Description
You don’t need to be a WordPress expert anymore. Just tell Webivus what you want, and it does the work.
Webivus AI is an Agentic Copilot for your WordPress site. Instead of clicking through admin menus and settings pages, you type what you need in plain English — like sending a message to a helpful team member — and Webivus does it for you.
For example, you can say:
- “Write a blog post about summer skincare tips and save it as a draft”
- “Update all my plugins, but check they’re compatible first”
- “Add a new product to my store priced at $29”
- “My site feels slow — help me figure out why”
- “Improve the SEO of my Website”
Webivus understands your site, plans the steps, and asks for your approval before making any change. Nothing happens without your permission.
Who is it for?
- Site owners with no technical background — run your site without learning WordPress
- Busy business owners — update your store, content, and plugins in minutes, not hours
- Developers, freelancers, and agencies — manage client sites faster from one chat dashboard
What can Webivus do?
Site health audit
Run a full audit of your site on demand — server environment, database, content, SSL, WordPress Site Health, and WooCommerce — scored into a single health report with a prioritised list of what to fix. Then ask Webivus to fix the issues it found, one click at a time.
Real-time PHP error monitoring
Webivus watches for fatal errors, errors, and warnings as they happen and reports a deduplicated summary to your dashboard — so you find out your site is broken before your customers tell you. No WP_DEBUG, no log file on disk, and no impact on page speed.
Content
Write SEO-friendly posts and pages, edit existing content safely, upload images, and organise categories. New posts and pages are saved as drafts unless you ask Webivus to publish them.
Plugins and themes
Search, install, activate, and update plugins and themes from WordPress.org. Before any update, Webivus checks compatibility with your WordPress and PHP versions and flags anything risky before it runs.
WooCommerce stores
Add and edit products, manage prices and stock, create coupons, and view orders — all by chatting. Before updating WooCommerce, Webivus scans your theme for outdated template overrides that could break your cart or checkout, and tells you which ones actually matter.
Delete-safety checks
Before deleting a page, Webivus verifies it isn’t your homepage, your blog page, a parent of other pages, linked in a navigation menu, or a core WooCommerce page — and refuses deletions that would break your site.
All your sites in one place
Manage more than one WordPress site? Connect them all to your Webivus dashboard and track updates, install plugins and themes, and manage content across every site from a single screen — no more logging into each admin panel one by one.
Rollback protection
Before Webivus updates, switches or removes a plugin or theme, it takes a snapshot of the affected folders and your database so the change can be reversed from the chat. Restore is available on the latest change; once you send a new message, the earlier Restore button is replaced. Content edits and deletions made through Webivus can be undone from the chat, and items WordPress deletes permanently, such as media files, users, categories, tags and menus, are copied first. Before a restore runs, Webivus shows what it will put back and what would be lost. Rollback covers changes made through Webivus only. It is new in 1.3.0 and still improving, so keep a full-site backup running as well.
More than a chatbot
Webivus isn’t one general-purpose chatbot. It works as a set of AI specialists, each focused on a different part of your site:
- A content writer that drafts SEO-friendly posts and pages
- An SEO specialist that optimises your content and metadata
- A site auditor that reviews your site’s health and flags issues
- An admin assistant that handles plugins, themes, updates, and settings
For many everyday tasks, you get the kind of help you’d normally pay a developer or agency for — just by typing what you need.
Features
- Manage your entire site by chatting in plain English — no technical knowledge needed
- On-demand site health audit with a scored report and a prioritised fix list
- Real-time PHP error monitoring with smart deduplication — know your site broke before your visitors do
- AI-written, SEO-friendly posts and pages, saved as drafts unless you ask to publish
- Install, activate, update, and remove plugins through conversation
- Bulk plugin updates with per-plugin compatibility checks and clear results
- Rollback protection — snapshots before plugin and theme changes, undo for content edits, safety copies before permanent deletions, and a restore preview
- Undo a restore — put back what a restore replaced, for a limited time
- Full WooCommerce support — products, orders, stock, prices, and coupons
- WooCommerce template-override scanning before store updates
- Page-builder detection for Elementor, Divi, Beaver Builder, WPBakery, Oxygen, and Brizy
- Delete-safety checks that refuse to remove pages your site depends on
- Manage all your connected WordPress sites from one dashboard
- Your approval required before every significant change
- Zero impact on your site speed — nothing is added to your public pages
- Secure, encrypted, auto-expiring connection tokens
- WordPress Multisite support
Safety First
Webivus is built to protect your site, not put it at risk:
- Rollback protection — before plugin and theme updates Webivus takes a snapshot, before content edits it keeps the previous version, and before permanent deletions it keeps a safety copy. If a snapshot cannot be taken, it stops and asks you how to proceed. New in 1.3.0 and still improving, so keep a full-site backup as well
- Backup reminders before risky changes — before updating WordPress core or making other high-impact changes, Webivus reminds you to take a backup first
- Compatibility checks before every update — incompatible updates are flagged with a clear explanation before anything runs, so you decide with the facts in front of you
- WooCommerce protection — outdated cart, checkout, and account templates are flagged before a WooCommerce update can affect your store
- Delete-safety — pages your site structurally depends on are protected from deletion
- Recommended update order — WordPress core first, then plugins, then themes, reducing the chance of conflicts
- Nothing happens silently — Webivus explains significant actions and asks before updates, removals and deletions
Why people trust Webivus
- You approve everything — Webivus explains what it’s about to do and asks before significant changes; a direct instruction from you counts as approval. It never changes anything silently.
- Safe by design — it uses WordPress’s official APIs and never edits your theme or plugin code. The only files Webivus places on your site are plugins and themes from WordPress.org and, during a rollback, the copies it took of your own folders before the change.
- Reversible by design — plugin, theme and content changes made through Webivus can be rolled back. Updates and removals wait for a restore point first, and if one can’t be taken Webivus asks you before going on.
- Zero impact on your visitors — the plugin adds nothing to your public pages. No scripts, no styles, no slowdown.
- Consent-first — the plugin sends nothing to Webivus until you click Connect.
- Up and running in minutes — install, connect, and start chatting.
What Webivus does not do
We’d rather tell you up front than have you find out later:
- Not a backup service, and no staging. Before Webivus changes a plugin, theme or content item it records a restore point, so that change can be reversed from your Webivus dashboard. That is not a full-site backup: it covers only changes made through Webivus, does not protect against hosting failures or hacks, and may not be able to restore every change in every situation. Keep a backup plugin or host-level backups running on any production site.
- Not a security scanner. Webivus reviews your site’s configuration and flags plugins that look abandoned, but it does not scan for malware and does not check your plugins against vulnerability databases.
- WordPress.org plugins and themes only. Webivus can install and update anything in the WordPress.org directory. It cannot upload a ZIP or install a premium plugin for you.
- No code editing. Webivus does not edit your theme or plugin files and does not write code of its own to your server. The only code it places on your site is a plugin or theme from WordPress.org or, during a rollback, the copy of your own plugin or theme folder taken before the change.
Third-Party Service
Webivus AI connects your site to the Webivus platform so the assistant can read and manage your site. Nothing is sent until you click Connect, and disconnecting stops all communication immediately.
What is sent: your site URL and name, WordPress and PHP versions, your admin email and username (to link the site to your account), the names and versions of your plugins and themes, content counts, and PHP error reports (message, file, line) so Webivus can flag broken code.
Site diagnostics are also sent so the health audit can run: server software, PHP user, document root, and your database name, host, character set, collation, table prefix, and total size. Your database credentials are never sent. Apart from the rollback snapshots described below, Webivus does not read the contents of your database.
Once connected, Webivus also sends the specific item you ask it to work on — the post you asked it to rewrite, the page you asked it to check. Content is sent only for what you’re working on. Outside a rollback snapshot, Webivus does not bulk-export your posts, products, or customer database.
Rollback snapshots: before a protected change (a plugin or theme install, update, switch or removal, or a permanent deletion), a copy of your database tables and of the plugin or theme folders the change affects is uploaded directly to Webivus’s encrypted cloud storage. A database copy contains whatever those tables hold, which can include user accounts (with hashed passwords), comments, form entries and WooCommerce orders. Snapshots are deleted automatically after 30 days and are used only to restore your site at your request. When you edit or delete content through Webivus, the previous version (and, for deleted media, the file itself) is stored the same way so the change can be undone. During a rollback the plugin downloads that snapshot from Webivus storage over HTTPS and puts the folders back.
What is never sent: your WordPress or database passwords, your wp-config.php file — and anything at all before you click Connect.
AI responses are generated using third-party language model providers.
Support
Need help? Email us at hi@webivus.com — we’re happy to assist with setup, connection issues, or anything else. You can also ask questions in the support forum on this page.
Credits
This plugin bundles the Nunito typeface (admin/fonts/nunito-400.woff2, nunito-500.woff2, nunito-600.woff2, nunito-700.woff2), Copyright 2014 The Nunito Project Authors (https://github.com/googlefonts/nunito). Nunito is licensed under the SIL Open Font License 1.1, which is GPL-compatible. The full licence text is included at admin/fonts/OFL.txt.
The fonts are bundled locally so that the plugin’s admin page makes no third-party requests.
Installation
Setup takes less than two minutes.
Option 1 — Install from WordPress (easiest)
- In your WordPress admin, go to Plugins > Add New, search for “Webivus AI”, and click Install, then Activate
- Open Webivus AI in your admin sidebar. You’ll be guided through connecting your site, and you can create a free account (or log in) at webivus.com
- Enter your email, review the consent screen, and click Connect — or use the connection-key method instead
- Start chatting with your site
Option 2 — Start from webivus.com
- Create a free account at webivus.com
- Install this plugin on your site and activate it
- Open Webivus AI in your admin sidebar, review the consent screen, and click Connect
A Webivus account is required for the plugin to work.
FAQ
-
Do I need technical knowledge to use Webivus?
-
No. If you can type a message, you can manage your site. Webivus handles the technical steps for you.
-
Can the AI make changes without asking me?
-
No. Every significant action requires your approval first. Webivus explains what it will do, and waits.
-
What does Webivus do with my content?
-
When you ask Webivus to work on something — rewrite a post, check a page, update a product — that item is sent to the Webivus platform so the AI can read it and act on it. Content is sent only for the item you’re working on. Webivus does not bulk-export your posts, products, or customer database, and it never receives your passwords. If you ask about orders or customers, the details of those records (such as name and email) are sent so the AI can answer. See the Third-Party Service section above for the full breakdown.
-
Will it slow down my website?
-
No. The plugin adds nothing to your public-facing pages — no scripts, styles, or assets. Error reports and status signals are sent in the background and never block WP Admin.
-
Does it work with WooCommerce?
-
Yes. Webivus can manage products, orders, stock, prices, and coupons. Before a WooCommerce update, it scans your theme for outdated template overrides that could break your cart or checkout, and tells you which ones actually put your store at risk.
-
Is my data safe?
-
Communication is secured with encrypted, auto-expiring tokens, and the plugin sends nothing to Webivus until you click Connect. Webivus never receives your passwords, and outside a rollback snapshot it receives only the records you ask it to work on, never your whole customer database. It does receive the specific content you ask it to work on — see the Third-Party Service section for exactly what is and isn’t sent.
-
Can I disconnect at any time?
-
Yes. One click on the Webivus AI admin page stops all communication immediately. Deleting the plugin removes all connection data.
-
Is Webivus free?
-
The plugin is free, and Webivus offers a free account tier. Paid plans unlock higher usage. See webivus.com for pricing.
-
Can I manage more than one website?
-
Yes. Install the plugin on each site and connect them to the same Webivus account — you can then manage all your sites from one dashboard. The number of connected sites depends on your plan; see webivus.com/pricing.
-
Does Webivus provide backups?
-
Not full-site backups. Before Webivus changes a plugin, theme or content item, it records a restore point: a snapshot of the affected plugin or theme folder (plus your database where the change can affect it), the previous version of edited content, and a safety copy of items WordPress deletes permanently (media files, users, categories, tags and menus). That protects the changes Webivus makes; it does not protect against hosting failures, hacks or changes made elsewhere. Rollback protection is new in 1.3.0 and still improving. We strongly recommend keeping a backup plugin or host-level backups running on any production site.
-
Does Webivus provide rollback if something goes wrong?
-
Yes, for changes made through Webivus. Before it updates, switches or removes a plugin or theme, or edits or deletes content, it records what it is about to change, and you can restore it from the chat, under that reply. Restore is available on the latest change; once you send a new message, the earlier Restore button is replaced. Rollback covers changes Webivus made, not changes made directly in WP Admin or by other plugins. Restoring a snapshot returns your database to the moment it was taken, so anything added after it, such as new orders or comments, is undone too. Webivus shows a preview before you confirm, and a restore can itself be undone for a limited time. A WordPress core update is protected by a database snapshot only; Webivus does not roll back the core files themselves, so take a full backup before updating WordPress. Rollback protection is new in 1.3.0 and still improving. It may not be able to restore every change in every situation, so keep a full-site backup running on any production site.
-
What if a snapshot can’t be taken?
-
For updates, removals and permanent deletions, Webivus stops and tells you why, for example a full disk or an uploads folder it cannot write to. You can try again, cancel, or continue without a restore point. If you continue, that change cannot be undone from Webivus, and the reply says so. For a new install or a content edit, Webivus carries on and simply has no restore point for that change.
-
Does Webivus scan my site for malware or vulnerabilities?
-
No. Webivus reviews your site’s configuration and flags plugins that appear abandoned or removed from the directory, but it is not a malware scanner and does not check your plugins against vulnerability databases. Use a dedicated security plugin for that.
-
Does it support WordPress Multisite?
-
Yes, including network-wide plugin detection.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“Webivus AI” is open source software. The following people have contributed to this plugin.
ContributorsTranslate “Webivus AI” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.3.0
- New: Rollback protection — before Webivus installs, updates, switches or removes a plugin or theme, it snapshots your database and the affected folders so the latest change can be reversed from the chat
- New: Undo for content changes — edits to posts, pages, settings, menus, categories and tags made through Webivus can be reversed from the chat
- New: Safety copies before permanent deletions — media files, users, categories, tags and menus have no trash in WordPress, so Webivus copies them before removing them and can restore them on request
- New: Restore preview — before a rollback runs, Webivus shows what it will put back and what would be lost
- New: Undo this restore — after a restore, you can put back what it replaced for a limited time
- New: Restore safeguards — if the connection drops mid-restore, Webivus confirms the result with your site, carries an interrupted restore on from where it stopped, and puts everything back if your site stops responding right after one
- Tweak: Webivus is designed not to run an update, removal or permanent deletion if its snapshot or safety copy cannot be completed, explains why, and asks whether to try again, continue without a restore point, or cancel
- Tweak: Deleting the plugin now removes every option, table and folder it created
- Tweak: Tested with WordPress 7.1
- Fix: Permalink structures containing tags such as %category% are saved correctly, and unknown tags are rejected
1.2.6
- Fix: Site connection and health audits now succeed on servers that strip the Authorization header before PHP (common on some LiteSpeed/CGI and nginx setups). The plugin now also reads the authentication token from a dedicated request header, so authenticated requests from the Webivus platform work across more hosting configurations. No change to what data is sent or to your consent settings.
1.2.5
- Tweak: Expanded the third-party service disclosure — the readme now documents in full what is and is not sent to the Webivus platform, including site and database diagnostics
- Tweak: Added a “What Webivus does not do” section covering backups, rollback, security scanning, and supported plugin sources
- Tweak: Expanded the FAQ with questions on content handling, backups, rollback, and malware scanning
- Tweak: Clarified that the plugin sends nothing to Webivus until you click Connect
- Tweak: Corrected the feature list — Webivus can remove plugins, but does not delete themes
- Tweak: Added a Credits section and bundled the SIL Open Font License text for the Nunito typeface
1.2.4
This release aligns the plugin with the current Webivus platform version and builds on the consent-first connection experience introduced in 1.2.2. It adds real-time site monitoring, on-demand auditing, and safer AI actions. Everything new that reports data is gated behind your explicit consent and sent in the background, so nothing leaves your site until you connect and nothing slows down WP Admin.
- New: Flexible connection — connect your site by email or with a one-time connection key, plus a streamlined reconnect flow if a session ends, so setup and reconnection stay a single guided step
- New: Real-time PHP error monitoring with smart deduplication — captures fatal errors, errors, and warnings as they happen and reports a deduplicated summary to your Webivus dashboard, with no WP_DEBUG and no on-disk log file. Identical errors are merged into one record with a counter and the top affected URL patterns, and the on-site footprint stays bounded regardless of traffic
- New: Site audit report — a single on-demand report covering your server environment, database, content, SSL, WordPress Site Health, and WooCommerce, scored and presented on your Webivus dashboard
- New: Page-builder detection — pages built with Elementor, Divi, Beaver Builder, WPBakery, Oxygen, or Brizy are detected directly from your site, so the AI knows how each page is built before acting on it
- New: Delete-safety checks for pages — before deleting a page, Webivus verifies it isn’t your homepage, blog/posts page, a parent of other pages, linked in a navigation menu, or a core WooCommerce page, and blocks deletions that would break your site
- New: 6-hour heartbeat and instant deactivation sync — lightweight status signals keep your dashboard accurate while reducing redundant server-side polling
- Security: All outbound reporting stays gated by your consent and is sent non-blocking — it never leaves your site until you connect and never slows down WP Admin
1.2.2 – 2026-04-27
- New: Explicit user-consent screen — the plugin now makes zero outbound network calls until the site administrator clicks “Connect” on the Webivus AI admin page. Listed data, recipient, and frequency are all disclosed inline before the click
- New: Connect / Reconnect / Disconnect now form a clear lifecycle — disconnect immediately stops all communication, reconnect re-confirms consent
- Tweak: All outbound calls (initial registration, daily token refresh, change-detection notifications) are gated by a single consent flag — the plugin honors revoked consent everywhere, not just in one place
- Tweak: Removed external font CDN load — admin styling now uses a system font stack so the plugin makes no third-party requests on its admin page
- Tweak: Dashboard URL is now filterable via the
webivus_dashboard_urlfilter - Tweak: Uninstall handler cleans up consent + lifecycle options and unschedules the daily token-refresh cron
- Fix: Sites upgrading from 1.2.1 with an active connection are auto-treated as already-consented; brand-new installs land in the consent-pending state
1.2.1 – 2026-03-31
- New: Bulk plugin updates — update multiple plugins in a single operation with per-plugin compatibility validation and results
- New: Pre-flight compatibility checks — validates PHP and WordPress version requirements before every update, skips incompatible plugins in bulk operations
- Tweak: Recommended update order enforced — core first, then plugins, then themes
- Tweak: Batch confirmation for 3+ plugin updates — single approval instead of per-plugin prompts
- Tweak: Extended timeout for bulk operations (5 minutes) and core updates (5 minutes)
1.2.0 – 2026-03-27
- New: Disconnect and reconnect site from the plugin admin page
- New: Automatic token refresh via daily WP Cron (renews when 3 days or less remaining)
- New: Dark theme admin dashboard with redesigned UI
- New: Site overview cards — content, users, plugins (circular chart), and system info
- New: Collapsible accordion sections for token details and full site data (JSON)
- New: Security footer card with encryption status
- New: Token is masked by default on the admin page — only first 8 characters visible
- Tweak: Brand colors applied to all action elements (buttons, badges, accents)
- Tweak: Google Fonts loaded for improved typography (Plus Jakarta Sans, Inter, Fira Code)
- Tweak: Footer updated with Community (Discord), Support, and Privacy Policy links
- Tweak: Responsive layout adjustments for WordPress admin sidebar
- Tweak: Copy button copies full token from hidden input without exposing it visually
- Fix: Token no longer displayed in full on admin page (security hardening)
1.1.0 – 2026-03-21
- New: Modular plugin architecture with organized file structure
- New: Encrypted credential storage for secrets and tokens
- New: Cryptographically random secret generation
- New: Clean uninstall — removes all plugin data on deletion
- New: Internationalization (i18n) support
- New: Input validation on import and settings operations
- Tweak: SSL verification enabled by default on all outgoing requests
- Tweak: Admin assets properly enqueued as separate files
- Tweak: Hardened filesystem handling for theme install and update operations
- Tweak: Improved coding standards compliance
- Fix: Import operations now require authentication
- Fix: Removed debug output from production code
1.0.1 – 2026-03-13
- New: Plugin update management with compatibility checks
- New: Theme update management
- New: WordPress core update management
- Tweak: Enhanced site data with update status information
1.0.0 – 2026-02-21
- Initial release
- Secure token-based authentication with automatic expiry
- Content management — create, edit, and organize posts, pages, and media
- Plugin management — install, activate, deactivate, and remove plugins
- Theme management — install and switch themes
- WooCommerce support — products, orders, customers, coupons, and inventory
- Plugin health monitoring — abandoned and removed plugin detection
- Site overview — content, users, plugins, themes, and system information
- Real-time change notifications for plugin, theme, and core events
- WordPress Multisite support
