Question
Are there any plans to integrate the functionality to manage security measures of the WordPress instance into the WP Toolkit CLI in Plesk?
Answer
Currently, there is no ETA regarding when it will be implemented, for now, the direction is chosen towards the REST API.
For now, the WP Toolkit REST API could be used instead, it is actively developing and offers a wide-spread number of functions.
To access the WP Toolkit API documentation, simply go to Tools & Settings > Remote API (REST) and click on WP Toolkit REST API link. The documentation will be available there, as well as usage examples and other info on WP Toolkit API.
The following alternatives are possible:
Considering that WP Toolkit in Plesk provides the capability to execute embedded "wp-cli" commands:
Utilizing wp-cli with third-party plugins that enhance the management of security settings for WP instances is also supported.
An example includes "wp sg," offered by a third-party plugin:
To install it on a server with Plesk hosting the domain with WordPress, replace the instance ID with the actual one corresponding to the required domain:
# plesk ext wp-toolkit wp-cli -instance-id 1 -- plugin install sg-security
To activate the plugin, execute the following command:
# plesk ext wp-toolkit wp-cli -instance-id 1 -- plugin activate sg-security
To apply a security measure, use the command below:
# plesk ext wp-toolkit wp-cli -instance-id 1 -- sg secure xml-rpc disable
For additional commands to adjust the security settings of the instance using the sg-security plugin, refer to the plugin documentation: