Limit Failed Login Attempts
Temporarily blocks an IP address after 5 failed logins within 15 minutes. A lightweight brute-force guard with no settings screen.
Snippet Library
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Temporarily blocks an IP address after 5 failed logins within 15 minutes. A lightweight brute-force guard with no settings screen.
Registers a "Coming Soon" block, rendered on the server without a build step, that lists the titles and dates of your next scheduled posts to build anticipation for upcoming content.
Adds a second email field to the classic checkout and blocks the order if the two addresses do not match, to cut down on typos.
Registers a server-rendered block that lists the latest posts by the current post's author, excluding the post being read, to keep readers with writers they like.
Registers a server-rendered block that lists the other pages sharing the current page's parent, with the current page marked, giving every section of a large site its own side navigation.
Adds your brand gradients to the gradient picker for Group, Cover, Button and other blocks, so editors use on-brand backgrounds.
Registers extra style variations for core blocks, such as an "Outline" button and a "Card" group, that editors can pick in the block sidebar.
Adds a "Patterns" item under Appearance that lists your synced patterns (reusable blocks), if your WordPress version does not show one already.
Lets administrators upload web fonts (WOFF, WOFF2, TTF, OTF), EPUB eBooks, JSON and GPX files to the Media Library, which WordPress blocks by default.
Lets administrators upload data files such as JSON, CSV, XML and Markdown to the Media Library, which WordPress blocks by default.
Temporarily blocks logins for everyone except administrators, for example during a migration or a security incident.
Blocks REST API routes for logged-out visitors except the namespaces you list (for example oEmbed, contact forms and the WooCommerce Store API), shrinking the public attack surface without breaking front-end features.
Limits the blocks that can be inserted for specific post types, so structured content such as testimonials or team members only uses the blocks that fit.
Blocks an IP address from logging in for a day as soon as it tries a username like "admin" or "test" that does not exist on your site.
Removes the post being viewed from Beaver Builder Posts, Post Slider and Post Carousel modules, so "latest posts" blocks on articles never repeat the article itself.
Changes the starting settings of blocks editors add: images link to nothing and open large, galleries crop evenly, columns stay side by side on phones, and new tables have header rows.
Registers a Block Bindings source so Paragraph, Heading and Button blocks can display the site name, tagline, URL or current year and stay up to date automatically.
Registers a block bindings source that fills blocks with the post's published or last updated date in any format, so you can write "Updated on ..." in a paragraph inside block templates.
Checks visitors that claim to be Googlebot with a reverse DNS lookup and blocks the impostors, which are usually scrapers or vulnerability scanners.
Temporarily blocks visitors who hit more than 20 missing pages within a minute, a typical sign of vulnerability scanners probing for old plugins and backup files.
Adds an FAQ pattern built from core Details blocks, so visitors click a question to reveal its answer, with no plugin and no JavaScript.
Adds a testimonials pattern with three customer quotes side by side, built from core Quote blocks so it inherits your theme's quote styling.
Starts every new post with a set of placeholder blocks, such as a summary paragraph, a heading and an image, so writers follow the same structure.
Adds a Tools > Block Usage screen counting how many posts and pages use each block, with a link to the content using it, so you know which blocks and plugins are safe to remove.