{"id":4376,"date":"2026-09-12T16:51:33","date_gmt":"2026-09-12T11:21:33","guid":{"rendered":"https:\/\/cpanelfree.com\/blog\/wp-cli-bash-scripts-automate-maintenance-backups\/"},"modified":"2026-09-12T16:52:28","modified_gmt":"2026-09-12T11:22:28","slug":"wp-cli-bash-scripts-automate-maintenance-backups","status":"publish","type":"post","link":"https:\/\/cpanelfree.com\/blog\/wp-cli-bash-scripts-automate-maintenance-backups\/","title":{"rendered":"10 Essential WP-CLI Bash Scripts to Automate WordPress Maintenance and Backups"},"content":{"rendered":"

Managing WordPress installations manually through the administrative web interface is acceptable for a single personal blog, but it quickly becomes an inefficient, repetitive nightmare for sysadmins, agencies, and hosting providers responsible for dozens of production sites. Clicking through update prompts, manually exporting database dumps via phpMyAdmin, and troubleshooting plugin conflicts inside a browser consumes valuable engineering hours.<\/p>\n

WP-CLI<\/strong>\u2014the official command-line interface for WordPress\u2014allows you to perform virtually any administrative action from the Linux terminal without touching a web browser. By combining WP-CLI with modular Bash scripts on your Linux VPS<\/a>, you can automate routine security updates, transient cleanups, permission enforcement, and automated database backups with surgical precision. Below are 10 production-tested Bash scripts every WordPress engineer should deploy.<\/p>\n

1. Automated Non-Breaking Plugin & Core Updates<\/h2>\n

Safely update minor security patches for WordPress core and active plugins while bypassing major releases that could introduce compatibility issues:<\/p>\n

#!\/usr\/bin\/env bash\nWP_PATH=\"\/var\/www\/my-site\"\n\necho \"Checking for minor security updates in ${WP_PATH}...\"\n# Update core minor releases only (e.g., 6.5.1 to 6.5.2)\nwp core update --minor --path=\"${WP_PATH}\" --allow-root\n\n# Update plugins and clear object cache\nwp plugin update --all --path=\"${WP_PATH}\" --allow-root\nwp cache flush --path=\"${WP_PATH}\" --allow-root\necho \"Updates applied successfully!\"<\/code><\/pre>\n
2. Atomic Automated Database Backup with Gzip Compression<\/h2>\n
Dumping your database using WP-CLI guarantees proper table locking and exports cleanly without web server execution timeouts:<\/p>\n
#!\/usr\/bin\/env bash\nWP_PATH=\"\/var\/www\/my-site\"\nBACKUP_DIR=\"\/opt\/backups\/db\"\nTIMESTAMP=$(date +\"%Y%m%d_%H%M%S\")\n\nmkdir -p \"${BACKUP_DIR}\"\n# Export database directly through gzip stream\nwp db export - --path=\"${WP_PATH}\" --allow-root | gzip -9 > \"${BACKUP_DIR}\/wp_db_${TIMESTAMP}.sql.gz\"\n\n# Retain only last 14 days of dumps\nfind \"${BACKUP_DIR}\" -type f -name \"*.sql.gz\" -mtime +14 -delete\necho \"Database backed up to ${BACKUP_DIR}\/wp_db_${TIMESTAMP}.sql.gz\"<\/code><\/pre>\n
3. Transient & Expired Option Garbage Collection<\/h2>\n
Over time, WordPress plugins litter the wp_options<\/code> table with expired transients that slow down autoloaded option queries. Clean them up instantly:<\/p>\n
#!\/usr\/bin\/env bash\nWP_PATH=\"\/var\/www\/my-site\"\n\necho \"Purging expired transients from ${WP_PATH}...\"\nwp transient delete --expired --path=\"${WP_PATH}\" --allow-root\n# Optimize database overhead after delete\nwp db optimize --path=\"${WP_PATH}\" --allow-root<\/code><\/pre>\n
4. Production File & Directory Permissions Auditor<\/h2>\n
Ensure web server permissions conform strictly to Linux security baselines (755 directories, 644 files, 400 wp-config.php<\/code>):<\/p>\n
#!\/usr\/bin\/env bash\nWP_PATH=\"\/var\/www\/my-site\"\nWEB_USER=\"www-data\"\n\necho \"Enforcing hardened file permissions on ${WP_PATH}...\"\nchown -R ${WEB_USER}:${WEB_USER} \"${WP_PATH}\"\nfind \"${WP_PATH}\" -type d -exec chmod 755 {} \\;\nfind \"${WP_PATH}\" -type f -exec chmod 644 {} \\;\nchmod 400 \"${WP_PATH}\/wp-config.php\"\necho \"Security permissions locked down.\"<\/code><\/pre>\n
5. Automated Malware & Core File Integrity Check<\/h2>\n
Compare every file in your core WordPress installation against the official WordPress.org cryptographic checksums:<\/p>\n
#!\/usr\/bin\/env bash\nWP_PATH=\"\/var\/www\/my-site\"\n\necho \"Verifying WordPress core file checksums...\"\nif ! wp core verify-checksums --path=\"${WP_PATH}\" --allow-root; then\n    echo \"WARNING: Core files modified or corrupted! Reinstalling core...\"\n    wp core download --skip-content --force --path=\"${WP_PATH}\" --allow-root\nelse\n    echo \"Core integrity confirmed 100% clean.\"\nfi<\/code><\/pre>\n
6. Global Search and Replace for Domain Migration<\/h2>\n
Serializing PHP strings safely during domain migrations prevents broken widgets, menus, and theme options:<\/p>\n
#!\/usr\/bin\/env bash\nWP_PATH=\"\/var\/www\/my-site\"\nOLD_URL=\"https:\/\/dev.example.com\"\nNEW_URL=\"https:\/\/example.com\"\n\necho \"Executing serialized search and replace...\"\nwp search-replace \"${OLD_URL}\" \"${NEW_URL}\" --all-tables --precise --recurse-objects --path=\"${WP_PATH}\" --allow-root\nwp cache flush --path=\"${WP_PATH}\" --allow-root<\/code><\/pre>\n
7. Staging Site Clone & Sanitization<\/h2>\n
Quickly clone a production database into staging while scrambling customer email addresses to prevent accidental marketing blasts:<\/p>\n
#!\/usr\/bin\/env bash\nPROD_PATH=\"\/var\/www\/production\"\nSTAGE_PATH=\"\/var\/www\/staging\"\n\necho \"Syncing production database to staging...\"\nwp db export \/tmp\/prod_dump.sql --path=\"${PROD_PATH}\" --allow-root\nwp db import \/tmp\/prod_dump.sql --path=\"${STAGE_PATH}\" --allow-root\nrm -f \/tmp\/prod_dump.sql\n\n# Scramble user emails in staging\nwp db query \"UPDATE wp_users SET user_email = CONCAT('user_', ID, '@staging.local') WHERE ID > 1;\" --path=\"${STAGE_PATH}\" --allow-root\necho \"Staging environment refreshed and sanitized.\"<\/code><\/pre>\n
8. WooCommerce Orphaned Order Metadata Purge<\/h2>\n
Reclaim gigabytes of database space by deleting orphaned postmeta rows that remain after order deletions:<\/p>\n
#!\/usr\/bin\/env bash\nWP_PATH=\"\/var\/www\/my-site\"\n\necho \"Cleaning orphaned postmeta...\"\nwp db query \"DELETE pm FROM wp_postmeta pm LEFT JOIN wp_posts wp ON wp.ID = pm.post_id WHERE wp.ID IS NULL;\" --path=\"${WP_PATH}\" --allow-root\necho \"Orphaned metadata purged.\"<\/code><\/pre>\n
9. Emergency Administrative Password Reset<\/h2>\n
Instantly reset administrative credentials when locked out by MFA or credential loss:<\/p>\n
#!\/usr\/bin\/env bash\nWP_PATH=\"\/var\/www\/my-site\"\nADMIN_USER=\"siteadmin\"\nNEW_PASS=$(openssl rand -base64 16)\n\nwp user update \"${ADMIN_USER}\" --user_pass=\"${NEW_PASS}\" --path=\"${WP_PATH}\" --allow-root\necho \"Temporary Password generated for ${ADMIN_USER}: ${NEW_PASS}\"<\/code><\/pre>\n
10. Cron Daemon Scheduled Tasks Health Monitor<\/h2>\n
Inspect blocked or deadlocked wp-cron<\/code> scheduled events directly from the terminal:<\/p>\n
#!\/usr\/bin\/env bash\nWP_PATH=\"\/var\/www\/my-site\"\n\necho \"Inspecting active WP-Cron scheduled hooks...\"\nwp cron event list --fields=hook,next_run_relative,status --path=\"${WP_PATH}\" --allow-root\n# Force run stuck crons\nwp cron event run --due-now --path=\"${WP_PATH}\" --allow-root<\/code><\/pre>\n
Advanced WP-CLI Automation: Multi-Site Loops & Cron Integration<\/h2>\n
Elevate your WP-CLI automation from single-site utilities into fleet-wide management engines capable of managing hundreds of production WordPress installations:<\/p>\n