A broken plugin update can take a whole site down — and WordPress’ built-in recovery mode only pauses the plugin for the administrator who clicks the recovery link, while every visitor keeps seeing the error.

This plugin works like an electrical circuit breaker: it counts PHP fatal errors per plugin within a configurable time window. When the same plugin keeps crashing (default: 5 fatals within 10 minutes), the breaker trips and the plugin is deactivated automatically. Your site keeps running without the broken plugin instead of staying down.

Plugins your site must not run without (shop, membership, security) can be ticked off as protected — they are never deactivated automatically. For protected plugins you only get a notification, so a human can decide.

Optionally, a webhook URL (Slack, Discord, n8n, …) can be configured. Whenever the breaker trips — or a protected plugin keeps crashing — a notification is sent there.

What the breaker does when it trips:

  • Removes the broken plugin from the active plugins — without running any of its deactivation hooks (the plugin is broken; running its code would be exactly the wrong move).
  • Shows a persistent admin notice with the error details until you reactivate the plugin.
  • Sends a webhook notification if a webhook URL is configured.

Screenshot

The settings page: threshold, time window, webhook URL, and the list of protected plugins.
The settings page: threshold, time window, webhook URL, and the list of protected plugins.

Version 1.0.2View on WordPress.org