Block User Enumeration
Stops visitors from discovering usernames through ?author=N URLs, the public REST API users endpoint, the users sitemap and oEmbed data.
Snippet Library
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Stops visitors from discovering usernames through ?author=N URLs, the public REST API users endpoint, the users sitemap and oEmbed data.
Stops the "WordPress x.y is available" banner from showing to users who cannot update WordPress, so editors and authors are not distracted by it.
Hides the Screen Options tab for everyone except administrators, so other users cannot rearrange or hide admin panels.
Adds a second email field to the WordPress registration form and refuses the sign-up when the two addresses differ, so new users do not lock themselves out with a typo.
Asks new members how they found your site when they register and shows the answer in a column on the Users screen.
Adds a checkbox to each user's profile that makes the text in the block editor larger and more spaced out, for authors who find the default editor text hard to read.
Records when each user was last active on the site (not just when they last logged in) and shows it in a sortable "Last seen" column on the Users screen.
Adds a button under Tools > Log Out Everyone that ends every login session on the site except your own, useful after a suspected break-in or a staff change.
Adds a "New this week" link next to All / Administrator / Subscriber on the Users screen that lists only people who registered in the last 7 days.
Adds a dashboard widget listing what happened since you last logged in to the admin: new posts by others, new comments and new users, so you catch up in seconds.
Adds a hidden "Skip to content" link that appears when keyboard users press Tab, letting them jump past the header and menu, for themes that lack one.
Returns a 404 for the author archive of anyone who has never published, such as subscribers and customers, so their usernames and empty profile pages are not exposed.
Gives numbered pagination links clear labels such as "Page 3" and names the pagination landmark "Posts pages", so screen reader users know what each link does.
Adds a real button with aria-expanded next to every menu item that has a sub-menu in classic menus, so keyboard and screen reader users can open and close sub-menus.
Adds Users > Active Sessions, listing everyone who is currently logged in with their login time, IP address and browser, and lets you end a user's sessions with one click.
Shows how many devices each user is logged in on, with a link to end all of that user's sessions from the Users screen.
Gives iframes in post content a title attribute when they lack one (for example "YouTube video" or "Embedded map"), so screen reader users know what each frame contains.
Adds every newly registered user to the main site with a role you choose, so members of any subsite also have an account on your hub site.
Registers a "wp site-stats" WP-CLI command that prints counts of posts, pages, comments and users, as a template for your own command-line tools.
Marks the theme's main content area with role="main" when the page has no main element, so screen reader users can jump straight to the content.
Adds a "Site Manager" role with everything an editor can do plus managing users and menus, defined in code so nothing is written to the database.
Adds a chosen user, such as your support or editorial account, to each newly created site with the role you pick.
Lets users who can write posts but not upload files (the Contributor role) add images to their drafts. The role itself is not changed in the database.
Keeps links and basic formatting in the Biographical Info field for users who are trusted with unfiltered HTML, instead of stripping it.