Versão:
2.4.0
Última atualização:
há 10 dias
Instalações ativas:
mais de 1.000
Versão do WordPress:
6.0.0 ou maior
Testado até o WordPress:
6.7.2
Versão do PHP:
7.4 ou maior
Tags:
Admin Tools Disable Comments Media Management Security User Experience

Hospedagem WordPress com plugin WPMasterToolKit

Onde hospedar o plugin WPMasterToolKit?

Este plugin pode ser hospedado em qualquer hospedagem que possua WordPress configurado. Recomendamos optar por um provedor de hospedagem confiável, com servidores especializados para WordPress, como o serviço de hospedagem da MCO2.

Hospedando o plugin WPMasterToolKit em um provedor seguro

A MCO2, além de instalar o WordPress na versão mais atual para seus clientes, disponibiliza o plugin WP SafePress, um mecanismo singular que assegura e aumenta a performance do seu site simultaneamente.

Por que a Hospedagem WordPress funciona melhor na MCO2?

A Hospedagem WordPress funciona melhor pois a MCO2 possui servidores otimizados para WordPress. A instalação de WordPress é diferente de uma instalação trivial, pois habilita imediatamente recursos como otimização automática de imagens e fotos, proteção da página de login, bloqueio de atividades suspeitas diretamente no firewall, cache avançado e HTTPS ativado por padrão. São plugins que potencializam seu WordPress para a máxima segurança e o máximo desempenho.

WP Master ToolKit is your all-in-one solution for optimizing WordPress. It streamlines your dashboard, enhances workflows, and simplifies content and settings management. Customize your WordPress installation effortlessly with all the tools you need at your fingertips.

Test by Alexis Fichou (WP-Origami) :

Test by Enzo (Easy WordPress) :

87 Free features

Adminer: A full-featured database management tool.
Allow Menu Custom Links to Open in New Tab: Enable custom menu links to open in a new tab with a checkbox. For security and SEO, links include the rel="noopener noreferrer nofollow" attribute.
Apple Touch Icon: Manage app icon (Apple Touch Icon) individually. Once activated, go to Settings / General for change your Apple Touch icon without impact your favicon.
Auto Regenerate Salt Keys: WordPress salt keys or security keys are codes that help protect important information on your website.
Auto-Publish Posts with Missed Schedule: Automatically initiate the publication of scheduled posts marked with "missed schedule" upon each visit to the website, across all post types.
Ban Emails: Ban the chosen emails.
Blacklisted Usernames: Prevent the creation of new user accounts with predifined blacklisted usernames. Blacklist usernames that are too common.
Block User Registration from Disposable Email: Block user registration from disposable email addresses. Disposable email addresses are temporary email addresses that are used to register on websites that require email verification.
Child theme generator: A simple tool to generate a child theme on your WordPress. You can disable it after generation.
Clean Profiles: Tidy up user profiles by removing sections you do not utilise.
Clean Up Admin Bar: Remove various elements from the admin bar.
Code Snippets: Add custom code snippets without editing the theme’s functions.php. Ideal for CSS, JavaScript, and PHP. To disable all snippets, add to wp-config.php: define('WPMASTERTOOLKIT_SNIPPETS_SAFE_MODE', true);
Content Duplication: Enable one-click duplication of pages, posts and custom posts. The corresponding taxonomy terms and post meta will also be duplicated.
Content Order: Enable custom ordering of various "hierarchical" content types or those supporting "page attributes". A new 'Order' sub-menu will appear for enabled content type(s).
Custom Admin CSS: Add custom CSS on all admin pages for all user roles.
Custom Body Class: Add custom <body> class(es) on the singular view of some or all public post types.
Custom Frontend CSS: Add custom CSS on all frontend pages for all user roles.
Disable All Updates: Completely disable core, theme and plugin updates and auto-updates. Will also disable update checks, notices and emails.
Disable Block-Based Widgets Settings Screen: Disable block-based widgets settings screen. Restores the classic widgets settings screen when using a classic (non-block) theme. This has no effect on block themes.
Disable Dashboard Widgets: Clean up and speed up the dashboard by completely disabling some or all widgets. Disabled widgets won't load any assets nor show up under Screen Options.
Disable Feeds: Completely disable RSS, Atom, and RDF feeds for posts, categories, tags, comments, authors, and search. Removes all feed URL references from the <head> section.
Disable Gutenberg: Deactivate the Gutenberg block editor selectively, allowing you to control its usage for specific or all relevant post types.
Disable REST API: Disable REST API access for non-authenticated users and remove URL traces from <head>, HTTP headers and WP RSD endpoint.
Disable Really Simple Discovery (RSD) <link> tag: Disable the Really Simple Discovery (RSD) tag in . The RSD tag is used by XML-RPC clients to discover the location of the XML-RPC endpoint on your site.
Disable WP Sitemap: Disable the default WordPress sitemap feature, which was introduced in WordPress 5.5.
Disable Windows Live Writer (WLW) manifest <link> tag: Disable the Windows Live Writer (WLW) manifest <link> tag in <head>. The WLW app was discontinued in 2017.
Disable WordPress shortlink <link> tag: Disable the WordPress shortlink <link> tag in <head>. Replace with a shortlink plugin for custom names and click tracking.
Disable XML-RPC: Enhance security with advanced XML-RPC protection against brute force, DoS, and DDoS attacks. Trackbacks and pingbacks are also disabled to strengthen defenses.
Disable cart fragments scripts: Disable cart fragments scripts on the front-end for public site visitors. This might break the functionality of the cart and checkout pages if they depend on cart fragments.
Disable dashicons CSS and JS files: Disable loading of Dashicons CSS and JS files on the front-end for public site visitors. This might break the layout or design of custom forms, including custom login forms, if they depend on Dashicons. Make sure to check those forms after disabling.
Disable emoji support: Disable emoji support on the admin and frontend for pages, posts, and custom post types. Modern browsers now natively support emojis, making this feature unnecessary.
Disable jQuery Migrate: Removes the jQuery Migrate script from the frontend of your site.
Disable wp_mail: Disable the wp_mail function, which is used by WordPress to send emails. This feature is useful for websites that do not send emails, as it prevents the wp_mail function from loading and consuming resources.
Disallow Bad Requests: Protect your site against a wide range of threats. check all incoming traffic and quietly blocks bad requests containing nasty stuff like eval(, base64_, and excessively long request-strings.
Disallow Dir Listing: Disable the listing of the directories.
Disallow Malicious File Access in upload: Protect your website from malicious file access in the upload directory.
Disallow Plugin Upload: Disable zip file uploads for plugins, which are used to install plugins on your website.
Disallow Theme Upload: Disable zip file uploads for themes, which are used to install themes on your website.
Disallow WP File Edit: Prevent the modification of your website's core files through the WordPress admin panel.
Disallow register user: Prevent the creation of new user accounts on your website with the native WordPress registration form.
Duplicate Menu: Easily duplicate your WordPress Menus
Enhance List Tables: Improve the usefulness of listing pages for various post types and taxonomies, media, comments and users by adding / removing columns and elements.
Export Posts & Pages: Download your posts and pages to a .csv format.
Export Users: Download your user data to a .csv format.
External Permalinks: Enable pages, posts and/or custom post types to have permalinks that point to external URLs. The rel="noopener noreferrer nofollow" attribute will also be added for enhanced security and SEO benefits.
File Manager: Browser and manage your files efficiently and easily.
Force SSL: Force HTTPS on your site to ensure all traffic is encrypted and secure.
Force Strong Password: Enforce the use of strong passwords for all users on your website. This feature is especially useful for websites with multiple users, as it ensures that all users have a strong password that is difficult to guess or crack.
Heartbeat Control: Modify the interval of the WordPress heartbeat API or disable it on admin pages, post creation/edit screens and/or the frontend. This will help reduce CPU load on the server.
Hide Admin Bar: Hide the admin bar on the front end of your website for either specific user roles or all users.
Hide Admin Notices: Improve user experience on admin pages by gathering all notifications in a popup (opened by clicking on the bell at the top right).
Hide Login Errors: Hide the default WordPress login errors that appear when an incorrect username or password is entered.
Hide PHP Versions: Some servers send a header called X-Powered-By that contains the PHP version used on your site. It may be a useful information for attackers, and should be removed.
Hide WordPress Version: Hide the WordPress version from the source code.
Image Upload Control: Resize newly uploaded, large images to a smaller dimension and delete originally uploaded files. BMPs and non-transparent PNGs will be converted to JPGs and resized.
Insert <head>, <body> and <footer> Code: Easily insert <meta>, <link>, <script> and <style> tags, Google Analytics, Tag Manager, AdSense, Ads Conversion and Optimize code, Facebook, TikTok and Twitter pixels, etc.
Last Login Column: Track and record the most recent login activity of site users, then showcase the date and time in the users list table
Limit Login Attempts: Prevent brute force attacks by limiting the number of failed login attempts allowed per IP address.
Local avatars: Replaces GRAVATAR management with media management.
Lock Admin Email: Prevent the modification of the admin email address on your website.
Lock Site URL: Prevent the modification of the site URL on your website.
Log In/Out Menu: Enable log in, log out and dynamic log in/out menu item for addition to any menu.
Maintenance Mode: Show a customizable maintenance page on the frontend while performing a brief maintenance to your site. Logged-in administrators can still view the site as usual.
Manage ads.txt and app-ads.txt: Easily edit and validate your ads.txt and app-ads.txt content.
Manage robots.txt: Easily edit and validate your robots.txt content.
Media Cleaner: Automatically sanitize uploaded file names by removing special characters, and streamline media management by auto-generating key metadata fields (title, caption, alt text, and description) directly from the cleaned file name.
Media Encoder: Automatically converts images to WebP when they are uploaded to the media library.
Meta Debugger: Display all metadata for a post, user, term, or comment.
Move Login URL: Change the default login URL to a custom URL of your choice.
Multiple User Roles: Enable assignment of multiple roles during user account creation and editing. This maybe useful for working with roles not defined in WordPress core, e.g. from e-commerce or LMS plugins.
Nav Menu Visibility: Control your nav menu by allowing you to apply visibility controls to menu.
Obfuscate Author Slugs: Obfuscate author page URLs to hide user slugs (e.g., sitename.com/author/username1/ becomes sitename.com/author/a6r5b8ytu9gp34bv/) and return 404 errors for original URLs. Also obfuscates user data in the /wp-json/wp/v2/users/ REST API endpoint.
Obfuscate Email Addresses: Obfuscate email address to prevent spam bots from harvesting them, but make it readable like a regular email address for human visitors, using shortcode [wpm_obfuscate email="[email protected]" display="newline"]
Open All External Links in New Tab: Ensure all external links in post content open in a new tab with target="_blank" and include rel="noopener noreferrer nofollow" for security and SEO benefits.
Password Protection: Password-protect the entire site to hide the content from public view and search engine bots / crawlers. Logged-in administrators can still access the site as usual.
Plugin & Theme Rollback: Revert to previous versions of any theme or plugin from WordPress.org.
Post Per Page: Specifying the number of posts to display per page, for each post type.
Prevent User Enumeration: Prevent user enumeration via ?author=X and REST API /users/ endpoints.
Protect Website Headers: Add security headers quickly to your site to protect it from threats such as phishing attacks, data theft and more.
Quick Add Post: A new button to quickly add new posts to speed up your workflow.
Redirect 404 to Homepage: Sends visitors to your homepage if they try to access a page that doesn't exist, ensuring they stay on your site.
Redirect After Login: Set custom redirect URL for all or some user roles after login.
Redirect After Logout: Set custom redirect URL for all or some user roles after logout.
Revisions Control: Avoid overloading the database by setting a cap on the number of revisions to save for certain or all types of posts that support revisions.
SMTP Mailer: Set custom sender name and email. Optionally use external SMTP service to ensure notification and transactional emails from your site are being delivered to inboxes.
SVG Upload: Enhance media library functionality to support the seamless uploading of SVG files.
Wider Admin Menu: Give the admin menu more room to better accommodate wider items.

19 Pro features

410 Manager: Managing HTTP 410 statuses on your site. The 410 status indicates that the requested resource has been permanently deleted and that this deletion is intentional and final.
Add Essentials Shortcodes: Insert dynamic variables into your titles and content via shortcodes.
Auto clean actionscheduler_actions: Clean actionscheduler_actions database table from actions that have been completed | failed | cancelled.
CRON Manager: Manage cron events on your website.
Change Database Prefix: Quickly change your WordPress database prefix to save time and enhance security.
Disable Comments: Manage the visibility of comments on your public posts by selectively disabling them for specific post types or across all posts. Once comments are disabled, any existing comments will seamlessly disappear from the front-end.
Disallow Access WP Sensible Files: Delete the wp-config-sample.php, block access to readme.html, license.txt
Disallow Countries IP: Include/Exclude countries IP
Force Send All Email To: Force all emails sent from your website to be sent to a specific email address. This feature is useful for testing email functionality on your website, as it ensures that all emails are sent to a single email address.
Hook And Filter Debugger: Displaying the sequence of action and filter hooks by their origin on a single page.
Link Shortener: Shorten your links with a custom prefix.
Manage Admin Emails Notifications: Disable admin emails notifications.
No Plugin Activation / Deactivation / Deletion: Prevents plugin activation, deactivation, and deletion for enhanced security.
Paste Image In Media: With this feature you can paste directly your picture in WordPress media.
Plugin Download: Download plugins from the plugins page in the WordPress admin panel.
Two Factor Authentication: Add an extra layer of security to your website by enabling two-factor authentication for all users.
Updates Logs: Track and record the most recent login activity of site users, then showcase the date and time in the users list table
User Switching: Instant switching between user accounts.
Vulnerabilities Scan: This module will scan your WordPress Core Version, Plugins and Themes for vulnerabilities.

⭐️ UPGRADE TO PRO VERSION: WPMasterToolKit Pro ⭐️

Other plugin by Webdeclic

Webdeclic is a French web agency based in Paris. We are specialized in the creation of websites and e-commerce sites. We are also the creator of the following plugins:
* QuickWebP
* Cookie Dough
* Univeral Honey Pot
* Clean My WP
* Mentions Legales Par Webdeclic
* Lexilink
* Show all plugins on WordPress.org

Support us

⭐️ If you like this plugin, please give us a 5 star rating on WordPress.org. This will motivate us to develop new features and write other plugins. ⭐️

☕️ If you want buy me a coffee, you can do it here : Buy me a coffee ☕️

Capturas de tela

Admin page

Import / Export settings

Move login submenu

Code snippets

Plugins semelhantes

Wordfence Security – Firewall, Malware Scan, and Login Security

(4.506 avaliações)

Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.

Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

(8.698 avaliações)

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate.

Jetpack – WP Security, Backup, Speed, & Growth

(2.300 avaliações)

Aprimore sua segurança no WP com ferramentas avançadas de um clique, como backup, WAF e verificação de malware. Inclui as ferramentas essenciais gratuitas como estatísticas, CDN e compartilhamento em redes sociais.