Allow Only Images and PDFs for Non-Administrators
Limits the file types authors, editors and other non-admin users can upload to common images and PDF documents.
Snippet Library
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Limits the file types authors, editors and other non-admin users can upload to common images and PDF documents.
Lets users in chosen roles, such as shop managers or support staff, log in only on working days between set hours in the site's time zone.
Tells screen reader users when the cart has been updated after they change a quantity, remove a product or apply a coupon on the classic cart page, which otherwise happens silently.
Adds hidden "(opens in a new tab)" text and a small icon to links in post content that open a new window, so screen reader and keyboard users are not surprised.
On search result pages, tells screen reader users how many results were found for their search as soon as the page loads.
When a user account is deleted, keeps their comments but replaces the name with "Former member" and removes the email address, website and IP address stored with them.
New sign-ups wait for an administrator to approve them on the Users screen before they can log in, and get an email once approved.
Requires administrators to log in again before opening plugin, theme, user and update screens when their login is older than 30 minutes, so a hijacked session cannot quietly install code or add users.
Publishes comments from registered, logged-in users right away, while comments from guests still follow your moderation settings.
Rejects the most common passwords, and passwords containing the username or site name, when users set or reset their password.
Rejects registrations from throwaway email services, which are a common source of fake and spam accounts.
Checks new passwords against the Have I Been Pwned database of breached passwords when users change or reset them, and asks for a different one if it appears there.
Prevents anyone from registering or being created with usernames like admin, support or root that look official or invite attacks.
Adds a "Last active" column to the WordPress Users screen using BuddyPress's activity tracking, so you can see who is actually using the community.
Adds "Add role" options to the Bulk actions menu on the Users screen, so you can give a second role to many users at once without replacing their current role.
Caches the per-role user counts shown on the Users screen and dashboard for 12 hours, avoiding a heavy query on sites with many users.
Adds Users > Capability Audit, listing every role other than Administrator and every user outside the administrator role that holds powerful permissions such as unfiltered HTML, plugin installation or user management.
Pre-ticks the "Remember Me" box on the login form so users stay logged in longer without having to remember to tick it.
Lets keyboard users press Escape to close an open dropdown or mobile menu and returns focus to the button or link that opened it.
Starts everyone with the narrow, icon-only admin menu for more working space. Users who expand it keep their choice.
Adds a "Comments" column to the Users screen showing how many approved comments each user has written, linked to their comments.
Tightens the spacing of admin table rows so more posts, pages and users fit on screen at once.
Adds a [wpide_for_users] shortcode that shows its content only to the user accounts you list, handy for private notes to one client on a shared page.
Posts the subject and the start of every email sent to the site admin address into a Slack channel, so the team sees new users, comments and alerts where they already work.