pages.
- Fixed: An issue with displaying site selection after using the search filter.
- Fixed: Missing user information for certain objects and events in the Sites Changes feature.
- Fixed: Duplicate records appearing for certain objects and events in the Sites Changes feature.
- Fixed: Incorrect display of user information in the Sites Changes table where user IP addresses were unintentionally shown.
- Fixed: Malformed timezone information in uptime monitoring email notifications.
- Fixed: A database error that occurred when dismissing Sites Changes logs.
- Fixed: Sites Changes columns not resetting to their default state when clicking the "Reset Page" button.
- Fixed: Multiple minor cosmetic issues related to the new Dark theme to improve visual consistency.
- Fixed: Multiple PHP warnings and notices to ensure cleaner operation.
- Fixed: An issue with displaying global cPanel API settings in individual site settings.
- Fixed: An issue with saving widget size and position on widgetized pages.
- Fixed: Dashboard email alignment has been updated to center the content for improved readability.
- Fixed: Resolved an issue where the "Dismiss Changes" button remained disabled after selecting items to dismiss.
- Fixed: Prevented dismissed site changes from reappearing in the "Sites Changes" table after updating to version 5.5.
- Fixed: An issue with the accordion element icon not rotating when the element is expanded or collapsed.
- Fixed: In multiple places there was "Are you sure." so it was fixed to "Are you sure?" in confirmation popups.
- Added: Password policy management to set and enforce password expiration rules. (Request by Julia)
- Added: Cost import functionality for easier cost entry management.
- Added: "Jump to WP Admin" quick link in site dropdown menu.
- Added: Monitoring data retention settings with configurable duration options (30, 90, 180, 365 days, or keep forever).
- Added: Bulk delete support for client general fields to speed up cleanup and maintenance.
- Added: A confirmation step when removing installed add-ons to help prevent accidental removals.
- Added: Action buttons for quick page and post creation.
- Added: Inline license key input and validation flow on the "Add-ons" page, including a "Remember Key" option and a dedicated validation action to simplify license management.
- Added: Granular, per-action permission controls for REST API access and application passwords to improve security and administrative flexibility.
- Added: Permission-aware UI for managing application passwords, including per-row actions and dedicated edit flows based on user access rights.
- Added: Introduced new REST API endpoints for user management, including listing, creating, editing, and deleting users, CSV-based user imports, and cross-site administrator password updates with per-site result reporting.
- Added: Introduced Application Password management in the "REST API" page, allowing users to view, create, and revoke Application Passwords directly from the MainWP Dashboard (mirroring WordPress "Users" > "Edit User" for easier access).
- Added: Green coloring for the 'Enable' icon in the extensions view for better visual feedback.
- Added: Sync status tooltips that show the last synchronization time for each site.
- Added: Introduced an outdated data indicator (red badge) for sites that haven't synced in over 24 hours.
- Added: Plugin compatibility validation for PHP versions across update and activation workflows.
- Added: A quick theme switcher so users can toggle between light and dark modes from the UI.
- Added: Support for the Abilities API.
- Added: New REST API v2 endpoints for Monitoring (Request by James), Settings, and Client Fields.
- Added: A new "Plugin and Theme History" feature to provide an accessible history of actions by item and by day.
- Added: An "Import Sites" menu item on the "Add Sites" page for quicker access.
- Added: Support for the
[site.name]token in the Site Health Monitoring notification template to allow dynamic site name insertion. - Added: WordPress transient caching for frequently executed database queries to improve performance.
- Added: Site IP address as an available column option for the "Manage Sites" page. (Request by Ken)
- Added: Comprehensive object caching layer to enhance overall dashboard performance.
- Added: Smart prefetching for common navigation paths to reduce page load times and improve user experience.
- Added: New tracking events to the Non-MainWP Changes logging feature to provide more comprehensive monitoring capabilities.
- Added: New default "WP Version" column in the Manage Sites table.
- Added: Child site timezone information to the
$websiteobject. - Added: Ability to delete plugins and themes that are currently active while respecting the recommended process of deactivating before deleting in the background. (Request by Chrilles)
- Added: New default dark theme.
- Added: Loading element to widgetized pages that hides widgets before all data is loaded properly and Gridstack is loaded. (Request by Mario)
- Added: Descriptive labels for disabled bulk actions in the Manage Plugins and Themes pages explaining why they're disabled.
- Added: Optional auto-archiving for Sites Changes logs and the ability to delete archived logs.
- Added: Option to select which Sites Changes logs to track.
- Added: Support ticket element to the Support modal.
- Added: Color coding to the Updates columns data in the Manage Sites table. (Request by Orchid) and (Nazar)
- Updated: Site filter PHP version options - removed "PHP Ver < 7.0" and added filters for PHP 8.1, 8.2, 8.3, and 8.4. (Request by Philip)
- Updated: Reorganized site management forms with collapsible accordion sections.
- Updated: Enhanced empty-state placeholders across widgets with clearer messaging.
- Updated: Improved site connection verification flow with better guidance.
- Updated: Refined authentication setup options with clearer descriptions.
- Updated: Backup settings layout for better organization.
- Updated: Improved cost tracker terminology (Operational Costs).
- Updated: Better table layouts with improved column organization.
- Updated: Optimized cURL handle management to reduce unnecessary handle recreation and improve resource efficiency during multi-request operations.
- Updated: Redesigned the "Select Sites" header with text links and a live selection counter for clearer bulk actions.
- Updated: Improved empty-state guidance with helpful actions to make next steps more obvious.
- Updated: Refined the "Select Sites" header controls for a cleaner, more consistent workflow.
- Updated: Moved widget layout controls (save, load, delete) from the dedicated action bar into the page header to reduce UI clutter and free up space.
- Updated: Refreshed the "Create REST API Key" screen with clearer permission chips/labels, improved messaging, and better placement for the compatibility toggle.
- Updated: Applied a broader UI polish pass with more consistent spacing, cleaner page structure, and reorganized layouts across affected screens.
- Updated: Improved action buttons and bulk controls so they enable or disable correctly based on the current selection.
- Updated: Repositioned and simplified several informational notices to improve visibility and reduce clutter.
- Updated: Improved uptime monitoring retry behavior with better handling and enhanced logging of retry attempts for easier troubleshooting.
- Updated: Reorganized navigation categories with new "Content Operations" group and improved menu structure.
- Updated: Interface terminology from "Overview" to "Operations" throughout.
- Updated: Changed update count label colors to green and made badges more compact.
- Updated: Increased default page size for retrieving posts from 10 to 50 items per request.
- Updated: Consolidated website-filtering logic across REST API endpoints for more consistent behavior.
- Updated: Endpoints now return a clear error when no websites match the provided filters, preventing ambiguous responses.
- Updated: Consolidated the licensing actions bar in the "Add-ons" page header with contextual action buttons and API-key-aware prompts for clearer guidance.
- Updated: Reorganized the extensions view into segmented, accordion-style sections for "Enabled Add-ons" and "Disabled Add-ons," with aligned search behavior and slimmer action buttons for improved usability.
- Updated: Refined extension cards with clearer license and status headers, revised badges and text, improved documentation link formatting, and more intuitive remove and activate controls.
- Updated: Localized titles and implemented context-aware menu and submenu rendering to ensure correct labeling across different access levels.
- Updated: Centralized user-facing messages and field descriptions to provide consistent error text and schema help across REST API endpoints.
- Updated: Improved request validation logic to return clearer failure messages for invalid inputs, including search, count, and date-range parameters.
- Updated: Centralized message and translation handling across page operations, API responses, and error states to ensure consistent wording throughout the dashboard.
- Updated: Enhanced the REST API keys controller to support both v1 and v2 key formats, improving backward compatibility.
- Updated: Consolidated site administration link generation across dashboard pages and widgets for more consistent behavior.
- Updated: Consolidated review request notices into a single method with conditional messaging based on installed extensions, simplifying review prompt logic.
- Updated: Improved UI elements in the "Install Add-ons" modal to make add-on details easier to scan. Request by Chrilles
- Updated: Refined tooltips in the "Install Add-ons" modal to provide clearer, more helpful guidance.
- Updated: Reorganized helper messages in the "Install Add-ons" modal to better guide users through installation steps.
- Updated: Changed the privacy icon to "fingerprint" in the "Install Add-ons" modal for clearer visual meaning and consistency.
- Updated: Updated status icons in the "Install Add-ons" modal for more consistent and recognizable states.
- Updated: Clarified add-on installation instructions in the "Install Add-ons" modal to reduce confusion during setup.
- Updated: Improved button text and secondary segment styling in the "Install Add-ons" modal for better readability and dark theme consistency.
- Updated: Enhanced the reconnect actions to better handle sites with synchronization errors.
- Updated: Made the "Add" button label visible in the header controls for clearer navigation.
- Updated: Refined the site opening overlay styling and layout for a cleaner, more consistent experience.
- Updated: Updated theme installation header buttons with improved styling and larger interaction targets for better usability.
- Updated: Restricted backup link generation to authorized users only.
- Updated: Reorganized site and title column display in updates tables for improved visual consistency across views.
- Updated: Updated the theme management interface to replace deactivate buttons with lock icons for active themes.
- Updated: Updated the display of active theme status indicators across theme rows.
- Updated: Updated the API backup solution message to include direct links to the relevant settings pages.
- Updated: All help documentation links throughout the application to point to the new documentation site instead of the legacy knowledge base.
- Updated: Enhanced error reporting for upgrade operations with improved code identification.
- Updated: Improved detection and status handling for suspended sites during updates.
- Updated: Improved error handling for API response data to prevent potential crashes when unexpected data formats are received.
- Updated: Refined multiple UI labels and tooltip/button texts for clarity (e.g., "See Details" to "Details", "See Monitors" to "View Monitors").
- Updated: Improved Manage Sites table labels and core version display (e.g., "WP Version" to "Core", "Indexable" to "Index", and better core update link display).
- Updated: Adjusted table column alignment in CSS for numeric and date columns.
- Updated: Refactored updates tables for consistency by standardizing table classes/IDs and removing duplicate
<thead>sections. - Updated: Improved updates table column headers for clarity (e.g., "Version" to "Detected Version") and adjusted alignment.
- Updated: Standardized dark theme table border radius using the
--area-radiusvariable and added specific rules for table corners. - Updated: Removed the emails settings table footer (
<tfoot>) and disabled DataTables search for that view. - Updated: Aligned checkboxes in the Manage Updates table for more consistent row layout.
- Updated: Unified MainWP review notice rendering into
render_review_mainwp_notice, varying messaging based on installed extension count for easier maintenance. - Updated: Default MainWP Dashboard theme selection to follow the detected OS theme preference.
- Updated: Simplified the MainWP Dashboard theme selection to Light and Dark only for new users.
- Updated: Improved the password generator on the "Add New User" page for better usability.
- Updated: Reduced console logging noise to make troubleshooting easier.
- Updated: Redesigned the "Quick Setup Wizard" for a more streamlined setup experience.
- Updated: Improved empty-state placeholders across multiple screens for clearer guidance when no data is available.
- Updated: Improved the "Admin Passwords" page UX with clearer error messages, a confirmation step before execution, an improved password generator, and an informational notice.
- Updated: Improved the "Manage Tags" page flow to make tagging more intuitive (Select Sites → Create Tag → Name → Save).
- Updated: Improved the "Manage Plugins and Themes" page with clearer info labels and updated default status indicators.
- Updated: Improved the "Network Activity" page layout by decluttering the actions bar and adjusting spacing for better readability.
- Updated: Improved the "Plugins and Themes" search results screen by showing the search keyword after search and adding pagination controls to the top of results.
- Updated: Improved the "REST API" page with a new welcome message and confirmation modals when copying API keys.
- Updated: Improved the "Add-ons" page with a welcome message, clearer separation between active and inactive add-ons, and a more prominent active add-on indicator.
- Updated: Improved the "Insights" and "Cost Tracker Summary" page with an onboarding banner, clearer element hierarchy, and more helpful empty-state placeholders.
- Updated: Default widget layouts on the "Insights" and "Cost Tracker" pages.
- Updated: Changed the display logic for the "Encrypt SSL Keys" information message so it no longer appears once encryption is completed.
- Updated: Optimized DataTables initial load configuration to improve table rendering performance.
- Updated: Added missing database indexes on filterable columns to speed up queries on large datasets.
- Updated: Repositioned the loader element on the "Add-ons" page that displays during the add-on information loading and activation process.
- Updated: Refined the status icon displayed after running updates to remove the excessive "sign in" icon.
- Updated: Disabled cron event tracking as the default value for Sites Changes logging to reduce unnecessary log entries.
- Updated: Removed excessive progress bar elements from the "Site Connection" and "Site Hardening" widgets for a cleaner interface.
- Updated: Improved monitor status display consistency across multiple dashboard views.
- Updated: Added referrer information to cURL requests used for syncing websites to enhance connection reliability and debugging capabilities.
- Updated: Redesigned the "Sites Changes" table content and styling to reflect the new logging abilities and improve user experience.
- Updated: Improved various interface elements and navigation flows throughout the dashboard to enhance user experience and streamline common workflows.
- Updated: Refined styling and layout consistency across multiple screens to improve visual clarity and reduce cognitive load for users managing large numbers of sites.
- Updated: Repositioned Updates column to a new default location.
- Updated: Adjusted alignment of sort indicator icons across data tables for improved visual consistency.
- Updated: Refined sort indicator icons in the "Updates" section to maintain design consistency throughout the interface.
- Updated: Restored border radius styling to the main content area.
- Updated: Email notification links to use new "Add-ons" terminology instead of "Extensions".
- Updated: Increased checkbox border contrast for improved visibility in Dark Theme.
- Updated: Enhanced modal element border contrast for better visibility in Dark Theme.
- Updated: Increased font weight on green buttons for improved readability in Dark Theme.
- Updated: Excluded "site sync" event from tracking in Sites Changes feature by default.
- Updated: Renamed the old Dark theme to Dark 2024.
- Updated: Dimmer element background color and blur intensity.
- Updated: Loading element style changed to double.
- Updated: Recent Posts and Pages widget layout on small screens.
- Updated: Form layout and some input field styles in the Edit User modal.
- Updated: Removed redundant tooltip elements cluttering UI.
- Updated: "Delete extensions API Activation data" feature labels and button label verbiage to "Delete add-on API Activation data".
- Updated: Label style indicating the plugin status and trusted status in Manage Plugins and Themes area.
- Updated: Moved the Quick Help menu item to the bottom of the first-level navigation bar.
- Updated: Renamed the Quick Help menu to Support and updated the item style.
- Updated: Support modal functionality to allow users to enable or disable certain features from a single screen.
- Updated: API Backups settings tab menu to display it in horizontal view.
- Updated: Server Info tables to use defined column widths for a more consistent look.
- Updated: Mobile screen navigation menu style and content by removing the hamburger.js script and introducing the Fomantic UI native Flyout element.
- Updated: Data alignment in Updates columns in the Manage Sites table.
- Updated: Edit and View Email Template modal content background color.
- Updated: Optimized the Manage Plugins and Manage Themes tables for better user experience so it does not reload data after each individual action is processed.
- Updated: Optimized the Manage Plugins and Manage Themes tables for better performance so bulk actions won't run all at once, but instead in smaller batches.
- Dev: Restructured request validation into focused helper methods to improve maintainability and error handling across REST API endpoints.
- Dev: Improved internal organization of website filtering logic to enhance code clarity and long-term maintainability.
- Dev: Enhanced validation workflows and error handling processes to reduce redundancy, strengthen stability, and improve overall code quality.
- Dev: Added the
mainwp_open_site_addition_urlhook to allow customization of the target WordPress admin URL when opening a site. - Dev: Updated ApexCharts, DataTables, File Saver, Fomantic UI, Gridstack, PHPSecLib, and Sorting packages to their latest versions to maintain security and compatibility standards.