Title: Unstoppable Site Connector
Author: Unstoppable Solutions
Published: <strong>October 14, 2026</strong>
Last modified: October 14, 2026

---

Search plugins

![](https://ps.w.org/unstoppable-site-connector/assets/banner-772x250.png?rev=3745083)

![](https://ps.w.org/unstoppable-site-connector/assets/icon-256x256.png?rev=3745083)

# Unstoppable Site Connector

 By [Unstoppable Solutions](https://profiles.wordpress.org/paramedic192/)

[Download](https://downloads.wordpress.org/plugin/unstoppable-site-connector.0.5.5.zip)

 * [Details](https://wordpress.org/plugins/unstoppable-site-connector/#description)
 * [Reviews](https://wordpress.org/plugins/unstoppable-site-connector/#reviews)
 *  [Installation](https://wordpress.org/plugins/unstoppable-site-connector/#installation)
 * [Development](https://wordpress.org/plugins/unstoppable-site-connector/#developers)

 [Support](https://wordpress.org/support/plugin/unstoppable-site-connector/)

## Description

Unstoppable Site Connector links this site to an **Unstoppable Site Manager** dashboard,
which your web designer or agency runs on their own WordPress site (not a service
run by Unstoppable Solutions). **Connecting delegates administration of this site
to whoever runs that dashboard.** Once connected, they can:

 * see this site’s health: pending updates, WordPress and PHP versions, SSL certificate
   expiry;
 * update WordPress, plugins and themes;
 * install, activate, deactivate and delete plugins;
 * open this site’s admin area already signed in (one-click sign-in, can be turned
   off);
 * build a monthly care report from this site’s activity log.

**How the connection is protected**

 * No passwords are stored or sent. The site and the dashboard are paired once with
   a key that works one time and expires after 15 minutes.
 * Every request from the dashboard is signed and checked; a request can’t be replayed
   or used after 5 minutes.
 * One-click sign-in links work once and expire after 60 seconds. You can turn it
   off, or choose which administrator account it uses, under Tools > Unstoppable
   Site Connector. Because it skips the login form, two-factor checks on the login
   form don’t apply to it; turn it off if every sign-in must use two-factor.
 * Every sign-in from the dashboard is recorded in the activity log.
 * Disconnect at any time under Tools > Unstoppable Site Connector.

**This site has the last word**

The security settings under Tools > Unstoppable Site Connector > Security belong
to this site, not to the dashboard. The dashboard can make them stricter, but only
an administrator of this site can loosen them.

For the strongest protection, allow only your dashboard’s address, and switch off
one-click sign-in and installing plugins from a ZIP file or web address unless you
use them: each of those gives whoever controls the dashboard full control of this
site.

 * **Allowed dashboard addresses.** Accept dashboard requests only from your dashboard
   server’s IP address. A request with a valid signature from anywhere else is refused,
   so a stolen dashboard key is useless elsewhere. The dashboard can set this for
   you in one click.
 * **Permissions.** Choose what the dashboard may do here: run updates, activate
   and deactivate plugins, install plugins from WordPress.org, install plugins from
   a ZIP file or web address, delete plugins, and one-click sign-in.
 * **Security alert emails.** Get an email when the dashboard installs or deletes
   a plugin, changes these settings or connects, when a correctly signed request
   is blocked, and (optionally) on every one-click sign-in.

For extra hardening, set the allowed addresses in wp-config.php so they can’t be
changed from wp-admin at all: `define( 'USCN_ALLOWED_IPS', '203.0.113.10' );`. If
this site is behind a proxy such as Cloudflare and your host doesn’t pass on the
real address, tell the plugin which header holds it: `define( 'USCN_CLIENT_IP_HEADER','
HTTP_CF_CONNECTING_IP' );` (only when the site can only be reached through that 
proxy).

Previously released as FM Connector. Installing Unstoppable Site Connector on a 
site that has FM Connector takes over its connection (no re-pairing); you can then
deactivate and delete FM Connector.

### External Services

**The dashboard you connect to.** After you paste the connection key into a dashboard,
this plugin sends a report to that dashboard’s address hourly and shortly after 
any change. The report contains: the site’s name and address; WordPress, PHP and
server versions; the installed plugins and themes with versions, active state and
available updates; SSL certificate expiry; and the activity log (updates, plugin
and theme changes, users created or deleted, administrator sign-ins, with usernames).
It also answers the dashboard’s signed requests with the same information. Data 
goes only to the dashboard you paired with, which is run by your web professional,
not by Unstoppable Solutions. Disconnect under Tools > Unstoppable Site Connector
to stop it.

**WordPress.org.** When the dashboard asks for updates or installs a plugin from
the directory, WordPress downloads it from WordPress.org as it normally would. [Privacy Policy](https://wordpress.org/about/privacy/).

**This site itself (loopback).** To run the dashboard’s update checks and updates
inside this site’s admin area, the plugin sends a one-time request from this site
to its own `wp-admin/admin-ajax.php`. Nothing leaves the server.

**Security alert emails.** If alerts are on (Tools > Unstoppable Site Connector 
> Security), this site sends them with WordPress’s own mail function to the address
set there, or the site’s admin email. They include the dashboard’s name, the dashboard
username and the IP address of the request.

**Plugin ZIPs from your dashboard.** When the dashboard installs a plugin that is
not from WordPress.org, this site downloads the ZIP from the connected dashboard’s
own site, and from nowhere else.

## Installation

 1. Install and activate Unstoppable Site Connector.
 2. Go to Tools > Unstoppable Site Connector and click Generate connection key.
 3. Paste the key into Add Site in the Unstoppable Site Manager dashboard. The key 
    works once and expires after 15 minutes.

## FAQ

### Do I need this plugin?

Only if the person who maintains your site uses Unstoppable Site Manager and has
asked you to install it.

### What if my web professional’s dashboard is hacked?

Lock this site to the dashboard’s address (Tools > Unstoppable Site Connector > 
Security). Then a stolen key can’t be used from anywhere else, and you get an email
if someone tries. You can also switch off anything you don’t want done remotely,
and click Disconnect at any time to cut the connection immediately.

### How do I report a security problem?

Please email support@unstoppablesolutions.app privately with the details instead
of posting publicly. You’ll get a reply within two business days.

### Updates fail with a message about FTP credentials

Your host requires FTP details to change files, so remote updates can’t run. Ask
your host to allow direct file writes.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“Unstoppable Site Connector” is open source software. The following people have 
contributed to this plugin.

Contributors

 *   [ Unstoppable Solutions ](https://profiles.wordpress.org/paramedic192/)

[Translate “Unstoppable Site Connector” into your language.](https://translate.wordpress.org/projects/wp-plugins/unstoppable-site-connector)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/unstoppable-site-connector/),
check out the [SVN repository](https://plugins.svn.wordpress.org/unstoppable-site-connector/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/unstoppable-site-connector/)
by [RSS](https://plugins.trac.wordpress.org/log/unstoppable-site-connector/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 0.5.5

 * WordPress.org review fixes: plugin files are only installed from WordPress.org
   or the connected dashboard; FM Connector is no longer switched off automatically;
   connecting now asks you to confirm what it allows; the WordPress version is read
   without loading a core file.

#### 0.5.4

 * Reports how far its activity log goes, so the dashboard can skip a request when
   nothing is new (faster refresh).

#### 0.5.3

 * “Tested up to” now lives only in readme.txt, as WordPress.org requires.

#### 0.5.2

 * No more security alert email when the dashboard updates the connector itself.

#### 0.5.1

 * FM Connector is now only switched off after its connection moves across, never
   deleted automatically; the settings screen says when it can be deleted.
 * WordPress.org readiness: Plugin Check fixes, a languages folder, and a security
   contact.

#### 0.5.0

 * New Security settings that belong to this site and can only be loosened here:
   allowed dashboard IP addresses, what the dashboard may do (updates, activate/
   deactivate, installs from WordPress.org, installs from ZIP or web address, deletes),
   and security alert emails.
 * Correctly signed requests from an address that isn’t allowed are refused, logged
   and emailed, with a one-click “my dashboard moved” fix.
 * The dashboard can lock this site to its address and switch permissions off, but
   never back on.
 * Optional wp-config.php constants USCN_ALLOWED_IPS and USCN_CLIENT_IP_HEADER (
   the right-most address in a forwarding header is used).
 * Installing with “activate” also needs the activate permission, and replacing 
   an installed plugin also needs the updates permission.

#### 0.4.1

 * Update checks, updates and plugin changes requested by the dashboard now run 
   inside this site’s admin area, so paid plugins that only check for updates there(
   such as Crocoblock’s Jet plugins) are found and updated. If the server blocks
   this, they run as before and the dashboard shows a warning.
 * Refreshing no longer drops pending updates that paid plugins reported earlier.

#### 0.4.0

 * Renamed from FM Connector to Unstoppable Site Connector. Takes over FM Connector’s
   connection, settings and activity log, then removes FM Connector.

## Meta

 *  Version **0.5.5**
 *  Last updated **1 day ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 5.8 or higher **
 *  Tested up to **7.1.3**
 *  PHP version ** 7.4 or higher **
 * Tags
 * [agency](https://wordpress.org/plugins/tags/agency/)[maintenance](https://wordpress.org/plugins/tags/maintenance/)
   [Manage Multiple Sites](https://wordpress.org/plugins/tags/manage-multiple-sites/)
   [remote management](https://wordpress.org/plugins/tags/remote-management/)[updates](https://wordpress.org/plugins/tags/updates/)
 *  [Advanced View](https://wordpress.org/plugins/unstoppable-site-connector/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/unstoppable-site-connector/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/unstoppable-site-connector/reviews/)

## Contributors

 *   [ Unstoppable Solutions ](https://profiles.wordpress.org/paramedic192/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/unstoppable-site-connector/)

## Donate

Would you like to support the advancement of this plugin?

 [ Donate to this plugin ](https://unstoppablesolutions.app/donate)