=== WP Umbrella: Security Backup Restore & Monitoring === Contributors: gmulti, truchot, wplio Tags: monitoring, backups, backup, restore, update Requires at least: 5.8 Tested up to: 7.0 Requires PHP: 7.4 Stable tag: v2.27.0 License: GPLv2 or later License URI: http://www.gnu.org/licenses/gpl-2.0.html Everything you need to sell WordPress maintenance and manage multiple sites effortlessly: backup, update, uptime monitoring, and security. == Description == WP Umbrella empowers agencies and WordPress developers to master WordPress maintenance, and manage multiple sites effortlessly. Key features include: * Dashboard: Monitor, update, and backup all your sites from a single dashboard. * Automated Cloud Backup: Secured, incremental backup with GDPR compliance, ensuring your data's safety and easy backup restoration. WP Umbrella provide with GDPR Backup. * One-Click Updates: Update core, themes, and plugins, maintaining security and performance. Update Rollback available. Exclude update and ignore updates too. * Uptime Monitoring: Stay informed with alerts on uptime, downtime, and site performance, including Google Page Speed monitoring. * Error Tracking: Monitor PHP errors to maintain a safe website. * Security monitoring: monitor vulnerabilities and security metrics. * Reports: automate your reporting on update, GDPR backup, uptime, etc. WP Umbrella is the best alternative to ManageWP, MainWP, WP Remote, InfiniteWP and ModularDS. == WordPress Management Features == * Multiple Sites Management: manage and log into your WordPress sites with a unified dashboard. * Update Management: Bulk update plugins, and themes in 1-click. Rollback included. * Backup and Restoration: automated and scheduled backups. Backup WordPress now! * Comprehensive Monitoring: From uptime to WordPress errors. = Premium / Freemium = Create an account and enjoy 14 day trial with all features (backup, uptime monitoring, safe update, etc). Then you only have access to our health check. == Installation == = Minimum Requirements for WP Umbrella = * WordPress 5.8 or greater * PHP version 7.4 or greater == Frequently Asked Questions == = Why do I need WP Umbrella ? = WP Umbrella is an all-in-one tool for managing multiple WordPress sites. Save time with centralized backup, monitoring, updates, and restoration. Perfect for developers and agencies managing multiple sites. = Is WordPress maintenance needed? = Routine maintenance keeps WordPress sites secure, updated, and optimized. WP Umbrella makes site management simple with automated backups, uptime monitoring, and bulk updates. = How does WP Umbrella handle backups? = WPumbrella offers GDPR-compliant backups on Google Cloud servers in Europe. Our GDPR backup system store your backups during 50 days. Our GDPR backups are incremental and the backup encrypted. = How can I bulk update WordPress ? = WP Umbrella’s update manager lets you update all plugins, themes, and WordPress core across multiple sites in one click. Rollback, Enable or disable automatic updates as needed. = What do you monitor? = WP Umbrella includes uptime and downtime alerts, performance checks, and Google PageSpeed insights. Get notified instantly for any site issues, allowing quick resolutions. Read our guide about [WordPress monitoring!](https://wp-umbrella.com/blog/monitoring-wordpress-the-ultimate-guide/) for more info. = How can I manage multiple WordPress sites? = We suggest you to read our guide about [How to manage multiple WordPress sites easily](https://wp-umbrella.com/blog/manage-multiple-wordpress-sites-one-dashboard/) = Does WP Umbrella work with multisite ? = Yes, WP Umbrella fully supports Multisite networks, allowing backups, updates, and monitoring across all sites in a network. = How are you better than ManageWP? = WP Umbrella is faster, and more reliable than alternatives like ManageWP, MainWP, and WP Remote. Features include accurate monitoring (no false positives), GDPR backups, and a user-friendly dashboard. = How can I report security bugs? = You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team helps validate, triage and handle any security vulnerabilities. [Report a security vulnerability.]( https://patchstack.com/database/vdp/dc85fd1d-7634-4195-bc42-b2f50c1aaf5b ) == Changelog == = 2.27.0 (08-10-2026) = - Security: fixed a cross-site request forgery vulnerability. - Added: WP Umbrella now reports the code that runs on your site without ever showing up in your plugin list: must-use plugins, drop-ins, and plugin folders hidden from the plugins screen. - Added: files edited from the WordPress plugin editor are now recorded in your Activity Log. - Improved: suspicious administrator accounts are now reported with a confidence level, so a single weak signal no longer raises an alert. - Improved: the protection of your uploads folder is now verified on your live site, so sites served behind a reverse proxy no longer show protections that were not actually applied. - Fixed: on sites where WordPress is installed in a subfolder, the .htaccess hardening could not be turned on and wrongly reported the file as not writable. - Improved: the security headers are now set by your server, so they still apply on pages delivered by a cache plugin. - Improved: code quality improvements under the hood. = 2.26.2 (08-07-2026) = - Fixed: some sites stopped syncing with WP Umbrella and appeared as disconnected when another plugin reported its update information in an unexpected format. - Fixed: on sites where the uploads folder is a symbolic link, media files were missing from backups. Those sites are now backed up in full. - Added: backups now work on Pantheon, whose read-only file system previously prevented them from running. - Fixed: some plugins caused PHP fatal errors during our sync because our plugin loaded the admin screens too early. - Fixed: a recurring PHP error was reported once and then went unnoticed. Recurring errors are now reported again. - Improved: clearer message when your site cannot reach WP Umbrella while connecting it. = 2.26.1 (07-30-2026) = - Added: new security checks that detect suspicious administrator accounts and list their active application passwords. - Improved: the uploads folder is now protected against running malicious files. - Improved: comment spam from known attacker IP addresses is blocked before it reaches your site. - Improved: repeated failed login attempts now trigger progressively longer lockouts. - Fixed: some files could be wrongly excluded from backups because of their file name. - Fixed: updates no longer leave temporary backup folders behind, and updates that require a newer WordPress or PHP version are clearly identified instead of failing. - Improved: smaller fixes to the Activity Log, database optimization, and PHP warnings. = 2.26.0 (07-24-2026) = - Improved: security protections now record the attacks they stop (blocked login attempts, XML-RPC calls, and user enumeration scans) in your Activity Log, so you can see what WP Umbrella blocked for you. - Improved: strengthened the security of the connection between your site and WP Umbrella. - Added: an expanded .htaccess hardening option, validated safely before it is applied to your site. - Fixed: a restoration that only partially imported the database is no longer reported as successful. - Improved: backups now gather more information while building the backup script, so we can detect upfront what would prevent a backup from completing. = 2.25.1 (07-15-2026) = - Added: a security option to block installing, updating, and editing plugins and themes from the WordPress admin. - Added: a security option to disable XML-RPC, reducing a common attack surface on your site. - Added: security checks. - Fixed: updated the bundled task scheduler so it no longer triggers PHP 8.4 and 8.5 deprecation notices, keeping your debug log clean and preparing for future PHP versions. = 2.25.0 (07-07-2026) = - Added: security hardening options you can enable per site from the dashboard: hide the WordPress version, block user enumeration, mask login error details, disable the file editor, and add recommended security headers. - Fixed: updates for some premium plugins could fail silently even with a valid license; they now install reliably. - Fixed: reconnecting an already-paired site no longer creates a duplicate in your dashboard. - Fixed: improved interrupted backups. - Improved: backups adapt their pace to your server and stuck backups are detected sooner. - Improved: the Activity Log now tracks WordPress 7.0 AI configuration changes. = 2.24.4 (06-23-2026) = - Added: a pre-restore check that warns you when the saved database settings do not match your site's current database, so a restoration cannot silently target the wrong database. - Fixed: one-click plugin and theme updates now go through reliably on sites protected by HTTP Basic Authentication, behind LiteSpeed, or with a strict maintenance setup, where they could previously stall. - Fixed: restoring or cloning a site no longer fails when the database uses a newer MySQL 8 collation. - Fixed: backups now locate your site's content correctly on installations that use a custom content directory. - Fixed: during bulk updates, one plugin's update can no longer be matched against another plugin's version. - Improved: SiteGround integration = 2.24.3 (06-10-2026) = - Fixed: updating several plugins in a row no longer fails after the first one on some hosting setups. - Fixed: updates are no longer reported as failed when the plugin or theme was already at the latest version. - Fixed: broken link highlighting now works on sites served from a page cache. - Improved: premium plugin and theme updates are more reliable. - Improved: when no update is actually available for a plugin or theme, the task now ends quickly with a clear explanation. - Improved: a working site is no longer rolled back when an update finishes without changing the version. - Improved: failed updates are reported faster, with a clearer explanation of the most likely cause. - Improved: connecting a site now surfaces PHP errors detected on it, to make troubleshooting easier. - Improved: clearing the cache from WP Umbrella now also flushes Redis and Memcached object caches. Full changelog available [Here!](https://wp-umbrella.com/change-log/)