Send Basic Security Headers
Adds common HTTP security headers to front-end responses: nosniff, same-origin framing, a strict referrer policy and a restrictive permissions policy.
WPIDE Team 6 installs
Snippet Library
WordPress code snippets, ready to use
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
"Landing Page" Template Without Header and Footer
Registers a "Landing page" block template for pages that shows only the page content, with no site header, footer or title, for campaign and sales pages (WordPress 6.7+).
"Page Without Title" Template for Block Themes
Registers a page template that keeps the theme's header and footer but hides the page title, for pages that start with their own hero section (WordPress 6.7+).
"Skip to Content" Link
Adds a hidden "Skip to content" link that appears when keyboard users press Tab, letting them jump past the header and menu, for themes that lack one.
Add Scope to Table Header Cells
Adds scope="col" or scope="row" to table header cells in post content that lack it, so screen readers can tie each data cell to its header.
Add a "Sidebar" Area for Template Parts
Adds a "Sidebar" area next to Header and Footer in the Site Editor, so sidebar template parts get their own section, icon and the right HTML tag.
Add a Cart Item to the Main Menu
Appends a cart link with the item count to your theme's primary menu, and keeps the count up to date as products are added.
Add a Reply-To Header to Outgoing Emails
Adds the site admin address as Reply-To on emails that do not set one, so replies to no-reply senders reach a real inbox.
Add an ACF Site Settings Options Page
Registers a "Site Settings" options page with Header and Footer sub-pages in the admin, ready for ACF field groups that hold site-wide values.
Allow Your Site to Be Embedded Only on Partner Domains
Replaces the usual same-site framing rule with a Content-Security-Policy frame-ancestors list, so your pages can be shown in iframes on the partner sites you name and nowhere else.
Astra: Message Bar Above the Header
Prints a slim message bar above the Astra header on every page, for sales, shipping notes or event dates, using Astra's own header hook.
Better Defaults for New Blocks
Changes the starting settings of blocks editors add: images link to nothing and open large, galleries crop evenly, columns stay side by side on phones, and new tables have header rows.
Block Pattern: Plan Comparison Table
Adds a comparison table pattern with a header row and check marks for comparing plans, products or options side by side.
Body Classes for the Blocks Used on a Page
Adds body classes such as "has-block-cover" or "has-block-gallery" for the main blocks a post or page contains, so CSS can adapt the header or layout to the content.
Browser and CDN Caching Headers for Visitors
Sends Cache-Control headers on public pages for logged-out visitors, so a CDN or proxy can cache them for a few minutes.
Browser and CDN Caching for Feeds and Sitemaps
Sends cache headers on RSS feeds and XML sitemaps so feed readers, crawlers and CDNs can reuse them for an hour instead of making WordPress rebuild them on every request.
BuddyPress: Unread Notifications Shortcode
Adds a [wpide_bp_notifications] shortcode that shows a bell link with the member's unread BuddyPress notification count, for headers and menus built with blocks.
Call Button in the Divi Header
Adds a tap-to-call phone button next to the menu in Divi's default header, which is especially handy for local businesses on mobile.
Cart Link With Item Count Shortcode
Adds a [wpide_cart_link] shortcode that shows a cart link with the number of items and total, which updates automatically when products are added.
Clean Table Styles for Posts (SCSS)
Gives tables in posts and pages a clean, readable look with a bold header row, light striping, comfortable padding and horizontal scrolling on phones.
Clear WP Rocket When Site Settings Change
Clears WP Rocket's whole-site cache when you save the Customizer, change menus or edit widgets, so header, footer and sidebar changes show up immediately.
Content Security Policy Builder With Violation Reports
Sends a report-only Content Security Policy and collects the browser's violation reports, then lists every blocked source per directive under Tools > CSP Reports with a suggested policy you can enforce later.
Content Security Policy Header (Report-Only)
Sends a starter Content Security Policy in report-only mode, so you can see in the browser console what a strict policy would block before enforcing it.
Cross-Origin Opener Policy and Related Isolation Headers
Sends Cross-Origin-Opener-Policy, Origin-Agent-Cluster and X-Permitted-Cross-Domain-Policies headers on public pages, which stop other sites you link to or that open yours from reaching into your pages.