by
ricardomorales
0 (0 reviews)
Sysadmin Total Suite
Core integrity, vulnerability audit, unused media cleanup, disk usage, profiling, users, WPO and AI bot blocking in one admin panel.
Sysadmin Total Suite ranks #66,585 among WordPress.org plugins with 0+ active installations, is #3,855 of 5,058 in the Security category, and was last updated Oct 7, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Compatible with WP 7.1.4
v5.4.1
Current Version v5.4.1
Updated 1 month ago
Last Update on 07 Oct, 2026
Refreshed 1 week ago
Last Refreshed on
#3,855 of 5,058 in Security
Rank
#66,585
—
No change
Active Installs
0+
-100%
KW Avg Position
38
—
No change
Downloads
371
+6 today
Support Resolved
0%
—
No change
Rating
0%
Review 0 out of 5
0
(0 reviews)
Next Milestone 10
0+
10+
39,017
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 9 more installs to reach 10+
Rank Changes
Current
#66,585
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
0.0
0 reviews
Overall
0%
5
0
(0%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 5.4.1
- Last Updated
- Oct 07, 2026
- Requires WP
- 5.3+
- Tested Up To
- 7.1.4
- PHP Version
- 7.4 or higher
- Author
- ricardomorales
Support & Rating
- Rating
- ☆ ☆ ☆ ☆ ☆ 0
- Reviews
- 0
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
6K+ installs
#2,757
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#1,015
LiteSpeed Cache
7M+ installs
#5
Akismet Anti-spam: Spam Protection
5M+ installs
#8
Wordfence Security – Firewall, Malware Scan, and Login Security
5M+ installs
#11
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)
3M+ installs
#18
Hostinger Tools
3M+ installs
#20
WPS Hide Login
2M+ installs
#27
Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention
1M+ installs
#33
WP Super Cache
1M+ installs
#36
Frequently Asked Questions
Common questions about Sysadmin Total Suite
No. It does not write to or delete any file inside wp-admin, wp-includes or the site root. The integrity section is a read-only report: it tells you which core files differ from the official ones and can show you the diff, but repairing them is left to WordPress itself through Dashboard > Updates > Reinstall now. Outside the core, it only writes in the uploads directory (resolved at runtime with wp_upload_dir()): The cached copy of the official WordPress package used for the diff, in its own folder. It is a public file; the folder carries an .htaccess and an index.php against listing, and it is removed when you purge the cache or uninstall the plugin. The quarantine of the Unused media section, only when you move media items to it. Its folder name includes a random key, so its files cannot be reached by guessing the address (an .htaccess file is not applied by every web server, for example nginx). Uninstalling the plugin restores everything that is still in quarantine.
No. It contains no PHP or JavaScript editor, no file manager, no upload form and no field where code can be entered. It never calls eval(), base64_decode(), exec() or any dynamic include, and it does not generate or execute code.
To show a real diff, the original file is needed. The plugin downloads the official package for your exact version and locale from WordPress.org — the same source WordPress itself uses — and reads the single file being compared straight out of it. Nothing from the download is executed and nothing is written outside the uploads cache.
It looks for references to every media item, by ID and by file name in any size, in the content of posts, pages and templates, in custom fields (ACF, Elementor and other page builders, WooCommerce galleries), in the site options (logo, site icon, widgets, theme settings) and in term and avatar data. Only items with no reference at all are reported. It cannot see images used only from theme files, from other websites or in emails, so review the list before moving anything, and check the site while items are in quarantine.
The media item stays in the database but is hidden from the media library, and all its files (every thumbnail, the original image before scaling, edited copies and WebP/AVIF copies made by optimization plugins) are moved to a folder inside uploads. Right before moving, the plugin checks again that nothing references the item. Restoring moves the files back without ever overwriting an existing file. "Empty quarantine" deletes the items permanently with WordPress's own wp_delete_attachment(), which also lets other plugins clean their data.
They are the copies of the original images that image optimization plugins such as LiteSpeed Cache keep so that you can restore them. They are not orphans: if you no longer need them, remove them from that plugin, not by FTP.
Yes, the ZipArchive extension is needed to show the differences of a modified file against the official package. The integrity analysis itself works without it.
The query time is only available when the SAVEQUERIES constant is enabled. The number of queries and the remaining timings are shown regardless. A core file is reported as modified but I have not touched anything Some sites run the international WordPress package while their locale is set to another language. In that case a few files (for example wp-includes/version.php, which carries $wp_local_package in translated packages) differ from the localized checksums without anything being wrong. The plugin compares against the international package as well before reporting a file, so this no longer produces a false positive. The page cache shows as not enabled, but I use LiteSpeed LiteSpeed caches at server level and does not use WP_CACHE or advanced-cache.php. The plugin detects that case and shows its real status; you can confirm it with the x-litespeed-cache: hit response header.
No. The User-Agent can be spoofed, which is why the 403 blocking complements, but does not replace, the robots.txt opt-out.
Because it contacts an external service (WPVulnerability). WordPress.org guidelines require your explicit consent before a plugin sends data to a third party, so you have to enable it in the Audit section. Plugin and theme slugs are sent, and the WordPress version for the core check; the comparison with your installed plugin and theme versions is done locally.
