How to Install WP-CLI and Automate WordPress Administration via SSH Terminal

Unlocking the Power of WP-CLI for High-Speed WordPress Operations

Managing WordPress installations solely through the graphical browser /wp-admin/ dashboard is slow, cumbersome, and impractical for managing multiple sites. Clicking through menus to update dozens of plugins, reset administrator passwords, search-and-replace URLs across large serialized database tables, or regenerate hundreds of image thumbnails takes hours and often triggers PHP script execution timeouts.

WP-CLI is the official, high-performance command-line interface for WordPress. It allows system administrators, webmasters, and developers to perform virtually any WordPress action in milliseconds directly from the SSH terminal—without opening a web browser or being subject to browser timeout limitations.

Step 1: Installing WP-CLI Globally on Linux VPS

WP-CLI is distributed as a standalone Phar (PHP Archive) binary. It can be installed globally on Ubuntu, Debian, AlmaLinux, or CentOS in under thirty seconds:

# Download the official Phar build using curl
curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar

# Verify that the Phar binary is functional
php wp-cli.phar --info

# Make the Phar file executable
chmod +x wp-cli.phar

# Move binary into system PATH as 'wp'
sudo mv wp-cli.phar /usr/local/bin/wp

# Verify global command availability
wp --version

Step 2: Installing Bash Autocompletion for WP-CLI

Supercharge your terminal workflow by enabling bash autocompletion so you can tab-complete commands, plugin names, and sub-arguments:

# Download WP-CLI tab completion script
curl -O https://raw.githubusercontent.com/wp-cli/wp-cli/v2.10.0/utils/wp-completion.bash

# Move to global bash completion directory
sudo mv wp-completion.bash /etc/bash_completion.d/
source /etc/bash_completion.d/wp-completion.bash

Step 3: Essential WP-CLI Power Commands for Webmasters

Navigate to your WordPress document root directory (e.g., cd /var/www/html) to execute the following administrative commands:

1. Automated Core, Plugin, and Theme Maintenance

# Check for available WordPress core updates
wp core check-update

# Update all active plugins in parallel in 3 seconds
wp plugin update --all

# Update all themes
wp theme update --all

# Install and activate a new plugin instantly
wp plugin install redis-cache --activate

2. Emergency Administrator Password Reset & User Management

Locked out of /wp-admin/ due to two-factor authentication failure or forgotten credentials? Reset passwords or create new super-administrators instantly without touching phpMyAdmin:

# List all registered WordPress users
wp user list

# Update an existing user password instantly
wp user update admin --user_pass="SuperSecretNewPass2026!"

# Create a brand new administrator account
wp user create devadmin [email protected] --role=administrator --user_pass="StrongDevPass2026!"

3. Safe Serialized Database Search and Replace

WordPress stores URLs and widgets in serialized PHP strings. Running raw SQL REPLACE() queries corrupts serialized objects. WP-CLI’s search-replace handles deserialization automatically:

# Perform a dry-run test without altering database records
wp search-replace 'http://olddomain.com' 'https://newdomain.com' --dry-run

# Execute full search and replace across all tables
wp search-replace 'http://olddomain.com' 'https://newdomain.com' --all-tables

4. Database Maintenance, Backups & Optimization

# Export clean SQL database backup in 1 second
wp db export ~/backup_$(date +%Y%m%d).sql

# Optimize database tables and clean overhead
wp db optimize

# Open interactive MySQL CLI pre-authenticated with wp-config credentials
wp db cli

WP-CLI Command Efficiency & Speed Comparison

Task Description	wp-admin GUI Time	WP-CLI Terminal Time	Timeout Risk
Update 25 Plugins	~3 to 5 minutes	~4 seconds (wp plugin update --all)	Zero with CLI
Regenerate 1,000 Thumbnails	~15 minutes (browser lock)	~45 seconds (wp media regenerate)	Zero with CLI
Site Migration URL Swap	~10 minutes (Plugin GUI)	~3 seconds (wp search-replace)	Zero with CLI

Automating Daily Maintenance with Linux Cron Jobs

Automate your server’s security hygiene by scheduling daily midnight plugin and core security updates via crontab:

# Open crontab editor
crontab -e

# Run security updates every night at 3:00 AM
0 3 * * * /usr/local/bin/wp plugin update --all --path=/var/www/html --quiet
15 3 * * * /usr/local/bin/wp db optimize --path=/var/www/html --quiet

Advanced Multi-Site Administration with WP-CLI Aliases

If you manage multiple WordPress websites across different client accounts or virtual hosts, running commands individually in each directory is repetitive. WP-CLI features a built-in alias subsystem configured via ~/.wp-cli/config.yml that enables you to execute commands across remote or local WordPress installations from any directory:

# Create global WP-CLI configuration file (~/.wp-cli/config.yml)
@prod:
  ssh: [email protected]:22/var/www/example.com/public_html

@staging:
  path: /var/www/staging.example.com

@client2:
  ssh: [email protected]:22/var/www/client2/public_html

@all:
  - @prod
  - @staging
  - @client2

With this single configuration file in place, updating plugins across all three websites simultaneously requires just one terminal command:

# Update plugins across all local and remote servers in parallel
wp @all plugin update --all

Automating Security Audits & Integrity Verification

WP-CLI includes native cryptographic checksum verification to detect if any WordPress core files or official repository plugins have been tampered with or modified by malware injections:

# Verify SHA-256 integrity checksums for all WordPress core files
wp core verify-checksums

# Verify integrity checksums for all installed plugins
wp plugin verify-checksums --all

# Scan for inactive or unmaintained themes and remove them safely
wp theme list --status=inactive --format=csv | awk -F',' '{print $1}' | xargs -I {} wp theme delete {}

Automated Database Optimization & Transient Cleanup Script

Over time, WordPress database tables accumulate thousands of expired transients, spam comment metadata, and orphaned post revisions. Clean up database bloat via WP-CLI with this automated weekly optimization script:

# Clean all expired transients
wp transient delete --expired

# Delete all post revisions older than 30 days
wp post delete $(wp post list --post_type='revision' --format=ids) --force

# Optimize MySQL database engine tables
wp db optimize