Eric Mann

DGXPCO (Digital Guarantees for eXplicitly Permitted Core Operations) is a proof-of-concept cryptographic signature verification utility for WordPress software updates. The plugin will source manual (offline) signatures for WordPress core updates and prevent the application from updating unless the contents of the update payload are verified with a remote signature.
This provides a second source of truth for the integrity of WordPress updates beyond the MD5 content hash supplied in the header from the WordPress update server. If that server were ever breached, it’s unlikely the server hosting the signatures of the files was also breached. If the signatures ever fail to validate, you can know your site was protected from an attack.

DGXPCO

Matthias Pfefferle

Marko Heijnen

Gaelle Despoulain

IONOS

1&amp;1

The Site Update Manager keeps your WordPress and all its themes and plugins up to date. It all works automatically and in the background. You can customize the update settings, if you prefer. The changelog provides an overview and details on all installed updates.

Auto Updater

Update WordPress, themes and plugins to improve stability and security.

DGXPCO vs Auto Updater