The WordPress Toolkit is Plesk’s dedicated WP management. It goes well beyond plain installing: staging environments, cloning, security scan, bulk updates, smart updates with pre-update backup. For serious WordPress sites, the clearly better choice over Softaculous.
Starting the Toolkit
In Plesk: left navigation → WordPress (its own menu item).
You’ll see a list of all WordPress installations under your account, with status.
Fresh WordPress installation
In the Toolkit: + Install.
Compared to a Softaculous install:
- The setup is similar (URL, admin account, etc.)
- But: the WP Toolkit automatically adds the site to Toolkit management — all the functions below become available
Recommendation: for WordPress, always the Toolkit, not Softaculous.
Adding an existing WordPress installation to the Toolkit
Did you install WordPress via FTP / SCP / manually?
Toolkit → Scan button → Plesk finds existing WP installations and adds them to Toolkit management.
Toolkit main view
Per WordPress installation you see:
- Site name and URL
- WordPress version
- Status (active / deactivated)
- Number of plugins/themes
- Security status
- Update availability
- Backup status
Plus quick actions: login, clone, stage, update, backup.
Logging in to WordPress (single sign-on)
Toolkit → site → Log In.
Plesk logs you into WP admin automatically without you having to enter the WP password. Works through Plesk’s owner privileges.
Staging environment
The classic use case: you want to test updates before applying them to the production site.
Toolkit → site → Clone for staging:
- Pick a staging subdomain (e.g.
staging.your-domain.com) - Plesk clones files and DB
- The staging site runs alongside the production site
- URL replacement happens automatically (
your-domain.com→staging.your-domain.com)
On staging: test updates, try out plugin configs. When everything fits:
- Sync data back to production (selectively: files only, DB only, everything)
The staging site sticks around — you can reuse it for the next test.
Smart updates
The classic update process:
- Make a backup
- Install the updates
- Test the site (manually)
- On failure: restore the backup
Smart updates automate this:
- The Toolkit clones a temporary test site
- Installs the updates on the test site
- The Toolkit tests the test site automatically (screenshot comparison before/after the update)
- If the tests pass: updates go to the production site
- If not: a notice, the test site stays for manual inspection
Enable it in the Toolkit settings. Applies to all WP sites under the account.
Bulk updates
If you have multiple WordPress sites:
Toolkit main view → select multiple sites → Update.
Updates run in parallel for all selected sites. Handy for web agencies.
Plugin and theme management
Centralized in the Toolkit, per site:
- Plugins: show all plugins, activate / deactivate / update / delete
- Themes: same
Advantage over the WordPress admin: bulk operations across multiple sites are possible.
Security scan
Toolkit → site → Security:
- WP config hardening (e.g. default salts changed?)
- File permissions correct?
- Directory indexing disabled?
- WP version header hidden?
One-click hardening: apply all recommendations.
Plus: a regular security scan in the background. On critical findings, a notification.
Maintenance mode
If you’re doing maintenance and the site should go offline temporarily:
Toolkit → site → Enable maintenance mode.
Visitors see the Plesk maintenance page instead of your site. You can work freely in the background.
Disable it with the same toggle.
Cloning for migration / multi-site
The classic use case: clone an existing site to a new domain.
Toolkit → site → Clone → target domain → URL replacement automatic.
Handy for:
- Domain changes
- Clones for sub-brands
- Test sites
Backups directly in the Toolkit
Toolkit → site → Backups → +.
- Files + DB
- Compressed
- To your web space or an external cloud
Restore: one click.
Plus: the standard Plesk backup covers everything anyway. The Toolkit backup is “per site” — faster for individual WP installations.
Settings you should set for every site
In the Toolkit, per site:
- Auto-updates: enable for plugins (security updates matter)
- Search engine indexing: disable on staging sites (otherwise Google indexes your test content)
- Debug mode: off in production
- Force HTTPS: on
- wp-config hardening: enable
Common pitfalls
Cloning doesn’t work — DNS error
When cloning to a new domain: DNS has to propagate first. Plesk sometimes doesn’t detect it. Open a ticket with us.
Smart update always reports “test failed”
Smart updates do a screenshot comparison. If the site is dynamic (sliders, date display), there will always be diffs.
Solution: adjust the update-fail threshold in the Toolkit settings.
Plugin update fails — file permissions
WP tries to write a file but lacks the permissions. Toolkit → Security → Repair file permissions.
A WP Toolkit update from Plesk deletes my custom theme files
Shouldn’t happen — the Toolkit only touches WordPress core and installed plugins/themes, not custom code in /wp-content/themes/<custom>/.
In case of loss: backup restore.
Frequently asked questions
Where do I find WP Toolkit logs? Plesk → Logs → WordPress Toolkit. Shows all actions, updates, clones.
Does the WP Toolkit work with multisite? Limited. The main site is well supported, sub-sites partially. For multisite setups, open a ticket.
Smart updates directly on the production site — risky? Smart updates test on a clone, then go to production. The risk is comparable to a manual update with a backup. For critical sites: make a backup beforehand anyway.
Toolkit license — does it cost extra? No. The WP Toolkit is included on our webhosting servers, no extra charge.
Page-by-page comparison of test site and live site? Plesk doesn’t have that directly. Tools like Diffchecker or Wave for visual comparisons.
Can I use WP-CLI?
Via SSH (included in every plan): wp plugin update --all etc. Plus the Toolkit exposes some WP-CLI actions directly.
Multiple WP sites on one domain — subdirectories? Yes. Each subdirectory gets its own WP installation, own DB, own Toolkit profile.
The WP Toolkit shows an outdated site — cache? Toolkit refresh: right-click the site → Refresh. Plus clear the browser cache.
What’s next
First login to Plesk
What you get after ordering, how to log in to Plesk for the first time and what to set up right away.
Plesk dashboard and navigation
How Plesk is structured: left navigation, domain list, tabs per domain, service plan limits. So you don't have to go hunting.
Domain overview and web space
What the domain detail page shows: document root, creating subdomains, DNS status, web space quota. So you know your way around your main domain.
File Manager in the browser
Upload files, edit them, set permissions — all in Plesk's built-in File Manager. When it's enough, and when FTPS is the better choice.