Shorter Nonce Lifetime
Makes WordPress security tokens (nonces) expire after 4 hours instead of up to 24, shrinking the window in which a leaked link can be reused.
Snippet Library
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Makes WordPress security tokens (nonces) expire after 4 hours instead of up to 24, shrinking the window in which a leaked link can be reused.
Counts the external HTTP requests WordPress, plugins and themes make while building a page, and lists each URL, status and time in an admin bar menu for administrators.
Converts post dates and times on the page into each visitor's local timezone and language format in the browser, so an event posted for 18:00 London reads 19:00 in Paris.
Greets users in the admin with the date, time and IP address of their previous login, so they can spot logins they do not recognize.
Displays the current time in the site's timezone in the admin bar, which helps when scheduling posts from another timezone.
Hides the "_load_textdomain_just_in_time was called incorrectly" debug notice (added in WordPress 6.7) for plugins you cannot fix yourself, keeping debug logs readable.
Counts how many times each blog post is viewed, shows the total in a Views column in the posts list and adds a [post_views] shortcode for the front end.
Adds a dashboard widget with one timeline of the latest published posts, approved comments and new user sign-ups, newest first, so you see what happened on the site at a glance.
Adds a Site Health test that requests your homepage and one of your theme's stylesheets and reports whether text files are compressed (gzip or Brotli) and whether static files get long browser cache lifetimes.
Stops WordPress, plugins and themes from loading translation files on the front end (or everywhere) to save memory and time on sites whose visitors read English anyway, with a list of text domains to keep.
Removes the Site Health checks that make HTTP requests back to your own site, which are slow or time out on some hosts.
Checks scheduled sale dates every hour instead of once a day at midnight, so sales that should start or end during the day do so close to on time.
Fills the editor of every new post with your own starter text or outline, so writers begin from the same structure each time.
Stops WordPress emailing the site admin each time a user confirms a personal data export or erasure request; you can still see requests under Tools.
Stops WordPress from emailing the network admin every time a site is created or someone activates a new site or account, useful on networks that create many sites automatically.
Prevents the "New user registration" email that is sent to the site admin every time someone registers. The welcome email to the user still goes out.
Stops the email the site admin gets each time a user resets their password.
Stops WordPress from notifying ping services such as Ping-O-Matic every time you publish, which most sites no longer need.
Adds a dashboard widget showing the current local time for each office or teammate you list, next to the site's own time, so scheduling across time zones is easier.
Sets the update period and time-to-live in your RSS feed, so feed readers check a daily blog once a day instead of every hour.
Adds a [greeting] shortcode that says Good morning, Good afternoon or Good evening based on your site's timezone, with the logged-in user's first name when there is one.
Sends a generate_lead event to Google Analytics 4 or Google Tag Manager each time a Contact Form 7 form is sent successfully, with the form ID attached.
Adds a Tools > Transients screen listing the cached transients stored in the database with their size and expiry time, and lets administrators delete a single one to force a refresh.
Gives new sign-ups a "trial" role for a limited time (14 days by default) and then switches them to a basic role automatically the next time they visit.