Ban IPs That Try Common Attack Usernames
Blocks an IP address from logging in for a day as soon as it tries a username like "admin" or "test" that does not exist on your site.
Snippet Library
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Blocks an IP address from logging in for a day as soon as it tries a username like "admin" or "test" that does not exist on your site.
Removes the post being viewed from Beaver Builder Posts, Post Slider and Post Carousel modules, so "latest posts" blocks on articles never repeat the article itself.
Stops WordPress from sending any email on development, local and staging environments, so test orders and imports never reach real people.
Stops orders from customers on your block list, such as repeat chargeback offenders, matched by email address, email domain or phone number.
Rejects comment submissions that do not come from a page on your own site, which stops bots that post directly to wp-comments-post.php.
Marks Contact Form 7 submissions as spam when any field contains a word or phrase from your block list, such as SEO offers or crypto pitches.
Rejects registrations from throwaway email services, which are a common source of fake and spam accounts.
Refuses newsletter signups from throwaway email domains in Mailchimp for WordPress forms, keeping your audience clean and your Mailchimp bill lower.
Stops the same file from being uploaded twice by comparing a fingerprint of each new upload with files already in the Media Library, and tells the user where the existing copy is.
Shows an error when someone uses an email address from a domain on your block list, such as throwaway inbox services, in a Fluent Forms form.
Shows an error when someone enters an email address from a domain on your block list, such as throwaway inbox services, in any Gravity Forms email field.
Shows an error when an email address from a domain on your block list, such as throwaway inbox services, is entered in any WPForms email field.
Stops Fluent Forms submissions when any text field contains a word or phrase from your block list, such as SEO offers or crypto pitches.
Silently rejects Contact Form 7 submissions from IP addresses or ranges you list, such as a persistent spammer, while the rest of the site stays open to them.
Stops Fluent Forms submissions from IP addresses or ranges you list, such as a persistent spammer, while they can still read the site.
Stops Gravity Forms submissions from IP addresses or ranges you list and marks them as spam, without blocking those visitors from reading the site.
Rejects WPForms submissions from IP addresses or ranges you list, such as a persistent spammer, while they can still read the site.
Refuses login, password reset and registration requests sent by tools such as curl, wget, python-requests or empty user agents, which real browsers never use and brute-force scripts often do.
Stops accounts that have no role on this site (often left over after a role was removed) from logging in, which closes a common gap on older sites.
Adds an FAQ pattern built from core Details blocks, so visitors click a question to reveal its answer, with no plugin and no JavaScript.
Adds a testimonials pattern with three customer quotes side by side, built from core Quote blocks so it inherits your theme's quote styling.
Prevents anyone from registering or being created with usernames like admin, support or root that look official or invite attacks.
Stops the roles you list from opening the Elementor editor, using Elementor's own role exclusion list, while they keep normal access to the WordPress editor.
Answers search requests that contain links, markup, very long strings or words you block with a 404, stopping bots from filling search pages with spam.