Eric Mann

DGXPCO (Digital Guarantees for eXplicitly Permitted Core Operations) is a proof-of-concept cryptographic signature verification utility for WordPress software updates. The plugin will source manual (offline) signatures for WordPress core updates and prevent the application from updating unless the contents of the update payload are verified with a remote signature.
This provides a second source of truth for the integrity of WordPress updates beyond the MD5 content hash supplied in the header from the WordPress update server. If that server were ever breached, it’s unlikely the server hosting the signatures of the files was also breached. If the signatures ever fail to validate, you can know your site was protected from an attack.

DGXPCO

Jeff Sherk

DEPRECATED: As of WP v5.5 this plugins functionality is included in WP Core and this plugin is not required anymore. If you are running WP v5.5 or greater, you can de-activate and delete/remove this plugin. This plugin will still continue work fine with versions of WordPress less than v5.5.
WordPress will let you install a NEW plugin or theme from a zip file, but it does NOT allow you to upgrade them from a zip file. If you try to upgrade from a zip file, you will get an error message that says “destination already exists” and the upgrade will fail. WordPress will not allow you to upgrade from a zip file.
Update Theme and Plugins from Zip File will allow you to easily upgrade from a zip file, avoiding the “destination already exists” error message.
There is also an option to create a backup copy of the old plugin or theme, in case there is a problem with the new version.

Update Theme and Plugins from Zip File

Thanks, works great!

DEPRECATED: As of WP v5.5 this plugins functionality is included in WP Core and this plugin is not required anymore. Quickly and easily upgrade plugin …

DGXPCO vs Update Theme and Plugins from Zip File