n8n Workflow: SSH WordPress Plugin Theme Updates + Rollback

Automatically update your WordPress plugins & themes over SSH—with health checks and automatic rollback

This n8n workflow keeps your WordPress installation secure by updating plugins and themes via SSH + WP-CLI, then verifies the site is still healthy. If an update breaks the site (e.g., WordPress fails to boot or new PHP fatal errors appear), it automatically rolls back and emails you an HTML report—with optional AI analysis of failures.

What this workflow does

• Bootstraps on your server: Copy selfheal.sh from the GitHub repository (github.com/Christianzimpel/n8n-wp-self-healing-update-agent) to ~/wp-selfheal/selfheal.sh and ensure your server has WP-CLI, PHP CLI, tar, and curl.
• Connects via SSH and prepares: Uses your SSH private key credential to connect, checks the helper script, creates a database backup, enables temporary debug logging, and fetches available plugin/theme updates.
• Updates one item at a time: For each plugin/theme update, it backs up the component, runs the WP-CLI update, and builds HTTP check URLs for the configured site paths.
• Verifies site health: After each update, it requests site paths over HTTP and checks—via SSH—whether WordPress boots and whether new PHP fatal errors appear.
• Rolls back if broken: If the site looks damaged, it restores the plugin/theme from backup over SSH. If rollback fails, it stops further updates and sends an emergency email.
• Reports results: Sends an HTML email report. If configured, it can include Groq AI analysis of failures.

Use cases

• SaaS operators managing multiple WordPress instances and wanting safe, hands-off updates.
• Automation engineers running scheduled maintenance with rollback protection.
• Teams that need WP-CLI updates without risking prolonged downtime.

Technical details

• n8n workflow nodes: if, set, ssh, code, switch, email send
• Execution: scheduled runs or manual triggers
• Core tooling: SSH, WP-CLI, PHP CLI, tar, curl
• Health checks: HTTP site-path checks + SSH inspection for boot status and PHP fatal errors
• Reporting: HTML email + optional Groq AI failure analysis