WPCalibrate AccessPilot

Enterprise-grade, automated WCAG 2.2 accessibility scanning, issue remediation assistance, and an optional zero-cookie visitor accessibility toolbar for WordPress.

Table of Contents

• About
• Key Features
• Architecture & Standards
• Updating from WordPress Dashboard
• Installation
• Documentation
• Automated Test Suite
• Changelog
• Support & Community
• License

About

WPCalibrate AccessPilot is engineered from the ground up for modern WordPress installations to help organizations achieve and maintain WCAG 2.2 Level AA digital accessibility compliance.

In today's regulatory landscape, accessibility is legally mandated across global jurisdictions:

• United States: ADA Title III & Section 508.
• European Union: European Accessibility Act (EAA June 2025).
• United Kingdom: Equality Act 2010.

AccessPilot combines non-destructive HTML scanning, assisted remediation workflows, zero-cookie front-end visitor accommodations, and safe CSV compliance reporting into a single cohesive, high-performance solution.

Key Features

1. Automated WCAG 2.2 Accessibility Scanner

• 26+ Automated & Semi-Automated Rules: Evaluates DOM structure for image alt texts, heading hierarchies, form labels, empty links, unlabelled buttons, missing language attributes, positive tab indexes, duplicate element IDs, ARIA usage, click handlers without keyboard support, and minimum target touch sizes (24×24px).
• SSRF-Protected Content Discoverer: Crawler restricted strictly to the verified local WordPress host. Blocks private IPv4/IPv6 ranges (127.0.0.1, 10.0.0.0/8, 192.168.0.0/16) and non-HTTP/HTTPS schemes.
• Deterministic SHA-256 Fingerprints: Issues are fingerprinted with a normalized signature (rule_id + normalized_url + css_selector + context_hash), ensuring recurring scans accurately track open, resolved, and recurring issues without ID duplicates.

2. Remediation Assistant

• Safe Guided Fixes: Step-by-step remediation suggestions and automated hooks for high-confidence issues (such as missing attachment alternative text).
• Post-Fix Verification: Automatically re-audits remediated pages and updates issue status from open to resolved.
• Manual Review Checklists: Provides structured evaluation guides for manual accessibility criteria (multimedia transcripts, color contrast with custom brand gradients, visible focus indicators).

3. Visitor Accessibility Toolbar

• Zero Tracking, Zero Cookies: Conforms to GDPR, CCPA, and global privacy mandates. Preferences are stored strictly in the visitor's browser localStorage.
• User Accommodations:
  • Font scaling (100% to 150%)
  • High contrast and dark contrast modes
  • Dyslexia-friendly typography toggle
  • Link highlight underline styling
  • Animation pausing (prefers-reduced-motion integration)
  • Enhanced focus indicators
• Full Keyboard Navigation: Fully navigable with keyboard (Tab, Shift+Tab, Escape) with focus trapping in popup drawers and ARIA attributes.

4. Enterprise Reporting & Export

• CSV Compliance Reports: Export full scan logs, severity breakdowns, and issue inventories.
• CWE-1236 Formula Injection Defense: Prepends single-quote sanitization to any cell starting with dangerous spreadsheet control characters (=, +, -, @, \t, \r), preventing arbitrary code execution when opened in Microsoft Excel or Google Sheets.

5. Seamless Ecosystem Compatibility

• WooCommerce Ready: Declares explicit compatibility with High-Performance Order Storage (HPOS) and Cart/Checkout Blocks.
• WPCalibrate Suite Integration: Shares the unified top-level WPCalibrate menu without duplicate submenus.
• RTL Support: Full bi-directional stylesheet parity with admin-rtl.css and toolbar-rtl.css.

Architecture & Standards

AccessPilot strictly adheres to WordPress Plugin Standards, modern PHP 8.2+ practices, and defensive security engineering:

wpcalibrate-accesspilot/
├── assets/                  # CSS stylesheets, minified JS, and RTL styles
├── branding/                # Optimized alpha PNG icons and vector brand assets
├── docs/                    # Technical architecture, security, hooks, & schema docs
├── languages/               # Internationalization (.pot) translation catalog
├── scripts/                 # Build and automated deployment automation
├── src/
│   ├── Admin/               # Dashboard controller, router, tabs, and branding
│   ├── Background/          # Scan lock manager and Action Scheduler / Cron worker
│   ├── Core/                # Autoloader, constants, capabilities, and container
│   ├── Database/            # Schema tables, migrations, and repositories
│   ├── Integrations/        # WooCommerce HPOS compatibility
│   ├── Issues/              # Issue models, severities, and manual review checklist
│   ├── Privacy/             # WordPress Core Privacy Policy guide integration
│   ├── Remediation/         # Assisted remediation and verification re-scans
│   ├── Reporting/           # CSV export engine with CWE-1236 injection defense
│   ├── REST/                # WordPress REST API controllers
│   ├── Scanner/             # WCAG 2.2 rules engine, discovery, and transport
│   ├── Support/             # GitHub Dashboard Updater, license stubs, and logging
│   └── Toolbar/             # Frontend visitor accessibility toolbar
├── tests/                   # 72 automated unit, SSRF, fixture, and updater tests
├── readme.txt               # WordPress.org plugin directory metadata
├── uninstall.php            # Clean uninstallation routine
└── wpcalibrate-accesspilot.php # Main plugin bootstrap file

Updating from WordPress Dashboard

AccessPilot includes native GitHub release updates directly within the WordPress admin dashboard:

1. Automatic Update Detection: When a new release is tagged on GitHub, WordPress automatically detects the new version via the site_transient_update_plugins filter (cached for 12 hours).
2. One-Click Update: Navigate to Plugins in the WordPress admin sidebar. A standard notification banner will appear:

   There is a new version of WPCalibrate AccessPilot available. View version X.X.X details or update now.

3. Popup Changelog: Clicking View version details displays release notes, system requirements, and changelogs fetched directly from GitHub Releases.
4. Git-Updater Compatible: Includes native GitHub Plugin URI: https://github.com/zeeshanraza-official/wpcalibrate-accesspilot headers for users managing plugins with Git-Updater or GitHub Updater.

Installation

Method A: Via WordPress Admin (ZIP Upload)

1. Download wpcalibrate-accesspilot.zip from the Latest Release.
2. Go to Plugins -> Add New -> Upload Plugin in your WordPress dashboard.
3. Select wpcalibrate-accesspilot.zip and click Install Now.
4. Click Activate Plugin.

Method B: Via Git Clone

cd wp-content/plugins/
git clone https://github.com/zeeshanraza-official/wpcalibrate-accesspilot.git

Then activate WPCalibrate AccessPilot under Plugins in the WordPress admin.

Documentation

Full architectural and developer documentation is included in the docs/ directory:

• Accessibility Review: Audit methodology and WCAG criteria mapping.
• Architecture: Service container and execution flow.
• Database Schema: Custom tables, indexes, and migrations.
• Developer Hooks: Action and filter hooks for custom rule extensions.
• Security Review: SSRF mitigation, CSRF nonces, and capability checks.
• Compatibility Report: WooCommerce HPOS and multi-theme testing.

Automated Test Suite

AccessPilot includes an automated CLI test runner covering all rules, SSRF guards, CSV escaping, and update parsing:

php tests/test-runner.php

========================================================
   WPCalibrate AccessPilot - Automated Test Suite
========================================================
--- Issue Fingerprint Suite ---              [4 Tests PASS]
--- URL Validator & SSRF Suite ---          [8 Tests PASS]
--- CSV Exporter Security Suite ---         [8 Tests PASS]
--- Rule Registry Suite ---                 [4 Tests PASS]
--- Automated Rules & Fixtures Suite ---    [42 Tests PASS]
--- WooCommerce Integration Suite ---       [2 Tests PASS]
--- GitHub Dashboard Updater Suite ---      [4 Tests PASS]

Total Tests: 72 | Passed: 72 | Failed: 0

Changelog

See CHANGELOG_AI.md for detailed technical changelogs.

[1.0.4] - 2026-10-21

• Added: Native GitHub Releases update checker for one-click WordPress dashboard updates.
• Added: GitHub Plugin URI standard headers for Git-Updater compatibility.
• Fixed: WordPress plugin_dir_path() and plugin_dir_url() directory-stripping bug by defining canonical WPCALIBRATE_ACCESSPILOT_DIR and WPCALIBRATE_ACCESSPILOT_URL from __FILE__.
• Fixed: Admin sidebar menu icon display by replacing SVG data URI with canonical transparent-alpha PNG and adding admin_head empty container background fallback.
• Fixed: Guaranteed inline critical CSS injection into HTML <head> using wp_add_inline_style().
• Fixed: Alt text clipping PCalibra by providing valid HTTP 200 image URLs.
• Tests: Expanded automated test suite to 72 unit and fixture tests.

[1.0.3] - 2026-10-21

• Fixed: Purged legacy duplicate plugin folder from server.
• Fixed: Dynamic filemtime cache busting on asset URLs.
• Fixed: Unset redundant duplicate submenu item under parent WPCalibrate menu.

[1.0.2] - 2026-10-21

• Added: Comprehensive Overview tab with compliance roadmap and architecture guide.
• Added: Automated FTP deployment pipeline (scripts/deploy-ftp.php).
• Added: PowerShell distribution builder (scripts/build-zip.ps1).

[1.0.1] - 2026-10-21

• Fixed: Intelephense IDE symbols and WordPress/WooCommerce stubs.

[1.0.0] - 2026-10-21

• Initial production release with 26+ WCAG 2.2 rules, assisted remediation, and zero-cookie visitor accessibility toolbar.

Support & Community

• Author: WPCalibrate
• Support Email: support@wpcalibrate.com
• Marketplace: marketplace.wpcalibrate.com
• Phone / WhatsApp: +44 7474 795976

License

WPCalibrate AccessPilot is open-source software licensed under the GPL-2.0-or-later.