Sudo for WordPress! 🥪 Risky actions — activating plugins, deleting users, changing key settings — are gated by a required reauthentication step, regardless of user role. Time-bounded sessions, 2FA support, rate limiting, and configurable policies for REST, WP-CLI, Cron, WPGraphQL, & XML-RPC. No role escalation, no new permissions — just a gate. ⛩️

42 stars 4 forks 42 watchers PHP GNU General Public License v2.0
access-control principle-of-least-privilege sudo wordpress-admin-backend wordpress-admin-panel wordpress-administrators wordpress-auth wordpress-cron wordpress-multisite-compatible wordpress-plugins wordpress-rest-api wordpress-security wordpress-security-plugin wordpress-users wordpress-xmlrpc wp-cli wpgraphql zero-trust
6 Open Issues Need Help Last updated: Jul 25, 2026

Open Issues Need Help

View All on GitHub
good first issue priority: low

Sudo for WordPress! 🥪 Risky actions — activating plugins, deleting users, changing key settings — are gated by a required reauthentication step, regardless of user role. Time-bounded sessions, 2FA support, rate limiting, and configurable policies for REST, WP-CLI, Cron, WPGraphQL, & XML-RPC. No role escalation, no new permissions — just a gate. ⛩️

PHP
#access-control#principle-of-least-privilege#sudo#wordpress-admin-backend#wordpress-admin-panel#wordpress-administrators#wordpress-auth#wordpress-cron#wordpress-multisite-compatible#wordpress-plugins#wordpress-rest-api#wordpress-security#wordpress-security-plugin#wordpress-users#wordpress-xmlrpc#wp-cli#wpgraphql#zero-trust

Sudo for WordPress! 🥪 Risky actions — activating plugins, deleting users, changing key settings — are gated by a required reauthentication step, regardless of user role. Time-bounded sessions, 2FA support, rate limiting, and configurable policies for REST, WP-CLI, Cron, WPGraphQL, & XML-RPC. No role escalation, no new permissions — just a gate. ⛩️

PHP
#access-control#principle-of-least-privilege#sudo#wordpress-admin-backend#wordpress-admin-panel#wordpress-administrators#wordpress-auth#wordpress-cron#wordpress-multisite-compatible#wordpress-plugins#wordpress-rest-api#wordpress-security#wordpress-security-plugin#wordpress-users#wordpress-xmlrpc#wp-cli#wpgraphql#zero-trust

Sudo for WordPress! 🥪 Risky actions — activating plugins, deleting users, changing key settings — are gated by a required reauthentication step, regardless of user role. Time-bounded sessions, 2FA support, rate limiting, and configurable policies for REST, WP-CLI, Cron, WPGraphQL, & XML-RPC. No role escalation, no new permissions — just a gate. ⛩️

PHP
#access-control#principle-of-least-privilege#sudo#wordpress-admin-backend#wordpress-admin-panel#wordpress-administrators#wordpress-auth#wordpress-cron#wordpress-multisite-compatible#wordpress-plugins#wordpress-rest-api#wordpress-security#wordpress-security-plugin#wordpress-users#wordpress-xmlrpc#wp-cli#wpgraphql#zero-trust

Sudo for WordPress! 🥪 Risky actions — activating plugins, deleting users, changing key settings — are gated by a required reauthentication step, regardless of user role. Time-bounded sessions, 2FA support, rate limiting, and configurable policies for REST, WP-CLI, Cron, WPGraphQL, & XML-RPC. No role escalation, no new permissions — just a gate. ⛩️

PHP
#access-control#principle-of-least-privilege#sudo#wordpress-admin-backend#wordpress-admin-panel#wordpress-administrators#wordpress-auth#wordpress-cron#wordpress-multisite-compatible#wordpress-plugins#wordpress-rest-api#wordpress-security#wordpress-security-plugin#wordpress-users#wordpress-xmlrpc#wp-cli#wpgraphql#zero-trust

Sudo for WordPress! 🥪 Risky actions — activating plugins, deleting users, changing key settings — are gated by a required reauthentication step, regardless of user role. Time-bounded sessions, 2FA support, rate limiting, and configurable policies for REST, WP-CLI, Cron, WPGraphQL, & XML-RPC. No role escalation, no new permissions — just a gate. ⛩️

PHP
#access-control#principle-of-least-privilege#sudo#wordpress-admin-backend#wordpress-admin-panel#wordpress-administrators#wordpress-auth#wordpress-cron#wordpress-multisite-compatible#wordpress-plugins#wordpress-rest-api#wordpress-security#wordpress-security-plugin#wordpress-users#wordpress-xmlrpc#wp-cli#wpgraphql#zero-trust

Sudo for WordPress! 🥪 Risky actions — activating plugins, deleting users, changing key settings — are gated by a required reauthentication step, regardless of user role. Time-bounded sessions, 2FA support, rate limiting, and configurable policies for REST, WP-CLI, Cron, WPGraphQL, & XML-RPC. No role escalation, no new permissions — just a gate. ⛩️

PHP
#access-control#principle-of-least-privilege#sudo#wordpress-admin-backend#wordpress-admin-panel#wordpress-administrators#wordpress-auth#wordpress-cron#wordpress-multisite-compatible#wordpress-plugins#wordpress-rest-api#wordpress-security#wordpress-security-plugin#wordpress-users#wordpress-xmlrpc#wp-cli#wpgraphql#zero-trust