Block User Enumeration
Stops visitors from discovering usernames through ?author=N URLs, the public REST API users endpoint, the users sitemap and oEmbed data.
WPIDE Team 6 installs
Snippet Library
WordPress code snippets, ready to use
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
"Get Directions" Map Link Shortcode
Adds a [map_link] shortcode that links an address to Google Maps or Apple Maps directions, opening the visitor's maps app on phones, without embedding a map or loading any script.
Add Missing Titles to Embedded Iframes
Gives iframes in post content a title attribute when they lack one (for example "YouTube video" or "Embedded map"), so screen reader users know what each frame contains.
Add Your Own Section to the Privacy Policy Guide
Adds a suggested paragraph about your custom code (such as analytics, embeds or contact forms) to the Privacy Policy Guide under Settings > Privacy, ready to copy into your policy.
Add an Embed Provider WordPress Does Not Support
Teaches WordPress to embed links from an extra service that offers oEmbed, such as a podcast host, video platform or design tool, so pasting its URL on its own line shows the player.
Allow Only Chosen REST API Namespaces for Visitors
Blocks REST API routes for logged-out visitors except the namespaces you list (for example oEmbed, contact forms and the WooCommerce Store API), shrinking the public attack surface without breaking front-end features.
Allow Your Site to Be Embedded Only on Partner Domains
Replaces the usual same-site framing rule with a Content-Security-Policy frame-ancestors list, so your pages can be shown in iframes on the partner sites you name and nowhere else.
Author Name and Avatar in REST API Posts
Adds an author_details field with the author's display name, profile link and avatar URL to every post in the REST API, saving apps a second request or a heavy _embed call.
Cache oEmbed Results Longer
Keeps embedded content like videos and social posts cached for 30 days instead of re-fetching it from the provider every day.
Change the Default Embed Size
Sets the default maximum width and height WordPress asks for when embedding videos and other media from a link.
Clear the Embed (oEmbed) Cache
Run on demand to delete every cached embed (videos, tweets and other oEmbed results) from the database, so they are fetched fresh and stale or broken embeds disappear.
Click-to-Load Google Maps Embeds
Replaces embedded Google Maps in your content with a placeholder that loads the map only when clicked, for faster pages and fewer third-party cookies.
Click-to-Play YouTube Embeds
Shows a lightweight thumbnail instead of the full YouTube player until the visitor clicks play, saving around a megabyte of scripts per video.
Disable oEmbed Discovery and the Embed Script
Stops your site from acting as an oEmbed provider: removes the discovery links, the embed REST route and the wp-embed script. Embedding YouTube and similar services keeps working.
Embed a Map From an ACF Google Map Field
Adds an [acf_map name="location"] shortcode that shows a lazy-loaded embedded map and a directions link for the place saved in an ACF Google Map field.
Embed an External Analytics Dashboard
Adds a dashboard widget that shows a shared dashboard from another service, such as a public Plausible, Looker Studio or uptime status page, so clients see their numbers without another login.
Hide Embed Blocks You Do Not Use
Keeps only the embed providers you choose, like YouTube and Vimeo, in the block inserter instead of dozens of services.
Limit the Blocks Authors and Contributors Can Use
Gives authors and contributors a short list of everyday blocks (text, headings, lists, images, quotes, embeds) while editors and administrators keep every block.
Limit the Embed Providers in the Inserter
Hides the long list of embed blocks (TikTok, Reddit, Kickstarter and dozens more) from the inserter, keeping only the providers you actually use.
Load Social Media Post Embeds Only on Click
Holds back embedded posts from X (Twitter), Instagram, Facebook, TikTok and Threads behind a short notice, so their scripts and trackers only load when the visitor asks for them.
Load Vimeo Videos Only After a Click
Replaces embedded Vimeo players with a lightweight placeholder showing the video title, so nothing is loaded from Vimeo until the visitor clicks to play.
PDF Viewer Shortcode
Adds a [pdf_viewer] shortcode that shows a PDF from the Media Library or a URL inside the page with the browser's built-in viewer, plus a download link for phones that cannot display it inline.
Privacy-Enhanced Mode for YouTube Embeds
Switches every embedded YouTube video to youtube-nocookie.com, YouTube's privacy-enhanced mode, which does not set tracking cookies until the visitor plays the video.
Remove Autoplay From Embedded Videos
Strips autoplay settings from YouTube and Vimeo embeds in posts, so videos only start when the visitor presses play.