Build software better, together

roots / wordpress

Sponsor

Star

Automatically updated WordPress Composer package

wordpress composer wordpress-core wp-composer wp-packages

Updated Oct 28, 2026

roots / wordpress-core-installer

Sponsor

Star

A Composer custom installer to handle installing WordPress as a dependency

wordpress composer wordpress-composer wordpress-core wp-composer wp-packages

Updated Mar 22, 2026
PHP

roots / wordpress-full

Sponsor

Star

Automatically updated WordPress composer package (full version, with wp-content and themes)

wordpress composer wordpress-composer wordpress-core wordpress-full wp-composer wp-packages

Updated Nov 10, 2026

roots / wordpress-no-content

Sponsor

Star

Automatically updated WordPress composer package (version without wp-content)

wordpress composer wordpress-composer wordpress-core wp-composer wp-packages wordpress-no-content

Updated Oct 28, 2026

courtneyr-dev / wp-release-audit-method

Sponsor

Star

Test WordPress Betas and RCs so your results mean something — and keep your own plugin or theme ahead of the next release. Guides, scripts, CI, and agent skills.

testing wordpress wp-cli wordpress-plugin wordpress-development wordpress-theme phpunit quality-assurance gutenberg block-editor beta-testing github-actions wordpress-core playwright release-testing

Updated Nov 12, 2026
Shell

solidbunch / wordpress-core

Star

Composer-compatible package repository for WordPress core distributions for StarterKit project.

wordpress composer packages starter-kit wordpress-core

Updated Nov 10, 2026
JavaScript

doiftrue / wordpress-composer-repo

Star

Composer repository for WordPress core

wordpress wordpress-composer wordpress-core

Updated Nov 1, 2026
PHP

tc4dy / CVE-2026-119977-Toolkit

Star

CVE-2026-119977 – WordPress Core Upgrade-Window RCE (CVSS 8.1) | Red/Blue Team Toolkit. Predictable staging dir takeover, wp-config.php promotion, Bait MySQL proof, WAF origin discovery, rate-limited race oracle, admin shell deploy, version triage. Async, CI-tested. Only ethical & authorized use, stay legal.

wordpress proof-of-concept exploit blueteam redteam wordpress-vulnerability-scanner wordpress-core wordpress-vulnerability wordpress-vulnerable wordpress-cve wordpress-vuln wordpress-vulnerability-scan wordpress-vulnerabilities cve-2026-119977

Updated Nov 7, 2026
Python

mehmet-emir-eroglu / CVE-2026-119977

Star

Read-only local WordPress version assessment for CVE-2026-119977.

python wordpress rce wordpress-security vulnerability-detection toctou security-tool wordpress-core cve-scanner cve-2026-119977

Updated Nov 8, 2026
Python

composer-wordpress / full

Star

Automatically updated WordPress-full Composer package

wordpress composer composer-package wordpress-core

Updated May 24, 2022

CodeCornTech / mu-cc-lock-core-updates

Star

Must-Use WordPress plugin to completely lock core updates in managed and production environments.

shell bash docker infrastructure wordpress devops automation ci-cd hardening wordpress-security wordpress-updates wordpress-mu-plugin wordpress-core managed-hosting codecorn

Updated Dec 19, 2025
PHP

joynalabddin / downgrade-wordpress-plugin

Star

DevJoynal Downgrade: a secure WordPress Core version pinning and controlled rollback plugin by Joynal Abdin.

php wordpress wp-cli wordpress-plugin staging wordpress-security wordpress-core wordpress-downgrade wordpress-rollback

Updated Aug 28, 2026
PHP

SaeidbakhshLab / saeidbakhsh-core-settings

Star

Saeidbakhsh Core Settings is a lightweight, secure, and privacy-focused WordPress plugin that provides essential core improvements and performance tweaks. It helps site owners manage WordPress features with a clean interface, safe defaults, and long-term compatibility without external dependencies.

php wordpress wordpress-plugin security performance wordpress-development optimization wordpress-site wordpress-core