Eric Mann

DGXPCO (Digital Guarantees for eXplicitly Permitted Core Operations) is a proof-of-concept cryptographic signature verification utility for WordPress software updates. The plugin will source manual (offline) signatures for WordPress core updates and prevent the application from updating unless the contents of the update payload are verified with a remote signature.
This provides a second source of truth for the integrity of WordPress updates beyond the MD5 content hash supplied in the header from the WordPress update server. If that server were ever breached, it’s unlikely the server hosting the signatures of the files was also breached. If the signatures ever fail to validate, you can know your site was protected from an attack.

DGXPCO

Emil Gustafsson

Upperdog

When WordPress is updated, it re-installs wp-config-sample.php, readme files, and license files even though you may have deleted them before. This plugin automatically removes these files when WordPress is manually or automatically updated. It also removes these files when activating the plugin for the first time. Removing these files is not mandatory, but you may want to if you don’t want them to expose your WordPress version or if you just like to keep things neat and clean.
Files that are removed:
<ul>
<li>License files, both default and localized</li>
<li>Readme files, both default and localized</li>
<li>wp-config-sample.php</li>
<li>wp-admin/install.php</li>
</ul>
You may not want to install this plugin if you’re using a plugin or service to scans your site to verify checksums on the core files. When the removed files are missing it might result in warnings.
<h3>Manual installation</h3>
<ol>
<li>Upload the <code>wp-core-update-cleaner</code> directory to the <code>/wp-content/plugins/</code> directory.</li>
<li>Activate the plugin through the ‘Plugins’ menu in WordPress.</li>
</ol>

WP Core Update Cleaner

This plugin automatically removes some files in the root folder, like wp-config-sample.php, readme and license files, when WordPress is manually or au …

DGXPCO vs WP Core Update Cleaner