Eric Mann

DGXPCO (Digital Guarantees for eXplicitly Permitted Core Operations) is a proof-of-concept cryptographic signature verification utility for WordPress software updates. The plugin will source manual (offline) signatures for WordPress core updates and prevent the application from updating unless the contents of the update payload are verified with a remote signature.
This provides a second source of truth for the integrity of WordPress updates beyond the MD5 content hash supplied in the header from the WordPress update server. If that server were ever breached, it’s unlikely the server hosting the signatures of the files was also breached. If the signatures ever fail to validate, you can know your site was protected from an attack.

DGXPCO

Wilbrink Design

Due to security requirements it is very important to keep your WordPress site up-to-date. This plugin will auto update/upgrade WordPress Core, Themes, Plugins and Translations. Email notifications about WordPress updates will be disabled.

Automatic updates for WordPress without email notifications

Keep your WordPress site up-to-date and disable email notifications about WordPress updates.

DGXPCO vs Automatic updates for WordPress without email notifications