It covers the 30+ items that can be automated. The remaining 50 are human-judgment items \u2014 has the rollback been tested? has the AI Connectors policy been signed off? has the on-call rota been confirmed? \u2014 that no plugin can verify. The dashboard links to the printable checklist for the full audit.<\/p><\/dd>\n\n<\/dl>\n\n\n
1.0.7<\/h4>\n\n\n- Plugin review compliance.<\/strong> Managed-host detection no longer assumes a hardcoded server filesystem layout \u2014 Plesk is now detected from the
DOCUMENT_ROOT<\/code>\/SERVER_SOFTWARE<\/code> environment signals and the control-panel install directory instead of matching ABSPATH<\/code> against a fixed vhost path. No functional change: the same hosts are detected, and detection stays open_basedir<\/code>-safe. Contributors list corrected to the plugin's WordPress.org account. The legacy-migration success notice now signals via a transient set by the nonce-verified migrate action instead of a URL parameter, resolving the Plugin Check nonce-verification warnings (and making the notice reliably display).<\/li>\n<\/ul>\n\n1.0.6<\/h4>\n\n\n- WordPress.org submission readiness.<\/strong> All Plugin Check ERRORs and most WARNINGs resolved: short PHP tags converted, direct filesystem operations refactored to use WP_Filesystem, $_POST\/$_SERVER inputs unslashed before sanitization, readme tags trimmed to 5, build script now excludes hidden files. No functional changes \u2014 same audit, same autofixes, same snapshot safety net. Ready for the WP.org plugin directory review.<\/li>\n<\/ul>\n\n
1.0.5<\/h4>\n\n\n- Distribution improvements. The self-hosted GitHub variant gained automated release delivery; the WordPress.org distribution uses WordPress.org's native plugin-update channel.<\/li>\n<\/ul>\n\n
1.0.4<\/h4>\n\n\n- Fix:<\/strong> Plesk detection now works under
open_basedir<\/code> restrictions. v1.0.2's is_dir(\/usr\/local\/psa)<\/code> check silently failed when the vhost's open_basedir<\/code> excluded \/usr\/local\/psa\/<\/code>. New detection uses ABSPATH (\/var\/www\/vhosts\/...<\/code>), DOCUMENT_ROOT, and SERVER_SOFTWARE signals \u2014 all open_basedir-safe.<\/li>\n- Grading curve relief during major-release week.<\/strong> Within 14 days of a WordPress major release, plugins and themes still tested against the immediately-prior major (6.9 when current is 7.0) are downgraded from WARN to INFO and excluded from the score. Vendors typically catch up within this window; penalizing every site on day one was unfair. Auto-expires 14 days after the release date.<\/li>\n
- Accept-as-known-risk override mechanism.<\/strong> Each warn\/fail finding now has an \"Accept as known risk\" link. Click to acknowledge \u2014 the finding still appears in the report (with an \"Accepted risk\" tag) but is excluded from the readiness score calculation. Real enterprise audit pattern, fully reversible via \"Un-accept\" button.<\/li>\n<\/ul>\n\n
1.0.3<\/h4>\n\n\n- Fix:<\/strong> Re-run audit spinner appearing on page load and never stopping. The v1.0.1 spinner icon used the HTML
hidden<\/code> attribute to start hidden, but the plugin's .wp7rc-btn__icon<\/code> class set display: inline-block<\/code> which silently overrode [hidden]<\/code>. The spin animation then ran constantly. Added an explicit [hidden]<\/code> CSS override so the spinner stays hidden until the button is clicked.<\/li>\n<\/ul>\n\n1.0.2<\/h4>\n\n\n- Fix: Custom-code scan no longer false-positives on common vendor plugins.<\/strong> The previous scope included Advanced Custom Fields, WPGraphQL, Two-Factor, page builders, and other widely-installed plugins that ship their own WordPress 7.0 compatibility updates. Flagging their internal code as if it were user-owned created noise. The vendor-skip list now covers 30+ common plugin slugs across page builders, SEO, ACF, GraphQL\/headless, security, cache, forms, translation, and backup.<\/li>\n
- Fix: Backup-plugin check now detects managed-host snapshot systems.<\/strong> Previously warned even on Plesk \/ WP Engine \/ Kinsta \/ Pantheon \/ Pressable \/ SiteGround \/ Flywheel \/ GoDaddy Managed WordPress \/ cPanel \/ DreamHost installs where host-level backups are the standard. The check now detects 10 managed-host platforms and reports PASS with \"host-level snapshots assumed\" instead.<\/li>\n<\/ul>\n\n
1.0.1<\/h4>\n\n\n- Fix:<\/strong> OPcache detection no longer false-positives on hardened hosts. The previous check used
function_exists('opcache_get_status')<\/code>, which returns false on Plesk \/ CloudLinux \/ managed-WP servers that disable opcache_get_status<\/code> via disable_functions<\/code> for security. The new check uses extension_loaded('Zend OPcache')<\/code> as the primary signal, falling back to detailed memory stats only if the introspection function is available. OPcache now correctly reports PASS on Plesk and CloudLinux hosts.<\/li>\n- UX:<\/strong> Re-run audit button now uses a proper event listener (was inline
onclick<\/code> which felt unresponsive when the audit state was unchanged), with a spinning \u21bb icon during reload.<\/li>\n- UX:<\/strong> \"Apply N available fixes\" button replaced with a positive \"All available fixes applied\" green pill when there are no fixes left, instead of just disappearing.<\/li>\n
- UX:<\/strong> \"Apply all\" dialog now shows a clear bullet list of what will change.<\/li>\n
- UX:<\/strong> Fix-results report panel appears below the action buttons after Apply-all, listing every fix's outcome with its full error message inline. No more aggregate \"N applied \u00b7 M failed\" without context.<\/li>\n
- Discoverability:<\/strong> All outbound links to champlinenterprises.com now carry UTM parameters for attribution. \"No telemetry\" promise unchanged \u2014 UTMs are appended to URLs only, no data sent from your server.<\/li>\n
- Discoverability:<\/strong> Tasteful \"Star on GitHub\" band added to the dashboard footer. Self-reported install signal; fully opt-in.<\/li>\n
- Docs:<\/strong> Added README.md, SECURITY.md, CONTRIBUTING.md to the GitHub repo for community standards.<\/li>\n<\/ul>\n\n
1.0.0<\/h4>\n\n\n- Initial release.<\/li>\n
- 30+ automated checks across 9 categories (server, database, WP core, plugins, themes, custom code, headless, multisite, security).<\/li>\n
- Premium visual dashboard with animated readiness-score donut and color-coded findings.<\/li>\n
- Print-friendly stylesheet \u2014 browser print dialog produces a clean PDF report.<\/li>\n
- Autofix support for 4 common issues<\/strong> \u2014 each fix is one click, idempotent, and reversible:\n\n
\n- Disable major auto-updates during the WordPress 7.0 launch window<\/li>\n
- Lock down in-admin file editing (drops a mu-plugin defining DISALLOW_FILE_EDIT)<\/li>\n
- Update all plugins to their latest stable releases (uses WordPress core's own Plugin_Upgrader)<\/li>\n
- Install and activate the official Two-Factor plugin from WordPress.org<\/li>\n<\/ul><\/li>\n<\/ul>","raw_excerpt":"Premium pre-flight (and post-flight) audit for the WordPress 7.0 upgrade. 30+ automated checks. Visual readiness score. Free.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/316463","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=316463"}],"author":[{"embeddable":true,"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/cnckevin"}],"wp:attachment":[{"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=316463"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=316463"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=316463"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=316463"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=316463"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=316463"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}