Send Basic Security Headers
Adds common HTTP security headers to front-end responses: nosniff, same-origin framing, a strict referrer policy and a restrictive permissions policy.
WPIDE Team 6 installs
Snippet Library
WordPress code snippets, ready to use
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
"How We Use Your Data" Box at WooCommerce Checkout
Shows a short, plain-language summary above the checkout form explaining what order data you collect, why, and how long you keep it, with a link to your full privacy policy.
"Privacy Policy Last Updated" Date Shortcode
Adds a [privacy_policy_updated] shortcode that prints the date your privacy policy page was last changed, so the date on the page is always correct.
Add Your Own Section to the Privacy Policy Guide
Adds a suggested paragraph about your custom code (such as analytics, embeds or contact forms) to the Privacy Policy Guide under Settings > Privacy, ready to copy into your policy.
Allow Your Site to Be Embedded Only on Partner Domains
Replaces the usual same-site framing rule with a Content-Security-Policy frame-ancestors list, so your pages can be shown in iframes on the partner sites you name and nowhere else.
Block Passwords Found in Known Data Breaches
Checks new passwords against the Have I Been Pwned database of breached passwords when users change or reset them, and asks for a different one if it appears there.
Consent Record Log With Shortened IP Addresses
Records each cookie consent choice (accepted or rejected, categories, date and privacy policy version) in its own database table, with only a shortened IP address, and lists the latest records under Tools > Consent Log.
Content Security Policy Builder With Violation Reports
Sends a report-only Content Security Policy and collects the browser's violation reports, then lists every blocked source per directive under Tools > CSP Reports with a suggested policy you can enforce later.
Content Security Policy Header (Report-Only)
Sends a starter Content Security Policy in report-only mode, so you can see in the browser console what a strict policy would block before enforcing it.
Cookie List Table Shortcode
Adds a [cookie_list] shortcode that prints a clear table of the cookies your site uses, with provider, purpose and duration, for your cookie or privacy policy page.
Cross-Origin Opener Policy and Related Isolation Headers
Sends Cross-Origin-Opener-Policy, Origin-Agent-Cluster and X-Permitted-Cross-Domain-Policies headers on public pages, which stop other sites you link to or that open yours from reaching into your pages.
Hide Links on the Login Page
Removes the "Go to site", "Lost your password?" and privacy policy links from the login screen, each one switchable on its own.
Let Editors Edit the Privacy Policy Page
WordPress only lets administrators edit the privacy policy page. This allows editors to update it too.
Never Send the Referrer From Checkout and Account Pages
Sends a strict no-referrer policy on the WooCommerce checkout, order received and account pages, so order keys and other private URL details are never passed to third-party scripts or sites linked from there.
Nonce-Based Content Security Policy for Scripts
Adds a fresh random nonce to every script WordPress prints and sends a strict, nonce-based script policy (report-only by default), the modern way to block injected scripts.
Pages Widget: Exclude Pages and Sort by Menu Order
Hides pages such as Privacy Policy or Thank You from the Pages widget and sorts the rest by their menu order.
Prevent Reusing Any of the Last 5 Passwords
Remembers the last five password hashes of each user and refuses a new password that matches one of them, on the profile screen and on password reset.
Privacy Note Above the Easy Digital Downloads Checkout
Adds a short note above the Easy Digital Downloads purchase form explaining which details are collected for the order and linking to your privacy policy.
Privacy Notice Above the Comment Submit Button
Adds a short note above the submit button explaining that the name, email and comment are stored, with a link to your privacy policy page if one is set.
Privacy Policy Link in the Site Footer
Adds a link to the privacy policy page you set under Settings > Privacy at the bottom of every page, for themes that do not show it.
Remind Administrators to Publish a Privacy Policy
Shows a notice on the dashboard while no published privacy policy page is selected in Settings > Privacy, with a link to set one up.
Required Privacy Consent Checkbox on Comments
Adds a required "I agree to the privacy policy" checkbox to the comment form and rejects comments that are submitted without it, with a link to your privacy page.
Security Headers for wp-admin and the Login Page
Sends nosniff, a strict referrer policy, a restrictive permissions policy and a cross-origin opener policy on dashboard and login pages, which front-end header snippets do not cover.
Send Certain Searches Straight to a Page
Opens a chosen page directly when someone searches for an exact word or phrase, for example "contact" goes to your contact page and "returns" to your returns policy.