Abhishek Sinha

<p>Abhishek Site Cleanup Controls gives developers and site owners fine-grained control over 35+ WordPress features that are often unnecessary. Each feature has a simple on/off toggle, organised into five logical groups inside <strong>Settings -> Site Cleanup Controls</strong>.</p>
<p>No features are enabled by default — activate only what you need.</p>
<h4>Security</h4>
<ul>
<li><strong>User Enumeration</strong> — Block ?author=N redirect attacks that expose usernames.</li>
<li><strong>Author Archives</strong> — Return 404 for author archive pages.</li>
<li><strong>XML-RPC + Pingback</strong> — Fully disable the XML-RPC endpoint and remove the X-Pingback header.</li>
<li><strong>Plugin and Theme Editor</strong> — Set DISALLOW_FILE_EDIT to prevent in-admin file editing.</li>
<li><strong>Application Passwords</strong> — Disable the Application Passwords feature.</li>
<li><strong>REST API</strong> — Restrict REST API access to authenticated users only.</li>
<li><strong>Right Click</strong> — Disable the browser context menu on the frontend.</li>
</ul>
<h4>Performance</h4>
<ul>
<li><strong>Emojis</strong> — Remove all emoji scripts, styles, and DNS prefetch hints.</li>
<li><strong>Embed Objects</strong> — Disable WordPress oEmbed and embed scripts.</li>
<li><strong>Dashicons</strong> — Prevent Dashicons from loading for non-logged-in visitors.</li>
<li><strong>Heartbeat</strong> — Deregister the Heartbeat API script.</li>
<li><strong>Block Library CSS</strong> — Remove wp-block-library and global-styles stylesheets on the frontend.</li>
<li><strong>Version Var (?ver=)</strong> — Strip ?ver= query strings from enqueued asset URLs.</li>
<li><strong>PDF Thumbnails</strong> — Skip thumbnail generation for uploaded PDF files.</li>
<li><strong>oEmbed</strong> — Remove oEmbed discovery links and disable autoembed.</li>
<li><strong>Remote Block Patterns</strong> — Stop WordPress fetching patterns from api.wordpress.org.</li>
</ul>
<h4>Head Cleanup</h4>
<ul>
<li><strong>Generator Meta Tag</strong> — Remove the WordPress version meta tag from head.</li>
<li><strong>WLW Manifest</strong> — Remove the Windows Live Writer manifest link.</li>
<li><strong>Really Simple Discovery (RSD)</strong> — Remove the RSD link tag.</li>
<li><strong>Short Link</strong> — Remove the shortlink tag and HTTP header.</li>
<li><strong>Adjacent Posts Links</strong> — Remove prev/next link tags from single post heads.</li>
<li><strong>RSS Feeds</strong> — Redirect all feed URLs to the homepage.</li>
</ul>
<h4>Admin Cleanup</h4>
<ul>
<li><strong>capital_P_dangit</strong> — Remove WordPress forced capitalisation filter.</li>
<li><strong>Screen Options and Help Tabs</strong> — Hide Screen Options and Help dropdowns.</li>
<li><strong>Howdy to Welcome</strong> — Replace “Howdy,” with “Welcome,” in the admin bar.</li>
<li><strong>Navigation Items in Admin Bar</strong> — Remove WP logo, site name, updates, and comments.</li>
<li><strong>Clean Dashboard</strong> — Remove all default dashboard widgets.</li>
<li><strong>Privacy Tools</strong> — Hide Export/Erase Personal Data from the Tools menu.</li>
<li><strong>Site Health Page</strong> — Hide Site Health from the Tools menu.</li>
<li><strong>WP Login Logo and Favicon</strong> — Hide the WordPress logo on the login page.</li>
<li><strong>Admin Email Verification Prompt</strong> — Disable the admin email confirm interstitial.</li>
<li><strong>Empty Trash (1 week)</strong> — Shorten automatic trash-emptying from 30 days to 7 days.</li>
</ul>
<h4>Content</h4>
<ul>
<li><strong>Comments</strong> — Disable comments sitewide.</li>
<li><strong>Post Revisions</strong> — Disable revision storage.</li>
<li><strong>Search</strong> — Redirect all search queries to the homepage.</li>
</ul>
<h4>WordPress Features</h4>
<ul>
<li><strong>Thumbnails / Featured Images</strong> — Remove post thumbnail support.</li>
<li><strong>Widgets</strong> — Disable all widgets and sidebars.</li>
<li><strong>Navigation Menus</strong> — Remove nav menu theme support.</li>
<li><strong>Tags</strong> — Unregister tags from posts.</li>
<li><strong>Categories</strong> — Unregister categories from posts.</li>
<li><strong>Post Formats</strong> — Remove post format theme support.</li>
<li><strong>Custom Fields</strong> — Remove custom fields meta box from editor.</li>
<li><strong>Excerpts</strong> — Remove excerpt support from posts and pages.</li>
<li><strong>Trackbacks</strong> — Remove trackback support from posts.</li>
<li><strong>Attachment Pages</strong> — Redirect attachment URLs to the file directly.</li>
<li><strong>Automatic Updates</strong> — Disable automatic core, plugin, and theme updates.</li>
<li><strong>Self Pings</strong> — Stop WordPress pinging your own site.</li>
<li><strong>jQuery Migrate</strong> — Remove jQuery Migrate script on the frontend.</li>
</ul>


Abhishek Site Cleanup Controls

Selectively disable WordPress features to improve performance, security, and cleanliness. Toggle each feature individually from a single settings page …

Malcure Web Security

cybermalcure

Malware Intercept

<h3>Malcure Security</h3>
<p>★★★★★</p>
<p>Protect your WordPress site from hacks and downtime.</p>
<p>Malcure Security Suite is a fast, lightweight, cloud-connected security platform for WordPress. It performs deep server-side scans (files + database) to catch malware and unauthorized changes, allows you to monitor login activity, enables a site-wide forced re-login after incidents, and sends email alerts of incidents upon scan. Built for commercial workloads—WooCommerce stores, memberships, LMS, bookings, directories, and multi-vendor marketplaces—it plays nicely with caching/CDNs and won’t get in the way of checkout, lessons, or bookings.</p>
<h3>What Malcure Security Suite Focuses On</h3>
<ul>
<li><strong>Detect:</strong> Deep server-side malware scans (files + database), integrity/diff checks, and vulnerabilities.</li>
<li><strong>Control:</strong> Session analytics (user/IP/device), Emergency Logout (everyone except you), rotate auth keys & salts to invalidate tokens, and force site-wide re-login post-incident. Compatible with 2FA/SSO.</li>
<li><strong>Report:</strong> Clear, actionable summaries with exact file paths and reasons, email alerts with next steps, and audit-friendly logs for teams and compliance (coming-soon).</li>
<li><strong>Logging:</strong> Event logs with identifiable and traceable details.</li>
</ul>
<h3>How It Works (SaaS)</h3>
<ol>
<li>Secure Handshake: Your site authenticates with Malcure and pulls fresh threat intelligence (signatures, heuristics, rules and analysis).</li>
<li>Local-first scanning: Scans your files and database in the background.</li>
<li>Severity-ranked results: Findings are grouped by Critical/High/Medium/Low with exact specs, the reason they were flagged, and one-click actions plus email alerts and audit-ready logs.</li>
<li>Graceful: If the cloud is temporarily unreachable, Malcure Security Suite continues with last-known rules and logs locally until it reconnects.</li>
</ol>
<h3>Features</h3>
<ul>
<li>Deep server-side malware scans (files + database) using tuned signatures + heuristics.</li>
<li>Background scanning so long runs finish reliably on large sites.</li>
<li>Low overhead by design; preserves Core Web Vitals and optimized to minimize impact on site speed</li>
<li>Session management: see who’s logged in, from where.</li>
<li>Emergency Logout: one-click sign-out (everyone except you); rotate auth keys & salts to invalidate sessions.</li>
<li>Robust Event Monitor.</li>
<li>Optimal Dark Mode.</li>
</ul>
<h3>Highlights</h3>
<ul>
<li>Signature + heuristic detection for obfuscated/injected PHP/JS (backdoor/web-shell traits).</li>
<li>Database scan of options, postmeta, posts, and comments for malicious payloads.</li>
<li>Email notifications for critical events and scan results</li>
<li>Security status panel (permissions, environment)</li>
<li>Compatible with WooCommerce, LearnDash/TutorLMS, MemberPress/PMP, major booking/event plugins, WPML/Polylang, Elementor/Divi/Block Editor, and caching/CDNs (LiteSpeed Cache, WP Rocket, NGINX FastCGI, Cloudflare).</li>
</ul>
<h3>Premium (Pro)</h3>
<ul>
<li>Scheduled scans (daily/weekly/monthly) with summary emails.</li>
<li>WP-CLI automation for headless/CI workflows and cron.</li>
<li>Priority support with accelerated SLAs.</li>
</ul>


Malcure Security Suite

🔐 All-in-one WordPress security: malware scanner (files+DB), force re-login, force logout, control logins, email-alerts. Cloud-based, light & fast.

Abhishek Site Cleanup Controls vs Malcure Security Suite