WordPress Manager finds the WordPress installs already on your server — walking each registered website root a few levels deep, so installs in a subdirectory are picked up too — and gives each one a management page. Per site you get an overview with version and update status, and tabs for plugins, themes, users, WP-Cron and database tools.

Plugins and themes can be installed from a slug, updated, activated or deactivated, deleted, and switched to auto-update. Core can be updated on its own or together with everything else, and core verify-checksums will tell you whether core files have been modified. Maintenance mode toggles on and off, the object cache flushes, and search-replace runs with a dry-run option that is on by default — useful after a domain change. WP-Cron events can be listed and run manually. On the database side you can export a dump and run an optimize pass. Users can be listed and a password reset issued.

Every WP-CLI invocation goes through the root agent, which immediately drops to the site's own Linux owner with runuser before running wp. That is deliberate: running as root would leave root-owned files scattered through the web root. The agent kills a command after about thirty seconds, so long-running work — a full update pass, for instance — is dispatched as a background job you watch through a live console instead. Admins and tenants call exactly the same actions; each one resolves its target through a single ownership check, so a tenant reaches only the sites they own. The plugin manages existing installs and requires WP-CLI on the server (installed by install.sh); it does not create new WordPress sites for you.

Availability: Included at no extra cost with the Profesional and Enterprise plans. On the Free and Starter plans it is available per server as a monthly subscription ($4.99/month) or a one-time purchase ($49).

Min Panel Version

1.0.0

Platform

Ubuntu 20.04+ / 22.04+ / 24.04+

License

Paid license required

Permissions

websites.manage databases.manage

VinzaPanel handles installation automatically via the Vinza Store. Make sure the panel agent has internet access to download dependencies.

1.0.6 — Clone to staging (files + database + URL search-replace) to another of your websites or a subdirectory, using App Installer 1.0.8's clone. Security tab: reversible hardening switches with their current state (disable XML-RPC, block PHP in uploads — an nginx per-site rule or uploads/.htaccess on apache/OpenLiteSpeed —, DISALLOW_FILE_EDIT, wp-config.php 0440, hide the WordPress version) and a vulnerability scan of core, plugins and themes against WPScan (admin-set API token, stored encrypted; results cached a day). One-click WP admin login (single-use link, 5 minutes) and a WP_DEBUG switch (errors to debug.log, never displayed). 1.0.5 — Two jobs started at the same time both show their results (one answered Unknown job). 1.0.4 — WP-CLI's PHP extensions are installed for the PHP already in use, and the system `php` is put back if apt moved it. 1.0.3 — WP-CLI runs on the site's PHP version instead of the system default. Export to backup now works for Google Drive and S3 (the dump is read through the agent as its owner) and only offers destinations that are actually connected. 1.0.2 — Background jobs (updates, installs, checksum verify, search-replace, cron, optimise) report their result again — the job's owner was stored as text and compared with the account id, so every poll answered "Unknown job". Search-replace runs (it passed an option WP-CLI does not have, --report-changes-only) and refuses values starting with "-", which WP-CLI would read as options. 1.0.1 — Fixed the page not loading its sites (a script error stopped it before the list was fetched). 1.2.0 — WP-CLI now runs as each site’s Linux owner through the root agent (no more root-owned files in the web root, no subprocess from Django). Subdirectory installs are discovered. Long updates run as background jobs with a live console. Rebuilt admin UI: search, filters, per-site tabs (Overview/Plugins/Themes/Users/Cron/Tools).

Use VinzaPanel's REST API to download and install this app programmatically.

Download app files

HTTP

POST /plugins/api/download/wordpress-manager/
Content-Type: application/json

{
  "panel_version": "1.0.0"
}

Example response

JSON

{
  "success": true,
  "plugin_id": "wordpress-manager",
  "version": "1.0.6",
  "download_url": "..."
}