Disable XML-RPC
Turns off the XML-RPC interface (xmlrpc.php), a common target for brute-force and pingback abuse. Use it when no app or service needs XML-RPC.
WPIDE Team 6 installs
Snippet Library
WordPress code snippets, ready to use
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Accept Application Passwords Only From Trusted IP Addresses
Rejects REST API and XML-RPC logins made with application passwords unless they come from the IP addresses or networks you list, such as your office, CI server or integration partner.
Add Custom URLs to the XML Sitemap
Adds a sitemap of extra URLs, such as static landing pages or sections served outside WordPress, to the built-in sitemap index.
Add Your Own Sitemaps to the Yoast Sitemap Index
Lists extra sitemap files, such as one from a shop, forum or static section, in the Yoast SEO sitemap_index.xml so search engines find them in one place.
Allow JSON, CSV and Other Data File Uploads
Lets administrators upload data files such as JSON, CSV, XML and Markdown to the Media Library, which WordPress blocks by default.
Allow XML-RPC Only From Trusted IP Addresses
Keeps XML-RPC available for the services you list (such as Jetpack or a publishing app on your office network) while answering every other XML-RPC request with a 403 error.
Browser and CDN Caching for Feeds and Sitemaps
Sends cache headers on RSS feeds and XML sitemaps so feed readers, crawlers and CDNs can reuse them for an hour instead of making WordPress rebuild them on every request.
Change the Number of URLs per Sitemap Page
Changes how many links each page of the built-in XML sitemap holds (2,000 by default), for example to split a huge sitemap into smaller files.
Custom Field Values in Feed Items
Adds the custom fields you choose, such as an event date or location, to each RSS item as its own element, for newsletter tools, aggregators and partner sites that read your feed.
Disable Pingbacks and Trackbacks
Closes pings on all content, removes the X-Pingback header and the XML-RPC pingback methods. Regular comments are not affected.
Disable Tag Archives
Redirects tag archive pages to the homepage and removes tags from the XML sitemap, for sites that use tags only internally.
Disable XML-RPC Multicall
Removes the XML-RPC system.multicall method, which attackers use to try hundreds of passwords in a single request, while XML-RPC keeps working for apps and Jetpack.
Disable the Built-in XML Sitemaps
Turns off the wp-sitemap.xml sitemaps added in WordPress 5.5. Use it when an SEO plugin already generates sitemaps.
Emergency Lockdown Switch
Adds a "Lockdown" toggle to the admin bar for administrators. While it is on, only administrators can log in, everyone else is logged out, registration and comments are closed and XML-RPC is off.
Exclude Content Types From the XML Sitemap
Removes chosen post types and taxonomies (tags by default) and the users list from the built-in wp-sitemap.xml.
Exclude Specific Posts From the All in One SEO Sitemap
Keeps the posts and pages you list out of All in One SEO's XML sitemap.
Exclude Specific Posts From the Rank Math Sitemap
Leaves the posts and pages you list out of Rank Math's XML sitemaps without changing their robots settings.
Exclude Specific Posts and Pages From the Sitemap
Leaves the posts and pages you list out of the built-in XML sitemap, such as thank-you pages, landing pages for ads or legal pages.
Exclude Specific Posts and Pages From the Yoast Sitemap
Keeps the posts and pages you list out of the Yoast SEO XML sitemaps while leaving them indexable.
Keep Old Feed Addresses Working After Moving to WordPress
Redirects feed addresses used by Blogger, Ghost, Jekyll, Hugo and other platforms, such as /rss.xml or /feeds/posts/default, to your WordPress feed, so existing subscribers keep receiving posts.
Keep Past Events Out of the XML Sitemap
Leaves events that have already ended out of WordPress's built-in sitemap (wp-sitemap.xml), so search engines spend their time on upcoming events.
Last Modified Dates in the XML Sitemap
Adds the date each post was last updated to the built-in sitemap, which helps search engines find changed content faster.
List Extra Sitemap Files in Rank Math's Index
Lists extra sitemap files from other parts of your site in Rank Math's sitemap_index.xml.
Noindex an Entire Post Type
Keeps every entry and the archive of chosen post types out of search results and removes them from the built-in XML sitemap, while visitors can still open them.