WP Command and Control Plugin
Remotely manage WordPress core, plugin, and theme updates, automated backups, and security scans from one dashboard.
Solid choice
WP Command and Control Plugin is a solid plugin choice in 2026, with a few things worth checking first. It runs on 10+ sites and was last updated 1 month ago, and scores 62/100 on our health check.
- Tested with the latest WordPress (7.1)
- Small user base (10+ active installs)
- Very few reviews so far
How does it stack up?
Side-by-side on installs, updates, ratings & support
Daily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where WP Command and Control Plug… stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| auto-update | >100 |
| multiple wordpress | >100 |
| remote administration | #37 |
| wpcommand | #1 |
| wpcontrol | #1 |
Version adoption
Share of active sites per release.
About WP Command and Control Plugin
From the official readme · v2.3.8Description
WP Command and Control connects your WordPress site to a central WP Command and Control dashboard, so you can manage, update, and back up every WordPress site you run without logging into each one separately.
Just activate the plugin — your site registers with your WP Command and Control account automatically, no manual setup step required.
Features
- Centralized multi-site dashboard — track WordPress core, plugin, and theme versions across every connected install from one place.
- WordPress 5.5+ native auto-update controls — granular control over core (minor vs. major), theme, and per-plugin auto-updates, not just an on/off switch.
- Remote core/plugin/theme updates — trigger updates manually or on a schedule, individually or in bulk across sites.
- Automated, resumable backups — full-site backups (database + files) run as a batched job that reports progress and won’t time out on constrained hosting, alongside BackUpWordPress integration for scheduled backups.
- Update & backup reporting — generate plugin/core update and backup-run reports for each site.
- Zero-touch onboarding — a new site joins your account just by activating the plugin.
- Security & malware scanning — integrated with Sucuri for site-level security scans.
- Secure by design — every request is HMAC-SHA256 signed and verified; no arbitrary HTTP callbacks, all data returns directly in the API response.
Support
You can email us at support@wpcommandcontrol.com for support.
Installation
- Install the WP Command and Control plugin either via the WordPress.org plugin directory, or by uploading the plugin files to your server.
- Activate the plugin.
- Sign up for an account at wpcommandcontrol.com — your site is added automatically once the plugin is active.
Frequently asked questions
Do I need an account to use this plugin?
Yes. The plugin is the on-site agent; it connects to your WP Command and Control dashboard at wpcommandcontrol.com, where you view status and trigger actions across all your sites.
What happens when I activate the plugin?
It registers the site with your WP Command and Control account automatically — there’s no separate manual “add site” step.
What WordPress and PHP versions are supported?
WordPress 6.0 or later, and PHP 7.4 or later.
Is my site data sent to a third party during a backup?
No. Backups run entirely on your own server. The plugin doesn’t push files off-site itself — your dashboard account retrieves the finished backup archive from your site over an authenticated connection when you request it.
How are requests to my site authenticated?
Every request is signed with HMAC-SHA256 and verified against your site’s API key before anything runs. There are no unauthenticated or “secret URL” style endpoints.
Does this plugin slow down my site?
No. The plugin only runs when your dashboard sends it a signed request — it doesn’t add any always-on frontend or admin overhead.
Changelog
2.3.8
- Raised minimum requirements to WordPress 6.0 and PHP 7.4
- Resumable, batched full-site backups — backups now run as bounded steps with progress reporting instead of one long request, fixing timeouts on constrained hosting
- New authenticated backup archive retrieval and cleanup actions
- Unreadable files are now skipped and counted during a backup instead of failing the whole job
- Timeout guard for stalled backup jobs
- Paginated file manifest support (
get_files) for large sites - Hardened HMAC request verification (constant-time comparison)
- Sanitized and allowlisted filesystem credential handling
- Denylisted privilege-escalation-relevant settings from remote option changes
- Path-traversal fix on remote file reads, contained to the WordPress install directory
- Corrected content size reporting (database + core size)
- Added a
current_user_can('manage_options')capability gate across the whole remote API
2.3.7
- Enhanced WordPress 5.5+ native auto-update integration
- Improved plugin and theme auto-update management
- Fixed install_plugin endpoint for better JSON response handling
- Added comprehensive input validation and error handling
- Enhanced security with improved HMAC verification
- Better compatibility with modern WordPress versions
- Fixed fatal errors and improved plugin stability
2.3.6
- Improved auto-update status reporting
- Enhanced WordPress core update controls
- Better plugin management functionality
- Security improvements and bug fixes
2.3.5
- PHP 8.x compatibility
2.0
- New options page. Intergrated Security and Malware scans provided by Sucuri
1.25
- Improved security
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
Best WP Command and Control Plugin alternatives
All auto-update plugins →
FAQ
WP Command and Control Plugin: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Oct 6, 2026
Is WP Command and Control Plugin free?
Yes. WP Command and Control Plugin is free to download and use from the official WordPress.org plugin directory.
Is WP Command and Control Plugin safe to use in 2026?
WP Command and Control Plugin is a solid plugin choice in 2026, with a few things worth checking first. It runs on 10+ sites and was last updated 1 month ago, and scores 62/100 on our health check.
How many websites use WP Command and Control Plugin?
WP Command and Control Plugin is active on 10+ WordPress websites and has been downloaded 13,615 times since it launched in May 2013. It was downloaded 107 times in the last 30 days.
Does WP Command and Control Plugin work with WordPress 7.1?
Yes. The developer has tested WP Command and Control Plugin up to WordPress 7.1.2, the latest release. It requires WordPress 6.0 or newer.
What PHP version does WP Command and Control Plugin need?
WP Command and Control Plugin requires PHP 7.4 or higher. Most hosts run PHP 8.x today, so it works on any modern WordPress hosting.
When was WP Command and Control Plugin last updated?
The latest version, 2.3.8, was released on August 31, 2026 (1 month ago).
Who makes WP Command and Control Plugin?
WP Command and Control Plugin is developed and maintained by supersoju.
What are the best alternatives to WP Command and Control Plugin?
The most popular alternatives to WP Command and Control Plugin are Disable auto-update Email N… (30K+ installs), WP Auto Updater (7K+ installs) and WP Plugins&Themes Auto Upda… (300+ installs).
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card
