Abhishek Sinha

Abhishek Site Cleanup Controls gives developers and site owners fine-grained control over 35+ WordPress features that are often unnecessary. Each feature has a simple on/off toggle, organised into five logical groups inside Settings -> Site Cleanup Controls.
No features are enabled by default — activate only what you need.
<h4>Security</h4>
<ul>
<li>User Enumeration — Block ?author=N redirect attacks that expose usernames.</li>
<li>Author Archives — Return 404 for author archive pages.</li>
<li>XML-RPC + Pingback — Fully disable the XML-RPC endpoint and remove the X-Pingback header.</li>
<li>Plugin and Theme Editor — Set DISALLOW_FILE_EDIT to prevent in-admin file editing.</li>
<li>Application Passwords — Disable the Application Passwords feature.</li>
<li>REST API — Restrict REST API access to authenticated users only.</li>
<li>Right Click — Disable the browser context menu on the frontend.</li>
</ul>
<h4>Performance</h4>
<ul>
<li>Emojis — Remove all emoji scripts, styles, and DNS prefetch hints.</li>
<li>Embed Objects — Disable WordPress oEmbed and embed scripts.</li>
<li>Dashicons — Prevent Dashicons from loading for non-logged-in visitors.</li>
<li>Heartbeat — Deregister the Heartbeat API script.</li>
<li>Block Library CSS — Remove wp-block-library and global-styles stylesheets on the frontend.</li>
<li>Version Var (?ver=) — Strip ?ver= query strings from enqueued asset URLs.</li>
<li>PDF Thumbnails — Skip thumbnail generation for uploaded PDF files.</li>
<li>oEmbed — Remove oEmbed discovery links and disable autoembed.</li>
<li>Remote Block Patterns — Stop WordPress fetching patterns from api.wordpress.org.</li>
</ul>
<h4>Head Cleanup</h4>
<ul>
<li>Generator Meta Tag — Remove the WordPress version meta tag from head.</li>
<li>WLW Manifest — Remove the Windows Live Writer manifest link.</li>
<li>Really Simple Discovery (RSD) — Remove the RSD link tag.</li>
<li>Short Link — Remove the shortlink tag and HTTP header.</li>
<li>Adjacent Posts Links — Remove prev/next link tags from single post heads.</li>
<li>RSS Feeds — Redirect all feed URLs to the homepage.</li>
</ul>
<h4>Admin Cleanup</h4>
<ul>
<li>capital_P_dangit — Remove WordPress forced capitalisation filter.</li>
<li>Screen Options and Help Tabs — Hide Screen Options and Help dropdowns.</li>
<li>Howdy to Welcome — Replace “Howdy,” with “Welcome,” in the admin bar.</li>
<li>Navigation Items in Admin Bar — Remove WP logo, site name, updates, and comments.</li>
<li>Clean Dashboard — Remove all default dashboard widgets.</li>
<li>Privacy Tools — Hide Export/Erase Personal Data from the Tools menu.</li>
<li>Site Health Page — Hide Site Health from the Tools menu.</li>
<li>WP Login Logo and Favicon — Hide the WordPress logo on the login page.</li>
<li>Admin Email Verification Prompt — Disable the admin email confirm interstitial.</li>
<li>Empty Trash (1 week) — Shorten automatic trash-emptying from 30 days to 7 days.</li>
</ul>
<h4>Content</h4>
<ul>
<li>Comments — Disable comments sitewide.</li>
<li>Post Revisions — Disable revision storage.</li>
<li>Search — Redirect all search queries to the homepage.</li>
</ul>
<h4>WordPress Features</h4>
<ul>
<li>Thumbnails / Featured Images — Remove post thumbnail support.</li>
<li>Widgets — Disable all widgets and sidebars.</li>
<li>Navigation Menus — Remove nav menu theme support.</li>
<li>Tags — Unregister tags from posts.</li>
<li>Categories — Unregister categories from posts.</li>
<li>Post Formats — Remove post format theme support.</li>
<li>Custom Fields — Remove custom fields meta box from editor.</li>
<li>Excerpts — Remove excerpt support from posts and pages.</li>
<li>Trackbacks — Remove trackback support from posts.</li>
<li>Attachment Pages — Redirect attachment URLs to the file directly.</li>
<li>Automatic Updates — Disable automatic core, plugin, and theme updates.</li>
<li>Self Pings — Stop WordPress pinging your own site.</li>
<li>jQuery Migrate — Remove jQuery Migrate script on the frontend.</li>
</ul>

Abhishek Site Cleanup Controls

Selectively disable WordPress features to improve performance, security, and cleanliness. Toggle each feature individually from a single settings page …

BaseCloud

Transform your WordPress site into a security fortress in under 2 minutes.
BaseCloud Security Manager delivers enterprise-level security protection through advanced HTTP security headers – the same technology used by Fortune 500 companies to protect their websites. No technical expertise required.
🎯 Why Security Headers Matter: 
Security headers are your website’s first line of defense, instructing browsers on how to handle your content safely. Without them, your site is vulnerable to: 
• Cross-Site Scripting (XSS) attacks – 87% of websites are vulnerable 
• Clickjacking attacks that steal user credentials 
• Data theft through insecure connections 
• Privacy violations through referrer leaks 
• Malicious code injection
✨ What Makes BaseCloud Different:
🚀 One-Click Protection – Enable military-grade security with a single click 
🔒 Zero Configuration Required – Smart defaults protect you instantly 
⚡ Lightning Fast – No performance impact on your site 
🎛️ Full Control – Advanced users can customize every setting 
🛠️ Developer Friendly – Clean, well-documented code 
🔧 No Server Changes – Works on any hosting provider
🛡️ Complete Security Arsenal:
🎯 Master Security Switch 
Enable all protections instantly – perfect for non-technical users who want maximum security without complexity.
🔐 Force SSL/HTTPS Everywhere 
Automatically redirect all HTTP traffic to HTTPS, ensuring all data transmission is encrypted. Protects against man-in-the-middle attacks.
🛡️ Content Security Policy (CSP) 
The gold standard of XSS protection. Controls exactly which scripts, styles, and resources can run on your site. Includes smart defaults that work with 99% of WordPress themes and plugins.
🔒 HTTP Strict Transport Security (HSTS) 
Forces browsers to communicate exclusively over HTTPS, preventing SSL stripping attacks. Includes preload support for maximum protection.
🕵️ Advanced Referrer Policy 
Protects user privacy by controlling what information is shared when visitors click links, preventing data leaks to third parties.
🎤 Permissions Policy (Feature Policy) 
Block unauthorized access to sensitive browser features like camera, microphone, geolocation, and payment APIs – preventing malicious sites from accessing these features.
🍪 Secure Cookie Protection 
Automatically applies HttpOnly and Secure flags to session cookies, preventing JavaScript access and ensuring cookies are only sent over HTTPS.
👻 Server Fingerprinting Protection 
Removes server signatures and version information that hackers use to identify vulnerabilities in your hosting setup.
⚡ Essential Security Headers Included: 
• X-Frame-Options: SAMEORIGIN (prevents clickjacking) 
• X-Content-Type-Options: nosniff (prevents MIME-type confusion attacks) 
• X-XSS-Protection: 1; mode=block (legacy XSS protection for older browsers)
💼 Perfect For: 
• Business owners who want enterprise security without technical complexity 
• Developers building secure WordPress applications 
• Agencies managing multiple client sites 
• Anyone serious about website security
🎯 Use Cases: 
• E-commerce sites handling sensitive customer data 
• Membership sites with user logins 
• Business websites with contact forms 
• Blogs that want to protect visitor privacy 
• Development sites that need security during testing
BaseCloud Security Manager is lightweight, efficient, and designed to integrate seamlessly into your WordPress admin experience without clutter or intrusive advertising.
<h3>Additional Information</h3>
🎯 Why Choose BaseCloud Security Manager?
✅ Instant Protection – Works immediately after activation 
✅ Zero Learning Curve – No technical knowledge required 
✅ Enterprise Grade – Same technology used by Fortune 500 companies 
✅ Fully Customizable – Advanced users have complete control 
✅ Regular Updates – Stay protected against emerging threats 
✅ Expert Support – Professional team ready to help
🔗 Useful Links: 
• Documentation: <a href="https://www.basecloudglobal.com/security-manager-docs" rel="nofollow ugc">BaseCloud Security Docs</a> 
• Support: support@basecloudglobal.com 
• Security Testing: <a href="https://observatory.mozilla.org" rel="nofollow ugc">Mozilla Observatory</a> 
• Header Verification: <a href="https://securityheaders.com" rel="nofollow ugc">SecurityHeaders.com</a>
🤝 Join Our Community: 
Connect with other security-conscious WordPress users, get tips, and stay updated on the latest security trends.
⭐ Love BaseCloud Security Manager? 
Help others discover enterprise-grade security by leaving a review. Your feedback helps us improve and helps other users make informed decisions about their website security.
Made with ❤️ by the BaseCloud Team – Securing WordPress sites worldwide since 2024

BaseCloud Security Manager

🛡️ Enterprise-grade WordPress security made simple. Implement military-standard HTTP security headers with zero technical knowledge required.

Abhishek Site Cleanup Controls vs BaseCloud Security Manager