WordPress site management command. Site status, plugin/theme management, security scan, and bulk updates.

Required Tools

• Bash (badi wp commands)

Procedure

Step 1: Check the Site Registry

badi wp list

If the user has registered sites, show them; otherwise suggest adding one:

badi wp add [alias] [url] --method [wp-cli|rest]

Step 2: Site Status

badi wp status [alias]

Shows:

• WordPress version
• Active theme
• Plugin count + pending updates
• Core update status

Step 3: Detailed Review (optional)

badi wp plugins [alias]       # Plugin list
badi wp themes [alias]        # Theme list

Step 4: Security Scan

badi wp security [alias]

6-point check:

• WP Core freshness
• Plugin updates
• Inactive plugins (removable)
• Is WP_DEBUG off
• Is DISALLOW_FILE_EDIT defined
• The admin user and the admin count

Step 5: Bulk Update (Careful!)

badi wp update [alias] all                  # Core + plugins + themes (120s timeout)
badi wp update [alias] core                 # Core only
badi wp update [alias] plugins              # Plugins only
badi wp update [alias] themes               # Themes only
badi wp update [alias] [plugin-name]        # A specific plugin

Test on staging; take a backup for production.

Step 6: Follow-up Actions

If security issues exist:

• /secret-scan — also search for secrets on the app side
• /ssl-check [domain] — SSL state
• /dns-audit [domain] — Email security

Connection Methods

| Method | Scenario | |--------|----------| | --method wp-cli --path /var/www/ | Local WordPress install | | --method wp-cli --ssh user@host | SSH + remote WP-CLI | | --method rest | REST API (limited with an interactive password) |

For an application password: WP Admin → Users → Profile → Application Passwords

Example Usage

User: /wp
Assistant: Your registered WP sites: [list]
         Which one shall we work on?

User: blog
Assistant: [runs badi wp status blog]
         [Interprets the results, suggests a security scan]