UAU Ready
Description
WP Debug Toolkit Pro organizes PHP error logs, WordPress notices, and debug events in a wp admin area, with real-time reading to investigate failures without relying solely on the wp-debug.log file on the server. It serves developers, technical administrators, and agencies that need to diagnose plugin conflicts, track critical messages, and validate performance adjustments with more traceability during maintenance, staging, or production fixes.
WP Debug Toolkit Pro Key Features
- Log reading
Centralizes PHP messages and debug events in the admin panel. - Real-time monitoring
Displays new occurrences as errors and notices are logged. - Panel in wp admin
Adds a technical interface accessible within WordPress. - Debug filters
Helps locate events by type, origin, or severity. - Performance data
Supports bottleneck analysis during testing and fixes.
Benefits of WP Debug Toolkit Pro
- Faster diagnostics
Reduces time spent searching for errors in server files. - Safer maintenance
Makes it easier to validate changes before issues reach users. - Organized technical workflow
Concentrates useful information for development, testing, and internal support. - More operational control
Helps teams track failures without switching between external tools.
Who Is WP Debug Toolkit Pro Recommended For?
- WordPress developers who need to investigate PHP errors and plugin conflicts.
- Agencies responsible for technical maintenance of WordPress sites in production.
- Advanced administrators who monitor logs, performance, and panel stability.
How to Download WP Debug Toolkit Pro
WP Debug Toolkit Pro is available for download here on Ultrapack. After downloading the .zip file, go to Plugins > Add New > Upload plugin, select the package and activate it in the WordPress panel. After activation, consult the plugin menu to configure debugging.
In WordPress projects with many plugins, customizations, and administrative routines, a centralized debugging tool helps transform scattered errors into actionable information. WP Debug Toolkit Pro fits into technical maintenance workflows, conflict review, and stability monitoring, gathering relevant logs in the panel for faster decisions and better-documented fixes.
Frequently asked questions
Is WP Debug Toolkit Pro GPL-licensed?
Yes. WP Debug Toolkit Pro is distributed under the GPL (GNU General Public License). You may legally use, modify and redistribute it on as many sites as you want.
Can I use WP Debug Toolkit Pro on multiple sites?
Yes. You can install WP Debug Toolkit Pro on as many sites as you want. Only automatic updates through Ultrapack Auto Updater have a limit: from 3 to 80 sites, depending on the plan.
How much does WP Debug Toolkit Pro cost at Ultrapack?
WP Debug Toolkit Pro costs US$2.99 as a single purchase, and it is also included in the subscription plans starting at US$12/mo (VIP I).
Does WP Debug Toolkit Pro include updates?
Yes. The current version of WP Debug Toolkit Pro is 1.2.3, published at Ultrapack on Aug 4, 2026. Subscribers update straight from the WordPress dashboard with UAU (Ultrapack Auto Updater).
Is WP Debug Toolkit Pro scanned before publication?
Yes. Every version of WP Debug Toolkit Pro goes through a malware scan (ClamAV and YARA rules, at UltraHub) before it is published.
What are the requirements for the plugin WP Debug Toolkit Pro?
Requires WordPress 5.6 or higher and PHP 7.4 or higher. Tested up to WordPress 6.4.
What changed in this version
Version 1.2.3
- Security: Fixed an authentication bypass affecting all REST API endpoints that responded to unauthenticated requests.
Version 1.2.2
- Fix: Viewer login failing on hosts that strip cookies from API responses
- Fix: Blocklist typo and missing entries left rate-limit.db, viewer-settings.db, and rate-limit.json readable via the file viewer endpoint
- Security: Global rate-limit floor on viewer auth — protects against rotating-IP brute-force attempts
Version 1.2.1
- Fix: open_basedir warnings flooding the PHP error log on non-Flywheel hosts with restrictive open_basedir
Version 1.2.0
- New: Time-limited query recording with shareable URLs and automatic stop — record queries on demand instead of leaving capture always on
- New: Group duplicate log entries toggle with count badges in the viewer
- New: Performance warnings on Overview page when debug mode or query logging is enabled
- New: Proxy and CDN support — disable IP binding toggle for proxied environments, with Cloudflare and Akamai header detection
- New: Manage session IP binding from the WordPress admin Viewer Settings tab
- New: View and clear rate-limited IPs from the WordPress admin Viewer Settings tab
- New: Flywheel hosting compatibility
- New: wp-config.php writability diagnostics in Site Health with safe temporary permission elevation
- New: `wp dbtk api` command group — discover, list, show, search, call, edit, export, import, and bootstrap REST API endpoints from the terminal
- New: Semantic annotation layer for `wp dbtk api edit` — method-level descriptions, safety classification, auth notes, return-shape notes, tags, and verification markers; persisted across discovery rescans
- New: `wp dbtk api export` / `import` for portable annotation packs with merge and replace-source modes
- New: `wp dbtk api bootstrap` — generate a Markdown brief of a plugin's endpoints for fresh agent sessions
- New: `wp dbtk query-log start/stop/status/read` commands for recording control and query analysis from the terminal
- New: `wp dbtk log read` command for filtered debug log reading from the terminal
- New: `--summary` and `--memory` flags for `wp dbtk query-log read` — view per-page performance overview and memory usage from recordings
- New: `--profile` flag on `wp dbtk api call` with `full`, `queries`, and `summary` modes
- New: CLI documentation suite — setup guide, usage guide, command reference, AI assistant guide, REST endpoint profiling guide
- New: Q keyboard shortcut to open the query recording dialog, with a shortcut badge on the Record button
- New: Reinstall Viewer action on the Overview page — regenerates viewer files without re-prompting for password; bound to the I shortcut when the viewer is installed
- New: "Always Logging" warning pill with tooltip on the Database Queries card when SAVEQUERIES or enhanced logging is persistently enabled
- Improved: Lazy-load services — deferred to point-of-use instead of eager init on every request
- Improved: Cache health check results for 5 minutes with auto-invalidation on settings change
- Improved: Settings now work on hosts with restrictive file permissions via automatic permission elevation and restore
- Improved: Actionable error messages for admin users when settings fail to save
- Improved: Replace SAVEQUERIES with filter-based query capture for safer API endpoint profiling
- Security: Harden standalone viewer — add execution guard, expand blocked files list, and add directory listing protection
- Security: Tighten wp-config backup file permissions to 0600
- Security: Strengthen encryption key generation in viewer manager
- Security: Improve HTTPS detection on local domains
- Fix: PHP 8.4 deprecation warning for E_STRICT constant in notifications mu-plugin
- Fix: Session IP binding failures behind load balancers and CDNs
- Fix: Viewer install no longer blocked by read-only wp-config.php
- Fix: Graceful degradation when wp-config.php is not writable
- Fix: Settings page showing the wrong status for debug, query logging, and other toggles
- Fix: File path detection showing empty in Settings when initial page data is used
- Fix: Viewer session authentication failing on local HTTP environments
- Fix: Viewer password status showing the wrong value on the Settings page
- Fix: Viewer settings modal not closing after a successful save
- Fix: Viewer theme out of sync between the sidebar toggle and the Settings modal
- Fix: Viewer sidebar "Keyboard Shortcuts" button now opens the shortcuts reference
Version 1.1.0
- New: Query Logger - Real-time database query monitoring with slow query detection and performance metrics
- New: Query Statistics Dashboard - Visual insights into query performance and component-level breakdowns
- New: N+1 Query Detection - Automatically identifies and highlights repeated queries with aggregate statistics
- New: Database query error logging with detailed error messages and filtering
- New: Query export to CSV, JSON, and TSV formats with accurate component attribution
- New: Dynamic query statistics that recalculate based on active filters
- New: Email notification system for error alerts with customizable templates
- New: Automatic log cleanup with delete/archive/truncate methods, size limits, and age-based rotation
- New: Viewer permissions health check with repair button in Site Health
- New: Viewer settings for query dashboard limit, tail scan MB, max entry MB
- New: PHP memory limit management (writes to wp-config.php)
- New: Upload limit controls via WordPress filters
- New: Settings UI redesign with modern tabbed interface
- New: Oversized entry warnings and “Large” filter in Query Viewer
- Security: Query logs encrypted at rest
- Security: Password protection now mandatory for viewer (8-character minimum)
- Security: SQLite-based rate limiting with progressive brute-force protection
- Security: Enhanced session security with 30-minute timeout and IP binding
- Security: Strengthened path traversal prevention with expanded blocklist
- Security: Replaced exec with token_get_all for PHP syntax validation
- Security: Fixed wp-config.php case-sensitivity bypass vulnerability in viewer
- Security: Added protection for secure-debug.php (GridPane compatibility)
- Security: Scoped CORS headers to plugin endpoints only
- Security: Restricted wp-config backup file permissions
- Security: Hardened viewer config and auth files against direct access
- Security: Expanded viewer blocked files list with additional sensitive file patterns
- Security: Added directory listing protection for query log storage
- Improved: Production and performance warnings in setup wizard for debug mode and query logging
- Improved: “Install without tools” option to set up the viewer without enabling debugging tools
- Improved: Setup wizard defaults tools to disabled — users opt in consciously
- Improved: Viewer installer wizard with step-by-step guidance
- Improved: Redesigned crash recovery system with cleaner UI and granular plugin/theme controls
- Improved: Targeted cache clearing (plugin-specific transients only)
- Improved: Enhanced output buffer management
- Improved: Better type safety and code quality across PHP and React code
- Added: Custom file paths configuration (DBTK_CONFIG_PATH, DBTK_LOG_PATH constants)
- Added: Error level selection in Settings (Debug, Info, Warning, Error)
- Added: Cache busting in Admin and Viewer apps
- Added: WordPress internationalization (wp-i18n) support
- Added: Psalm static analysis with type hints
Release notes published by the developer.
How to install
Automatic updates: this item is updated by the Ultrapack Auto Updater. With it installed, the new version shows up in your dashboard like any other WordPress update (how to set it up).
- Download the file
wpdebugtoolkit.zip. - In the WordPress dashboard, go to Plugins > Add New > Upload Plugin.
- Select the file
wpdebugtoolkit.zipand click Install Now. - Click Activate.
Requirements: Requires WordPress 5.6 or higher and PHP 7.4 or higher. Tested up to WordPress 6.4.
Stuck on a step? Open a ticket telling us which one you stopped at.
