Admin and Site Toolkit

All 64 modules

• Auto-Publish Missed Scheduled Posts

  Publishes scheduled posts that WordPress missed ("Missed schedule") because its scheduler did not run.

  auto_publish_missed_schedule

• AVIF Upload

  Allows AVIF images in the Media Library, including their size and a preview. This version of WordPress already allows AVIF; the module adds a check that each file really is an AVIF. Your server can also create smaller sizes of AVIF images.

  avif_upload

• Content Duplication

  Adds a one-click Duplicate link to posts, pages and public content types. The copy is saved as a draft, and the original is never changed.

  content_duplication

• Content Order

  Drag pages and other content into any order you like. The admin list follows it, and so does any theme that sorts by "menu order".

  content_order

• External Permalinks

  Make a page or post link straight to another web address instead of its own page. Adds a box to the editor where you paste the address.

  external_permalinks

• Media Files Visibility Control

  Editors and authors only see the media they uploaded themselves; administrators still see everything. The files stay reachable by their web address.

  media_visibility_control

• Media ReplacementExtra safeguards

  Replace a file in the Media Library with a new one while keeping its ID, address, title and date, so no links break. The old file is kept for 7 days so you can undo.

  media_replacement

• Menu Links in New Tab

  Makes menu links that open in a new tab safe, and can open every custom menu link to another website in a new tab. (WordPress already has the "Open link in a new tab" box on each menu item.)

  menu_items_new_tab

• Open External Links in New Tab

  Every link in your post content that points to another website opens in a new tab.

  external_links_new_tab

• SVG UploadExtra safeguards

  Lets the roles you choose upload SVG images. Every SVG is cleaned of scripts and outside links before it is saved, and a file that cannot be cleaned is refused.

  svg_upload

• Admin Cleanup

  Hides the dashboard widgets, admin-bar items and Help tab you do not use, so the admin feels calmer.

  admin_cleanup

• Admin Menu OrganizerExtra safeguards

  Reorder the admin menu by dragging, rename items and tuck away the ones you do not use, for everyone or for chosen roles.

  admin_menu_organizer

• Admin Screen Tweaks

  Small admin-screen niceties: the media grid loads more files as you scroll, and active plugins are listed first.

  admin_ui_tweaks

• Custom Admin Footer Text

  Replace "Thank you for creating with WordPress" and the version number at the bottom of the admin with your own text.

  admin_footer_text

• Enhance List Tables

  Adds helpful columns (picture, excerpt, last modified, ID, file size) to your lists and removes the ones you never use.

  enhance_list_tables

• Hide Admin Bar

  Hides the black toolbar on the public site for the people (roles) you choose.

  hide_admin_bar

• Hide Admin Notices

  Collects the noisy plugin and update notices into one tidy panel that opens from the toolbar.

  hide_admin_notices

• Navigation Menu Duplicator

  Adds a "Duplicate menu" button to Appearance > Menus that copies a whole menu with all its items.

  nav_menu_duplicator

• Show Custom Taxonomy Filters

  Adds a dropdown to your Posts, Pages and custom content lists so you can filter by your custom categories.

  custom_taxonomy_filters

• Wider Admin Menu

  Makes the left-hand admin menu wider so long item names stay on one line.

  wider_admin_menu

• Change Login URLExtra safeguards

  Moves the login page from /wp-login.php to a secret address of your choice, so bots that hit the default address get nothing. Write the new address down: if you lose it, use the recovery steps shown in the confirmation.

  change_login_url

• Disable User Account

  Blocks a person from logging in without deleting them, so their posts and author name stay. Use the Disable link under their name in the Users list, the box on their profile, or the bulk action. They are signed out at once. Careful: this only works while the module is on. If you switch it off, or the plugin is turned off, everyone you blocked can log in again.

  disable_user_account

• Last Login Column

  Remembers when each person last logged in and shows it in the Users list. Only logins from now on are recorded. It stores one date per person; delete-on-uninstall removes them.

  last_login_column

• Log In/Out Menu

  Adds "Log In", "Log Out" and a smart "Log In / Log Out" link you can drop into any menu (Appearance > Menus). Visitors only see the one that applies to them. If you use a page cache, make it keep logged-in visitors apart.

  login_logout_menu

• Login ID Type

  Makes people log in with their username only, or with their email address only, instead of either one.

  login_id_type

• Redirect After Login

  Sends the roles you choose to a page of your own site right after they log in, for example members to a welcome page instead of the dashboard.

  redirect_after_login

• Redirect After Logout

  Sends the roles you choose to a page of your own site right after they log out, for example back to the home page instead of the login screen.

  redirect_after_logout

• Registration Date Column

  Adds a "Registered" date and time column to the Users screen, so you can see when each person joined and sort by it.

  registration_date_column

• Site Identity on Login Page

  Replaces the WordPress logo on the login screen with your site icon (set in Appearance > Customize > Site Identity) and makes it link to your own home page.

  login_site_identity

• Custom Admin CSS

  Add your own CSS to every screen of the WordPress dashboard.

  custom_admin_css

• Custom Body Class

  Add your own CSS classes to the body tag of individual pages and posts, so you can style one page on its own.

  custom_body_class

• Custom Frontend CSS

  Add your own CSS to the public site, after your theme's styles.

  custom_frontend_css

• Manage ads.txt and app-ads.txt

  Edit your ads.txt and app-ads.txt files from the dashboard, without touching the server.

  ads_txt

• Manage robots.txt

  Edit the robots.txt file that tells search engines what they may visit, from the dashboard.

  robots_txt

• Disable All UpdatesExtra safeguards

  Turns off WordPress, plugin and theme update checks, automatic updates, update notices and update emails. Pick only the parts you need.

  disable_updates

• Disable Author Archives

  A /author/name/ page shows "not found", author links disappear and authors leave the sitemap. This also stops ?author=1 from revealing usernames.

  disable_author_archives

• Disable Comments

  Turns comments and pings off for the content types you choose and hides the comment screens when they are off everywhere. Existing comments are kept.

  disable_comments

• Disable Embeds (oEmbed)

  Stops other sites embedding yours and stops your site discovering embeds from arbitrary links.

  disable_oembed

• Disable Emojis

  Stops WordPress loading its emoji script and styles on every page. Emoji still show, using your visitors' own system emoji.

  disable_emojis

• Disable Feeds

  Turns off all RSS, Atom and RDF feeds and removes the feed links from your page headers. Your XML sitemap keeps working.

  disable_feeds

• Disable Gutenberg

  Switch the block editor off for the content types you choose and use the classic editor instead. Existing content is not changed.

  disable_gutenberg

• Disable Plugin & Theme Editor

  Nobody can edit plugin or theme code from the dashboard, not even administrators.

  disable_file_editor

• Disable REST APIExtra safeguards

  Only logged-in people can use the REST API (wp-json), and the links that advertise it are removed from your pages. Applications that sign in keep working.

  disable_rest_api

• Disable Smaller Components

  A checklist of small WordPress extras you can switch off: header tags, Dashicons for visitors, jQuery Migrate, lazy loading, application passwords and password emails.

  disable_minor_components

• Hide WordPress Version

  Removes the generator tag and the WordPress version from script and style addresses so attackers cannot read it.

  hide_wp_version

• Block REST User Enumeration

  Visitors who are not logged in can no longer list usernames through /wp-json/wp/v2/users.

  block_rest_user_enumeration

• Disable XML-RPCExtra safeguards

  Turns off the XML-RPC endpoint, trackbacks and pingbacks that attackers probe.

  disable_xmlrpc

• Email Address Obfuscator

  Adds the shortcode [obfuscate email="you@example.com"] that shows an email address to people but hides it from spam harvesters. If you switch the module off, the shortcode shows up as plain text in your pages.

  email_obfuscator

• Limit Login AttemptsExtra safeguards

  Locks an address out for 15 minutes after a few wrong passwords, and for a day after repeated lockouts. Your own address is never locked out while you set this up. Shared networks (offices, mobile data) share one address, so keep the limits generous.

  limit_login_attempts

• Obfuscate Author Slugs

  Replaces usernames in author page addresses (/author/name/) with random-looking codes, and does the same in the public users list of the REST API, so visitors and bots cannot read login names from your site. The old /author/name/ addresses stop working.

  obfuscate_author_slugs

• Password Policy

  Sets a minimum length and character rules for every new password: when someone registers, resets a password, or changes it in their profile. Existing passwords keep working until they are changed.

  password_policy

• Security Headers

  Sends X-Content-Type-Options, Referrer-Policy and X-Frame-Options with every page.

  security_headers

• Heartbeat Control

  Slows down or switches off the background "heartbeat" requests WordPress sends, to lower server load.

  heartbeat_control

• Image Upload ControlExtra safeguards

  Shrinks oversized photos as they are uploaded and turns BMP and non-transparent PNG files into JPG to save disk space. The original upload is replaced.

  image_upload_control

• Limit Post Revisions

  Keeps only the latest few revisions of each post so the database stays small.

  limit_revisions

• Display System Summary

  Adds web server, PHP, database and server address to the "At a Glance" box on the Dashboard. Only administrators see it.

  system_summary

• Image Sizes Panel

  Shows every generated size of an image, with direct links and dimensions, when you edit it in the Media Library.

  image_sizes_panel

• Maintenance ModeExtra safeguards

  Shows visitors a friendly "we'll be back soon" page while you work. People who can edit posts still see the real site. Search engines are told to come back later, so your rankings are safe.

  maintenance_mode

• Multiple User RolesExtra safeguards

  Lets you give one person several roles at once from the Edit User and Add New User screens (for example Editor and Shop manager).

  multiple_user_roles

• Password ProtectionExtra safeguards

  Hide the whole site behind one shared password. Good for a staging copy or a private preview. Logged-in administrators walk straight in.

  password_protection

• Plugins and Themes RollbackExtra safeguards

  Go back to an earlier version of a plugin or theme when an update broke something (or move to a later one) from one screen, with a log of what was changed. Only for plugins and themes from WordPress.org.

  plugins_themes_rollback

• Redirect 404 to Homepage

  Sends visitors who land on a "page not found" address to your home page instead.

  redirect_404_home

• Search Engines Visibility Status

  Shows a bright warning in the toolbar while your site asks search engines not to list it. Easy to forget after a launch.

  search_visibility_status

• View Admin as RoleExtra safeguards

  Lets you see the dashboard and your site exactly as an Editor, Author, Customer or any other role would, then switch back with one click. Your own account is never changed.

  view_admin_as_role