cPanel offers management tools that let you look after every WordPress site on your account from one screen, without logging in to each dashboard. On MdmHost you will find Softaculous on every account, and WP Toolkit (shown as WP Toolkit or WordPress Management) where it is enabled on the server. This guide shows what each can do and where to find it.
Before you start
- Log in to cPanel from Services in the MdmHost dashboard.
- If a site was installed manually, it must be detected first: WP Toolkit → Scan or Softaculous Import.
Find your WordPress sites
- WP Toolkit: click the WordPress icon in the left sidebar or search
wp toolkit. Each site appears as a card with a screenshot, version, and status of updates and security. - Softaculous: Software → Softaculous Apps Installer → All Installations lists every WordPress install with its URL and version.
Everyday tasks and where to do them
| Task | WP Toolkit | Softaculous |
|---|---|---|
| Log in to wp-admin without password | Log In button on the site card | Admin icon in All Installations |
| Update core, plugins, themes | Updates on the card; set auto-update policy | Edit details → Auto Upgrade |
| Install or remove plugins on several sites | Plugins tab | Plugin sets during install |
| Security hardening | Security: disable file editing, block XML-RPC, protect wp-config, etc. | Not included |
| Back up and restore | Backup/Restore | Backup and Restore |
| Staging / clone | Clone and Sync | Staging and Clone |
| Maintenance mode, debug, search engine indexing | Toggles on the card | Not included |
| Change admin password | Setup | Edit details → admin account |
Tip: Use one tool per site for automatic updates and backups. Having both WP Toolkit and Softaculous schedule backups of the same site doubles disk usage.
Security check in WP Toolkit
- On the site card, click Security (or the shield status).
- Review the recommended measures. Safe ones such as Disable file editing in WordPress Dashboard, Forbid execution of PHP scripts in wp-includes and Configure security keys can be applied with Secure.
- Test the site after applying. Use Revert if a plugin stops working.
Things cPanel tools cannot do
- Fix a hacked site automatically; see clean a hacked WordPress site.
- Update premium plugins without a licence key inside WordPress.
- Replace performance tuning: install LiteSpeed Cache for speed on MdmHost servers; see LiteSpeed Cache.
Troubleshooting
- Site missing from the list: run a scan or import, as above.
- "Log In" opens the login form: the admin user stored in the tool was renamed or deleted. Update it in the tool's settings.
- WP Toolkit not available: use Softaculous; it covers installs, updates, backups, staging and cloning.