Open External Links in a New Tab
Adds target="_blank" and rel="noopener noreferrer" to links in post content that point to other domains. Optionally adds nofollow too. Requires WordPress 6.2 or newer.
Snippet Library
WordPress code snippets, ready to use
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Paid Memberships Pro: Restrict Checkout to Certain Email Domains
Only lets people check out with an email address from your allowed domains, for company, school or association memberships.
Redirect an Old Domain to This Site
Permanently redirects every request that arrives on your previous domain to the same address on your current domain, after a rebrand or domain move.
Redirect to the www or Non-www Version of Your Domain
Sends visitors who arrive on the other version of your domain (with or without www) to the one set as your Site Address, so search engines see a single site.
Reject Registrations From Email Domains That Cannot Receive Mail
Checks that the email domain of every new registration has mail (MX) records, and refuses sign-ups from made-up or mistyped domains that bots and spammers often use.
Reject Requests for Unknown Host Names
Returns an error for requests whose Host header is not your site's domain, which blocks host header injection tricks (such as poisoned password reset links) and junk traffic aimed at your server's IP.
Send Comments From Blocked Email Domains to Spam
Sends comments to the spam queue when the commenter's email address belongs to a throwaway inbox service or any other domain on your list.
Send Contact Form 7 Emails From Your Own Domain
When a Contact Form 7 form is set to send "from" the visitor's address, switches the sender to your own domain and moves the visitor's address to Reply-To, so emails stop landing in spam.
Send Gravity Forms Notifications From Your Own Domain
When a Gravity Forms notification uses the visitor's email or another outside domain as the From address, switches it to your domain and keeps that address as Reply-To.
Serve Media and Static Files From a CDN Domain
Rewrites the URLs of your uploads, theme and plugin files to a CDN or pull-zone domain you set, so images, CSS and JavaScript are delivered from the CDN while pages are still served by your site.
Silence "Translation Loading Triggered Too Early" Notices
Hides the "_load_textdomain_just_in_time was called incorrectly" debug notice (added in WordPress 6.7) for plugins you cannot fix yourself, keeping debug logs readable.
Simple Analytics
Adds the cookie-free Simple Analytics script to your public pages. No tracking ID is needed: data is matched to the domain you added in Simple Analytics.
Skip Loading Translations on English Sites
Stops WordPress, plugins and themes from loading translation files on the front end (or everywhere) to save memory and time on sites whose visitors read English anyway, with a list of text domains to keep.
Spam Comments Linking to Suspicious Domains
Sends comments to spam when the commenter's website field points to a domain ending you have chosen to distrust, such as .xyz, .top or .click.
Stop Browsers Prefetching DNS for Links on Your Pages
Sends the X-DNS-Prefetch-Control header to tell browsers not to look up the domains of every link on your pages in advance, so visitors' DNS providers do not learn which sites you link to before they click.
Third-Party Requests Inspector in the Admin Bar
Adds an admin bar item on the front of the site that counts the external domains the current page loads files from, and lists them on click, to help you keep your cookie notice and privacy policy accurate.
Upgrade http:// Links to Your Own Site to https://
Rewrites old http:// links and images pointing to your own domain to https:// when content is displayed, fixing "not secure" mixed content warnings after moving to SSL without editing every post.
hreflang Tags for Regional Versions of Your Site
Links matching pages across your country sites (such as example.com, example.co.uk and example.com.au) with hreflang tags, assuming each page uses the same path on every domain.