cPanel's wp-toolkit¶
Start here when managing WordPress sites from cPanel. cPanel's wp-toolkit is useful for inventory, updates, Smart Updates, cloning, backups, security hardening, integrity checks, and basic site lifecycle tasks.
Availability can vary
wp-toolkit features can vary by server, cPanel version, account type, and Fused-side configuration. If a button or setting is missing, contact Fused before improvising on a live site.
Open wp-toolkit¶
- Log in to cPanel.
- Search for
wp-toolkitorWordPress Management. - Open the wp-toolkit and review the detected WordPress installations.
Before changing anything, confirm the wp-toolkit entry matches the correct domain, path, and production or staging site.
wp-toolkit Tasks¶
-
Add or remove sites
Install a new WordPress site, attach an existing site, detach wp-toolkit management, or remove an install.
-
Updates
Update WordPress core, plugins, themes, and language packs from cPanel.
-
Smart Updates
Let wp-toolkit test updates on a temporary clone before changing the live site.
-
Cloning and staging
Clone a site for testing and understand when not to push a clone over live data.
-
Backups
Create wp-toolkit backups before risky work and understand when cPanel backups are safer.
-
Security hardening
Review wp-toolkit security recommendations and apply the safer items first.
-
Integrity checks
Check for missing or modified WordPress core files and reinstall core when appropriate.
wp-toolkit And WP-CLI¶
All Fused users can also use WP-CLI from SSH. Use wp-toolkit when a visual cPanel workflow is clearer, and use WP-CLI when a precise terminal command is faster or easier to repeat.
Run WP-CLI commands from the WordPress document root, usually the folder that
contains wp-config.php.
cd ~/public_html
wp core version
wp option get siteurl
| Need | Use cPanel's wp-toolkit | Use WP-CLI |
|---|---|---|
| Inventory | To see detected sites across the account. | To confirm one site from its document root. |
| Updates | To review update status visually or use Smart Updates. | To list and apply specific core, plugin, and theme updates. |
| Cloning | To create a cPanel-managed clone. | To script file copies, database exports, imports, and URL replacements. |
| Backups | To create a quick restore point before wp-toolkit work. | To export the database and capture plugin/theme inventories. |
| Security | To apply cPanel-managed hardening rules. | To audit admins, update settings, and set WordPress config values. |
| Integrity | To run a guided core integrity repair. | To verify and reinstall WordPress core from the terminal. |
When wp-toolkit Is The Right Tool¶
| Task | Use wp-toolkit when |
|---|---|
| Inventory | Several WordPress sites live under one cPanel account. |
| Routine updates | The site is backed up and the update scope is clear. |
| Smart Updates | The site needs safer update testing and the feature is available. |
| Cloning | A staging copy is needed before plugin, theme, PHP, or design work. |
| Security | Common hardening items need review from cPanel. |
| Integrity | Core files may be missing, corrupted, or unexpectedly modified. |
When To Slow Down¶
Do not rush wp-toolkit operations when:
- The site is an active store, membership site, booking system, or portal.
- New orders, users, form entries, or comments are being created.
- The staging copy is older than the live site.
- The site uses custom code or a private theme.
- The destination folder already contains another application.
- The rollback plan is unclear.
For those sites, create a backup, schedule a maintenance window, and test on a clone before touching production.
Related WordPress Guides¶
-
Maintenance checklist
-
Backups
-
Staging