WP Manifestindependent plugin directory

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/wpoets/awesome-xp/archive/refs/heads/main.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

Your Web and WordPress Experts

Awesome XP

Awesome XP is a high-performance, low-code logic execution platform for WordPress. Designed for developers and agencies who need to build complex custom workflows without the overhead of heavy visual builders, it uses a streamlined, shortcode-based architecture to connect apps, services, and data.

Whether you are building custom internal tools, automating multi-step data processing, or extending the Awesome Enterprise Platform, Awesome Flow Builder gives you the "logic rails" to move faster and stay organised.

You will need to update the wp-config.php file with the various defines specified in sample-config.php, located in the samples-index folder.

⚠️ Awesome XP is intended for technical teams and advanced WordPress users. Initial setup requires configuration in wp-config.php.

Changelog

1.0.6.1
  1. Fixed: innerblocks fields' content was not accessible server-side.
1.0.6
  1. Fixed: Uncaught SimpleMySQLiException: Deadlock found when trying to get lock
  2. Fixed: Uncaught Error: Failed opening required file
  3. Fixed: "Using null as an array offset is deprecated; use an empty string instead"
  4. Fixed: Updated the communication handler to the latest version to remove a security issue in the AWS SDK we were using
1.0.5.2
  • Improved: compatibility issues with PHP 8.5
1.0.5.1
  • Fixed: compatibility issues with PHP 8.2+
1.0.4
  • Fixed: Increased compatibility with PHP 8.0+
  • Fixed: Upgraded the handler dependencies to the latest versions.
1.0.3
  • Improved: Added layout option to sub fields in row_repeater field, so that they look good
  • Improved: Added three new fields - post-select,taxonomy-select,filtered-post-select
  • Fixed: Remove button in repeater fields was not looking good.
1.0.2
  • Fixed: innerblock was not allowing selection of Gutenberg blocks
  • Fixed: issue with keystorkes missing text and text area fields in GT blocks.
1.0.1
  • Dependency updates
  • Added missing files for introducing shortcodes to register Gutenberg and Elementor blocks
  • Fixed the issue with the utilities file.
1.0.0
  • Initial release

We're Hiring!

Join us at WPoets, We specialize in designing, building and maintaining complex enterprise websites and portals in WordPress.

Releases

10 releases.

Tag
Published
1.0.6.1 latest
Jul 6, 2026 3mo ago
Jul 6, 2026 3mo ago
Jul 2, 2026 3mo ago
Jun 27, 2026 3mo ago
Jun 27, 2026 3mo ago
Jun 27, 2026 3mo ago
Jun 25, 2026 4mo ago
Jun 23, 2026 4mo ago
Jun 2, 2026 4mo ago
1.0
May 27, 2026 4mo ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

D+ grade

Security

Awesome XP 1.0.6.1 · audited by WP Registry

High-severity findings.

1 high 1 medium
Audited release
1.0.6.1
Findings
2
Worst severity
high
Content hash
20bfc45fd8f02b49bb9a6e8e…

Findings

  • high Missing capability/nonce on awesome import/export AJAX (XP package)

    missing_capability

    wp/libraries/export-apps/import-export-apps.php mirrors enterprise: wp_ajax import/export without capability checks; zip import uses shell_exec tar. Any authenticated user can trigger.

    wp/libraries/export-apps/import-export-apps.php:11-15,267-580

  • medium Framework eval() used for configured language/handlers (by design)

    eval_by_design

    core/includes/aw2_library.php and lang handlers use eval on configured content. Not directly unauth-reachable without app config write; noted as elevated RCE surface if write paths are weak.

    core/includes/aw2_library.php:3914-3914

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.