WingPilot – Your AI Site Consultant & Security Expert
| 开发者 | ilyag |
|---|---|
| 更新时间 | 2026年10月26日 19:49 |
| PHP版本: | 8.0 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
安装:
- Install directly from the WordPress plugin directory, or upload the
wingpilotfolder to/wp-content/plugins/. - Activate the plugin through the Plugins menu in WordPress.
- Open WPPilot from the main wp-admin menu and click Connect to WPPilot. WPPilot opens in a new tab.
- Click Authorize in the new tab. An account is created automatically with your WordPress admin email — confirm or change it. That completes the connection.
屏幕截图:
常见问题:
Do I need an account?
Yes. A free account at app.getwppilot.com is required. The account is created automatically the first time you connect a site — you'll confirm your email address as part of the connect flow. The plugin connects your WordPress site to the WPPilot service; without the connection, the only thing it does on its own is keep any WPPilot forms on your pages working.
What data does the plugin send?
Only what WPPilot needs to understand and improve your site, and only after you connect: site and version details, the content it reads to answer you, activity events and security-scan data. Configuration files such as wp-config.php are checked on your own server and never sent. See External services above and the Privacy Policy.
Can WPPilot change things on my site?
Only with your explicit approval, and only your content. The changes the plugin can make are: post and page titles, excerpts, body content and status; SEO titles and meta descriptions; new draft pages and posts (including Elementor pages); text in Elementor, Beaver Builder and Bricks layouts; image alt text and approved stock images added to your media library; menu item labels and links; comment moderation and a post's discussion settings; custom field values; WPPilot lead forms; and clearing Elementor's generated CSS after a change. Each change is checked against the permissions of the WordPress user who connected the site, never adds scripts or PHP, shows you a preview first, and can be rolled back from the activity feed in the cockpit.
Does WingPilot install plugins or run code?
No. It never downloads, installs, activates or updates plugins, themes or code, and never runs code it receives. If you want more than this plugin does, you can optionally install the separate WPPilot Advanced add-on yourself from the WPPilot app; nothing is installed or pushed to your site automatically.
Can I manage multiple sites from one account?
Yes. Install and connect WingPilot on each WordPress site you want WPPilot to manage. All sites connected with the same account email appear in your cockpit at app.getwppilot.com.
Can I disconnect at any time?
Yes. Open WPPilot from the main wp-admin menu and click Emergency Disconnect (you'll be asked to confirm). This immediately revokes all tokens and stops all backend communication. The plugin becomes inert. You can also disconnect individual sites from the cockpit at app.getwppilot.com.
How do I try WPPilot on a test site?
Install and activate the plugin on a site that is reachable from the internet, open WPPilot in wp-admin and click Connect to WPPilot, then Authorize in the tab that opens. Your Briefing follows in about 90 seconds; ask WPPilot to rewrite a post title to see a change previewed, approved and then undone from the activity feed.
Does the plugin work on localhost?
For the full experience, your site needs to be accessible from the internet so the WPPilot backend can reach the plugin's REST API. For local development, you can use a tunnel service like ngrok to expose your local site.
Where do form messages go, and what happens to them if I delete the plugin?
Each message sent through a WPPilot form is emailed to the address set for that form and saved under WPPilot → Leads in wp-admin. Saved leads stay on your site — they are not sent to the WPPilot service. Forms work whether or not your site is connected. If you delete the plugin, the form settings are removed but your saved leads are kept.
What WordPress versions are supported?
WordPress 6.0 and above, tested through 7.1, with PHP 8.0 or higher.
Is WPPilot free?
Yes, there's a free tier — install, connect, get your Briefing, and try the conversational actions without a credit card. Paid tiers (Starter, Pro, Agency) unlock higher usage limits and additional capabilities; see getwppilot.com for current pricing.
更新日志:
- First release in the WordPress.org directory. Copies installed from getwppilot.com keep their connection and settings, and take their updates from WordPress.org from this version on.
- Fixed: after WPPilot was updated, the next step of the update (or a background request in the admin) could be redirected to WPPilot's page instead of finishing. Only a first install now opens WPPilot's page, and only on an ordinary admin page.
- The plans summary on the WPPilot page now lists what paid plans actually add.
- Security: a new Elementor page, and any change to page text or a page-builder layout, can no longer add a script or event handler, including in place of one that was already there. WPPilot no longer changes the body or status of anything that is not site content, such as Additional CSS or another plugin's code, and publishing a new page needs the permission to publish.
- Fixed: on hosts that switch off some PHP functions (such as
disk_free_space), WPPilot could not read your site's environment or its plugin and theme list, and answered without them. It now reads both on those hosts too.
- Security: a change WPPilot makes to the words on a Beaver Builder or Bricks page is now refused if it would add a script, an event handler (such as
onclick) or a script address, exactly as changes to a page body and to Elementor layouts already were. The same check now also covers custom fields and settings that hold page text. Markup the text already held is kept; nothing unsafe is added, by a change or by its undo. - Fixed: undoing a move to the trash no longer gives a post an address another post took in the meantime. Before, the post came back sharing that address (as a draft) or renamed with "-2" (when published). Now WPPilot says the address is taken and leaves the post in the trash, with nothing changed.
- New: when you ask where your form enquiries go, WPPilot now reads the notification recipients saved by Contact Form 7, WPForms, Formidable Forms and Gravity Forms (read-only), and names the site admin address where a form sends to it by default.
- Fixed: a change WPPilot makes to a page or post body now stores exactly what you approved. Before, block settings WordPress keeps escaped (an
&, a quote,<or--inside a block's settings) lost their backslashes when saved, and a title, excerpt, new draft or meta description lost any backslash it contained. - Fixed: WPPilot no longer changes a WooCommerce order as if it were a post. On stores that keep orders in their own tables, an order's number also names a placeholder post that is not the order; changing that post's status changed nothing about the order while reporting that it had. Orders, and any item whose type no active plugin registers, are now refused with the reason, and nothing is changed.
- Improved: when WPPilot changes a menu item's label or link, it now records the item's date along with its place in the menu, so undoing the change can confirm the item is back exactly where and as it was.
- Improved: when WPPilot answers a question about a whole set of your content — how many products are out of stock, which listings are duplicates, which pages have no meta description or no translation — your site now counts every item itself, so the numbers cover all of them even on a large or slow site where reading every item in time is not possible.
- Fixed: changing a menu item's label or link now changes only that label or link. Before, saving the item also reset its date and could move an item to the end of its menu, and undoing the change put the label back but not its place.
- Fixed: changing a menu item's label or link no longer moves it. Before, the renamed item left its submenu for the top level of the menu and could change places with its neighbours, and WPPilot then refused to undo the change because the item was no longer where it had been.
- Before WPPilot moves a post to the trash, it can now tell you how many of its comments are approved, waiting, spam or in the trash, since they are hidden along with the post.
- Security: the checks that keep scripts out of page content now read markup the way a browser does. An encoded address such as
javascript:, a tab inside one, or an event handler separated by a slash (<img/src=x/onerror=…>) is refused like its plain spelling, for page and post bodies and for Elementor layouts. An Elementor layout can no longer gain a script, an event handler or a scripting address it did not already have. - WPPilot's changes to an Elementor layout, and their undo, are now written only while the layout still holds what WPPilot read, so they never overwrite an edit made in the meantime.
- WPPilot can now go through every item of one kind at once — every tour, product, page or post — instead of a sample, so "how many products are out of stock?" or "which tours have no meta description?" gets an answer about all of them. It reads titles, statuses, whether an excerpt, meta description (in your SEO plugin's own field) and featured image are set, WooCommerce stock, price and SKU, and Polylang or WPML language versions. Never page text. Read-only: nothing is changed. Only an administrator's connection can run it.
- Fixed: undoing a change that moved a post or page to the trash now brings back its comments too, each in the status it had (waiting, approved or spam). Before, the post came back and its comments stayed hidden with the trashed post.
- WPPilot no longer moves a post to the trash on a site whose trash is switched off, where WordPress would delete it permanently instead.
- WPPilot can now tell you where a piece of text is stored across your whole site — an old domain, a phone number, a name — with how many times it appears in each place: page and post content (drafts and scheduled posts included), Elementor layouts (where button and link addresses are stored with their slashes escaped), custom fields, menus, widgets, Customizer settings and other settings. It also says what it did not search. Read-only: nothing is changed. Only an administrator's connection can run it; passwords, keys and anything stored under a credential-like name are counted but never quoted.
- WPPilot can now change a custom field on a post or page — for example one day of a tour's itinerary kept in an ACF, Pods, Meta Box or JetEngine field — after you approve it, with undo. Only the one value you asked about changes: the other rows and sub-fields of the field are written back exactly as they were, the field is checked again just before it changes (anything you changed yourself in the meantime is left alone), ACF fields are saved through ACF itself, and undo puts back exactly what was there. Fields WordPress or a plugin keeps for itself, passwords and keys, fields that link to other content or media, and anything stored as a PHP object are never changed this way.
- When WPPilot reads a post or page, it now also reads the post's custom fields — the itinerary, price lists, specifications and other details that sites built with Pods, ACF, Meta Box, JetEngine or Toolset keep outside the main content and show through their templates. Before, a page whose words all live in custom fields looked empty to WPPilot even though visitors saw it in full. Fields are read with their labels where the field plugin provides them; passwords and anything shaped like a key or credential are never sent, and only users who can edit the post have its fields read.
- When your homepage's search title comes from your site title and tagline, WPPilot now reads what changing them would reach on your site — each language version of the homepage, with the tagline as that language shows it under Polylang or WPML, and the title of another page — instead of assuming it, so it can prepare the homepage title you asked for and tell you exactly what else it changes.