The Plesk WP Toolkit 5.6 Release – What’s New

Smart Updates now included in WP Toolkit Deluxe
The Plesk WP Toolkit v5.6 is now officially available for our millions of users worldwide! Let’s dive inside and see what’s new:

Plugin Blocklist

WordPress plugins are written by enthusiasts and professionals with vastly different skill levels, so it’s natural that plugin quality varies dramatically from plugin to plugin. This causes WordPress-oriented hosters to look for ways of restricting certain plugins, whether because they’re putting a larger-than-needed load on the server, interfere with other services, or simply aren’t secure enough. To help hosters with this, WP Toolkit introduces a server-wide plugin blocklist that does just that:

WordPress Toolkit 5.6 1
Server administrators can put plugin slugs (unique IDs) in a comma-separated list, preventing site admins from installing, uploading, and activating these plugins through WP Toolkit:
WordPress Toolkit 5.6 2
Since plugins can be installed via other means (directly in WordPress, for example), WP Toolkit routinely scans for such plugins and automatically deactivates them whenever they’re found:
WordPress Toolkit 5.6 3

That’s not the end of this feature, though — we’re already working on adding email notifications about deactivated plugins, but they will arrive in future releases!

WordPress Core Checksum Verification

When malware infects WordPress sites, it can embed itself in .php files that make up WordPress core. Thankfully, these files aren’t supposed to be modified, so we can check if they were tampered with by comparing their md5 checksums with the reference checksums of original files provided by

If WP Toolkit finds any signs of trouble, it will warn the site admin, saying that something’s not right. At this point site admin can one-click reinstall WordPress core files, replacing the modified files with the non-modified originals:

WordPress Toolkit 5.6 5

Both checksum verification and WordPress reinstallation are done without loading WordPress itself for security reasons. Reinstallation should not affect any site data, but users will be prompted to create a backup before proceeding if they want (just in case).

Important note: this feature cannot check index.php, wp-config.php, or other similar files that contain installation-specific data and don’t have a reference checksum. Checking these files will require a different feature, and that’s a tale for another time.

WordPress In Plesk Dynamic List

The new Dynamic List introduced in Plesk Obsidian lacks some shortcuts to key WP Toolkit functions. This problem is now in the past, since WP Toolkit v5.6 adds a ‘WordPress’ tab on Dynamic List site cards where WordPress is installed, featuring these shortcuts:

This change should make Plesk users more comfortable with switching to Dynamic List by default. The one thing still missing in this integration is the ‘Install WordPress’ button, and we’re already working on adding it relatively soon.

Changes Under The Hood

There are several cool features introduced in WP Toolkit v5.6 that require a special mention:

  • It’s déjà vu time: wp-cli utility was updated again, this time to version 2.5. With this change, all WP Toolkit features, including cloning, should fully work on PHP 8 without any issues. Unfortunately, this update required us to drop support for websites working on PHP 5.4 and PHP 5.5. The websites themselves will continue to work, but WP Toolkit won’t be able to manage them. As a sidenote, error handling and reporting related to PHP 8 was also improved.
  • After wp-cli was updated to the latest version in WP Toolkit v5.3, we’ve learned that several useful wp-cli commands were split into a separate bundle. Users have been asking us to include this bundle, because these commands are helpful, so wp-cli-bundle is now shipped together with wp-cli utility.
  • You can now delete WordPress sites through CLI using the new —remove command. I’d like to remind everyone that with this great power comes great responsibility, so make sure you know what you’re doing — it no longer asks for your confirmation!

Various Improvements

WP Toolkit v5.6 introduces a variety of smaller changes that should improve quality of life for every WP Toolkit user. Let’s quickly go over them:

  • You can already filter out entries in WP Toolkit action log but finding the context (i.e. what happened before or after) can be a bit of a pain. To remedy this, we’ve added a special ‘Show in context’ icon to the right of each filtered entry. Clicking this icon resets the filter and shows you your entry in the context of the whole log:
  • ‘Hotlink protection’ is a previously-added security measure that isn’t strictly a security measure. This might sound hilarious, but it caused a number of confusions (like product images not displayed in email notifications sent by WooCommerce plugin). The cause is simple: certain people tend to enable all security measures without realizing that some of these measures are only needed in specific cases, and some of these measures are actually tools, like our Hotlink example. To avoid these issues, we have moved this option from ‘Check security’ window to a separate switch:
WordPress Toolkit 5.6 8
  • All e-mail notifications sent by WP Toolkit on Plesk now include server hostname in the message subject for easier identification. This information is part of the notification template, so server admins are free to modify or remove it.
  • The Domain management link in Plesk has been renamed for clarity:
  • Cloning (and, subsequently, Smart Updates) now properly supports most popular caching plugins. To be more specific, most caching plugins were already supported and worked just fine, but we’ve found a couple of plugins that misbehaved. Not only have we made these rogue plugins work correctly after cloning, but we’ve also made the cloning procedure more robust in general, so there might be some positive side effects.
  • WP Toolkit now automatically assigns the corresponding database to a site after it’s installed or cloned on Plesk for a better user experience. This change also works with the restoration of backups containing WordPress sites in Plesk.
  • The Update process that involves multiple items now works significantly faster due to skipping many unnecessary operations. On a related note, Smart Update procedure itself also works a bit faster in a number of cases.
  • Speaking of Smart Updates, detailed information is now provided about which .htaccess customizations prevent WP Toolkit from creating a proper site clone.

Future Plans

This article already mentions some of our plans for the future, but it’s too early to reveal all our cards. Rest assured WP Toolkit v5.7 will include both improvements of existing features and new, exciting functionalities. Until then, thank you for your attention and see you next time!

No comment yet, add your voice below!

Add a Comment

Your email address will not be published. Required fields are marked *


  • Yes, please, I agree to receiving my personal Plesk Newsletter! WebPros International GmbH and other WebPros group companies may store and process the data I provide for the purpose of delivering the newsletter according to the WebPros Privacy Policy. In order to tailor its offerings to me, Plesk may further use additional information like usage and behavior data (Profiling). I can unsubscribe from the newsletter at any time by sending an email to [email protected] or use the unsubscribe link in any of the newsletters.

  • Hidden
  • Hidden
  • Hidden
  • Hidden
  • Hidden
  • Hidden

Related Posts

Knowledge Base

Plesk uses LiveChat system (3rd party).

By proceeding below, I hereby agree to use LiveChat as an external third party technology. This may involve a transfer of my personal data (e.g. IP Address) to third parties in- or outside of Europe. For more information, please see our Privacy Policy.