Abhishek Sinha

<p>Abhishek Site Cleanup Controls gives developers and site owners fine-grained control over 35+ WordPress features that are often unnecessary. Each feature has a simple on/off toggle, organised into five logical groups inside <strong>Settings -> Site Cleanup Controls</strong>.</p>
<p>No features are enabled by default — activate only what you need.</p>
<h4>Security</h4>
<ul>
<li><strong>User Enumeration</strong> — Block ?author=N redirect attacks that expose usernames.</li>
<li><strong>Author Archives</strong> — Return 404 for author archive pages.</li>
<li><strong>XML-RPC + Pingback</strong> — Fully disable the XML-RPC endpoint and remove the X-Pingback header.</li>
<li><strong>Plugin and Theme Editor</strong> — Set DISALLOW_FILE_EDIT to prevent in-admin file editing.</li>
<li><strong>Application Passwords</strong> — Disable the Application Passwords feature.</li>
<li><strong>REST API</strong> — Restrict REST API access to authenticated users only.</li>
<li><strong>Right Click</strong> — Disable the browser context menu on the frontend.</li>
</ul>
<h4>Performance</h4>
<ul>
<li><strong>Emojis</strong> — Remove all emoji scripts, styles, and DNS prefetch hints.</li>
<li><strong>Embed Objects</strong> — Disable WordPress oEmbed and embed scripts.</li>
<li><strong>Dashicons</strong> — Prevent Dashicons from loading for non-logged-in visitors.</li>
<li><strong>Heartbeat</strong> — Deregister the Heartbeat API script.</li>
<li><strong>Block Library CSS</strong> — Remove wp-block-library and global-styles stylesheets on the frontend.</li>
<li><strong>Version Var (?ver=)</strong> — Strip ?ver= query strings from enqueued asset URLs.</li>
<li><strong>PDF Thumbnails</strong> — Skip thumbnail generation for uploaded PDF files.</li>
<li><strong>oEmbed</strong> — Remove oEmbed discovery links and disable autoembed.</li>
<li><strong>Remote Block Patterns</strong> — Stop WordPress fetching patterns from api.wordpress.org.</li>
</ul>
<h4>Head Cleanup</h4>
<ul>
<li><strong>Generator Meta Tag</strong> — Remove the WordPress version meta tag from head.</li>
<li><strong>WLW Manifest</strong> — Remove the Windows Live Writer manifest link.</li>
<li><strong>Really Simple Discovery (RSD)</strong> — Remove the RSD link tag.</li>
<li><strong>Short Link</strong> — Remove the shortlink tag and HTTP header.</li>
<li><strong>Adjacent Posts Links</strong> — Remove prev/next link tags from single post heads.</li>
<li><strong>RSS Feeds</strong> — Redirect all feed URLs to the homepage.</li>
</ul>
<h4>Admin Cleanup</h4>
<ul>
<li><strong>capital_P_dangit</strong> — Remove WordPress forced capitalisation filter.</li>
<li><strong>Screen Options and Help Tabs</strong> — Hide Screen Options and Help dropdowns.</li>
<li><strong>Howdy to Welcome</strong> — Replace “Howdy,” with “Welcome,” in the admin bar.</li>
<li><strong>Navigation Items in Admin Bar</strong> — Remove WP logo, site name, updates, and comments.</li>
<li><strong>Clean Dashboard</strong> — Remove all default dashboard widgets.</li>
<li><strong>Privacy Tools</strong> — Hide Export/Erase Personal Data from the Tools menu.</li>
<li><strong>Site Health Page</strong> — Hide Site Health from the Tools menu.</li>
<li><strong>WP Login Logo and Favicon</strong> — Hide the WordPress logo on the login page.</li>
<li><strong>Admin Email Verification Prompt</strong> — Disable the admin email confirm interstitial.</li>
<li><strong>Empty Trash (1 week)</strong> — Shorten automatic trash-emptying from 30 days to 7 days.</li>
</ul>
<h4>Content</h4>
<ul>
<li><strong>Comments</strong> — Disable comments sitewide.</li>
<li><strong>Post Revisions</strong> — Disable revision storage.</li>
<li><strong>Search</strong> — Redirect all search queries to the homepage.</li>
</ul>
<h4>WordPress Features</h4>
<ul>
<li><strong>Thumbnails / Featured Images</strong> — Remove post thumbnail support.</li>
<li><strong>Widgets</strong> — Disable all widgets and sidebars.</li>
<li><strong>Navigation Menus</strong> — Remove nav menu theme support.</li>
<li><strong>Tags</strong> — Unregister tags from posts.</li>
<li><strong>Categories</strong> — Unregister categories from posts.</li>
<li><strong>Post Formats</strong> — Remove post format theme support.</li>
<li><strong>Custom Fields</strong> — Remove custom fields meta box from editor.</li>
<li><strong>Excerpts</strong> — Remove excerpt support from posts and pages.</li>
<li><strong>Trackbacks</strong> — Remove trackback support from posts.</li>
<li><strong>Attachment Pages</strong> — Redirect attachment URLs to the file directly.</li>
<li><strong>Automatic Updates</strong> — Disable automatic core, plugin, and theme updates.</li>
<li><strong>Self Pings</strong> — Stop WordPress pinging your own site.</li>
<li><strong>jQuery Migrate</strong> — Remove jQuery Migrate script on the frontend.</li>
</ul>


Abhishek Site Cleanup Controls

Selectively disable WordPress features to improve performance, security, and cleanliness. Toggle each feature individually from a single settings page …

Lenon Leite

<p>Reduce risk for you site, running the easy hardening protection of mainly attacks.<br />
With hardening you can control bad request, blocking ips with malicious action like comments spam, brute force login and others.</p>
<h4>Hardening:</h4>
<ul>
<li>Disable Plugin Theme Editor</li>
<li>Hidden WordPress version</li>
<li>Deny WP Debug mode</li>
<li>Disable directory browsing</li>
<li>Disable author page</li>
<li>Fix corrects permissions</li>
<li>Change the prefix tables</li>
<li>Change the login url</li>
<li>2 Factor authentication</li>
<li>Google reCaptcha Option</li>
</ul>
<h4>Ip block Activity Options</h4>
<ul>
<li>Blocks comments with spam</li>
<li>Access malicious url</li>
<li>Blocks brute force</li>
</ul>
<h4>Mail notifications</h4>
<h4>Verifications:</h4>
<ul>
<li>Prefix tables</li>
<li>Easy usernames</li>
<li>Easy passwords</li>
<li>Check PHP Version</li>
<li>Check wrong permissions</li>
</ul>
<h4>Logs:</h4>
<ul>
<li>Save errors</li>
<li>User managers</li>
<li>Plugin managers</li>
</ul>


Integer Wp Security

WP security is a plugin responsible by security with short steps and fix the mainly security problems.

Abhishek Site Cleanup Controls vs Integer Wp Security