Database Updates<\/strong> - Run WordPress core database upgrades and plugin-specific migrations (Elementor, WooCommerce, Crocoblock)<\/li>\n<\/ul>\n\nSecurity<\/h4>\n\n
Three layers of authentication protect all API endpoints:<\/p>\n\n
\n- WordPress Application Password<\/strong> - Standard WordPress REST API authentication<\/li>\n
- Aura Site Token<\/strong> - Unique token verified via X-Aura-Token header<\/li>\n
- IP Whitelist<\/strong> - Optional IP restriction for additional security<\/li>\n
- Domain Whitelist<\/strong> - Optional origin domain restriction<\/li>\n<\/ol>\n\n
External Service<\/h4>\n\n
This plugin connects to the Aura dashboard<\/a> to enable remote site management.\nWhen connected, the Aura dashboard sends authenticated REST API requests to your site to check health status and perform updates.\nThe plugin itself does not send data outbound \u2014 it only responds to authenticated incoming requests.<\/p>\n\n\n- Aura Terms of Service<\/a><\/li>\n
- Aura Privacy Policy<\/a><\/li>\n<\/ul>\n\n
Requirements<\/h4>\n\n\n- WordPress 6.2 or higher<\/li>\n
- PHP 7.4 or higher<\/li>\n
- WordPress REST API enabled<\/li>\n
- Application Password support (WordPress 5.6+)<\/li>\n<\/ul>\n\n\n
\n- Upload the
digitizer-site-worker<\/code> folder to \/wp-content\/plugins\/<\/code><\/li>\n- Activate the plugin through the Plugins menu<\/li>\n
- Go to Tools > Digitizer Site Worker to find your site token<\/li>\n
- Add the site token to your Aura dashboard<\/li>\n<\/ol>\n\n\n
\nIs this plugin safe?<\/h3><\/dt>\nYes. All endpoints require three layers of authentication. No actions can be performed without valid credentials.<\/p><\/dd>\n
Does this plugin slow down my site?<\/h3><\/dt>\nNo. The plugin only loads its REST API endpoints. It has zero impact on frontend performance.<\/p><\/dd>\n
What happens if I deactivate the plugin?<\/h3><\/dt>\nYour Aura dashboard will no longer be able to communicate with this site. No data is lost.<\/p><\/dd>\n\n<\/dl>\n\n\n
1.3.5<\/h4>\n\n\n- Fix: Restore clean icon for WordPress.org<\/li>\n<\/ul>\n\n
1.3.4<\/h4>\n\n\n- Branding update: New banners and icons<\/li>\n
- Improved screenshots and documentation<\/li>\n<\/ul>\n\n
1.3.3<\/h4>\n\n\n- Initial release to WordPress.org<\/li>\n
- CI\/CD deploy automation<\/li>\n
- Tested up to WordPress 7.0<\/li>\n<\/ul>\n\n
1.3.2<\/h4>\n\n\n- Fix: Clear plugin cache after self-update to ensure correct version is reported<\/li>\n
- Uses wp_clean_plugins_cache() + wp_cache_flush() before reading new version<\/li>\n<\/ul>\n\n
1.3.1<\/h4>\n\n\n- Security: Use specific WordPress capabilities for REST API permission callbacks\n\n
\n- update\/plugin \u2192 update_plugins<\/li>\n
- update\/core \u2192 update_core<\/li>\n
- update\/theme \u2192 update_themes<\/li>\n
- update\/translations \u2192 update_core<\/li>\n
- update\/database \u2192 update_core<\/li>\n
- self-update \u2192 update_plugins<\/li>\n<\/ul><\/li>\n
- Addresses WordPress.org plugin review feedback (Review ID: R digitizer-site-worker\/benkalsky\/22Mar26)<\/li>\n<\/ul>\n\n
1.3.0-beta.6<\/h4>\n\n\n- Fix: Run Elementor upgrade callbacks directly and synchronously, bypassing the background runner that relies on loopback HTTP\/WP-Cron \u2014 works reliably regardless of DISABLE_WP_CRON setting<\/li>\n<\/ul>\n\n
1.3.0-beta.5<\/h4>\n\n\n- Fix: Elementor migrations now deferred to WP-Cron instead of running inline \u2014 prevents REST API timeout from loopback HTTP blocking<\/li>\n<\/ul>\n\n
1.3.0-beta.4<\/h4>\n\n\n- Feature: Self-update endpoint (POST \/self-update) \u2014 update AuraWorker from a GitHub release zip URL<\/li>\n
- Feature: URL validation restricts self-update to official Digitizers\/AuraWorker GitHub releases<\/li>\n<\/ul>\n\n
1.3.0-beta.3<\/h4>\n\n\n- Fix: Elementor\/Elementor Pro migrations now run asynchronously via Elementor's batched background task system<\/li>\n
- Fix: Removed premature version option update that marked migrations as complete before background tasks finished<\/li>\n<\/ul>\n\n
1.3.0-beta.2<\/h4>\n\n\n- Fix: Database migrations could timeout \u2014 added set_time_limit(120) for long-running migrations<\/li>\n
- Fix: Catch \\Throwable instead of \\Exception to handle PHP fatal errors during migrations<\/li>\n<\/ul>\n\n
1.3.0-beta.1<\/h4>\n\n\n- Feature: Plugin-specific database migration support (Elementor, Elementor Pro, WooCommerce, JetEngine\/Crocoblock)<\/li>\n
- Feature: New GET \/database-status endpoint \u2014 returns pending migration status for detected plugins<\/li>\n
- Feature: POST \/update\/database now accepts optional
plugin<\/code> parameter for targeted migrations<\/li>\n- Feature:
aura_worker_migration_registry<\/code> filter for third-party plugin migration registration<\/li>\n<\/ul>\n\n1.2.0<\/h4>\n\n\n- Security: Fix IP whitelist bypass via spoofable proxy headers \u2014 now uses REMOTE_ADDR only<\/li>\n
- Security: Standardize capability checks to manage_options for all endpoints<\/li>\n
- Security: Protect site token from form overwrite via sanitize_callback<\/li>\n
- Security: Cast token header to string for PHP 8 compatibility<\/li>\n
- Security: Add validate_callback with regex for plugin\/theme parameters<\/li>\n
- Fix: update_core() missing false check \u2014 filesystem failures silently reported success<\/li>\n
- Fix: update_core() sprintf received array instead of version string<\/li>\n
- Fix: update_core() missing is_array guard before accessing updates array<\/li>\n
- Fix: update_plugin() and update_theme() treated null return as success<\/li>\n
- Fix: update_translations() dead is_wp_error check \u2014 false return reported as success<\/li>\n
- Fix: Raw SQL interpolation in get_status() \u2014 now uses $wpdb->prepare()<\/li>\n
- Fix: Disk usage iterator changed from SELF_FIRST to LEAVES_ONLY<\/li>\n
- Cleanup: Removed duplicate require_once in update_core()<\/li>\n
- Cleanup: Removed unnecessary flush_rewrite_rules() calls<\/li>\n<\/ul>\n\n
1.0.0<\/h4>\n\n\n- Initial release<\/li>\n
- Site health status endpoint<\/li>\n
- Plugin, theme, and core update endpoints<\/li>\n
- Translation and database update endpoints<\/li>\n
- Three-layer security (Application Password + Site Token + IP Whitelist)<\/li>\n
- Settings page under Tools menu<\/li>\n<\/ul>","raw_excerpt":"Remote site management agent for Aura dashboard. Secure updates, health monitoring, and maintenance operations.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/fi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/291225","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/fi.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/fi.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=291225"}],"author":[{"embeddable":true,"href":"https:\/\/fi.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/benkalsky"}],"wp:attachment":[{"href":"https:\/\/fi.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=291225"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/fi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=291225"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/fi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=291225"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/fi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=291225"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/fi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=291225"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/fi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=291225"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}