PrecisionWP

AdminEase is an all-in-one WordPress admin toolkit that helps you manage updates, strengthen security, improve performance and streamline site maintenance without touching code. AdminEase makes everyday site management faster, safer, and easier from a clean, user friendly dashboard.
<h4>Key Benefits</h4>
✓ No Coding Required – User-friendly interface for all skill levels 
✓ Enhanced Security – Protect your site from common vulnerabilities 
✓ Better Performance – Optimize WordPress for speed and efficiency 
✓ Complete Control – Toggle features on/off anytime without risk 
✓ Time Saver – Manage dozens of settings from one dashboard
<h3>Features</h3>
<h4>Updates and Notifications</h4>
<ul>
<li>Auto Update Core: Enable/disable automatic WordPress core updates.</li>
<li>Auto Update Plugins: Enable/disable automatic plugin updates.</li>
<li>Auto Update Themes: Enable/disable automatic theme updates.</li>
<li>Auto Update Translations: Enable/disable automatic translation updates.</li>
<li>Update Notification Emails: Receive emails when core, themes, or plugins are auto-updated.</li>
<li>New User Admin Notification Email: Notify admin on new user registration.</li>
<li>User Password Change Admin Notification Email: Notify admin when a user changes their password.</li>
<li>Comment Admin Notification Email: Notify admin on new comments.</li>
<li>Disable Admin Notices: Hide admin notices from plugins and themes.</li>
<li>Disable recovery mode email notification: Prevent WordPress from sending recovery mode emails.</li>
<li>Customize recovery mode recipient email: Set a custom email address to receive recovery mode notifications.</li>
</ul>
<h4>Security</h4>
<ul>
<li>Disable File Edit: Prevent editing theme/plugin files from the admin panel.</li>
<li>Disable File Mods: Prevent all file modifications in WordPress, including installing, updating, and deleting plugins and themes.</li>
<li>Disable XML-RPC: Block XML-RPC access to reduce attack surface, with IP allowlist (in Pro).</li>
<li>Disable REST API: Block REST API access, with IP allowlist (in Pro) with the option to allow all HTTP requests to wordpress.org, including plugin/theme updates, version checks, and other API communications.</li>
<li>Disable Embeds: Stop automatic embedding of external content.</li>
<li>Hide WordPress Version: Remove version info from source code and feeds.</li>
<li>Password Protect Site: Protect your entire website with a password, featuring customizable themes, role-based bypasses, IP whitelisting, device remembering, and auto-disable scheduling.</li>
<li>Block Access to .htaccess/.htpasswd: Protect sensitive server files.</li>
<li>Disable Pingbacks: Prevent XML-RPC pingback abuse.</li>
<li>Block Author Scans: Prevent username enumeration.</li>
<li>Block Directory Browsing: Stop public directory listing.</li>
<li>Disable Script Concatenation(Admin): Prevent certain DoS attacks in admin.</li>
<li>Block Specific Countries (GeoIP): Restrict site access by country.</li>
<li>Block Specific Bots: Control which bots can access your site</li>
<li>CORS Headers: Enable Cross-Origin Resource Sharing to allow trusted websites to access your site’s resources safely.</li>
<li>Hide PHP Version: Remove X-Powered-By header to hide PHP version information from headers.</li>
</ul>
<h4>Performance</h4>
<ul>
<li>WP Memory Limit: Set the memory limit for WordPress.</li>
<li>WP Max Memory Limit: Set the maximum memory for admin tasks.</li>
<li>Max Execution Time: Set PHP script timeout.</li>
<li>Autosave Interval: Customize how often WordPress auto saves your work.</li>
<li>Disable WP Cron: Replace WP-Cron with a real server cron job for reliability.</li>
<li>Disable Emojis: Disable loading of emoji scripts and styles.</li>
</ul>
<h4>Posts</h4>
<ul>
<li>Empty Trash Days: Set the number of days to keep deleted posts in trash.</li>
<li>Post Revisions: Limit or disable post revisions to save database space.</li>
<li>Disable Gutenberg Editor: Disable the block editor and revert to the classic editor.</li>
<li>Drag and Drop Ordering Posts: Rearrange posts via drag-and-drop.</li>
<li>Disable Comments: Disable comments site-wide with a single toggle.</li>
<li>Bulk Delete Posts: Delete posts in bulk from the admin panel.</li>
<li>Posts Metadata Box: Adds a meta box to posts for easy management of custom fields.</li>
</ul>
<h4>Taxonomies</h4>
<ul>
<li>Drag and Drop Ordering Taxonomies: Rearrange taxonomies via drag-and-drop.</li>
<li>Improved Taxonomy Meta Box: Enable lazy loading for taxonomy terms to improve performance.</li>
<li>Taxonomy Switcher: Switch taxonomy terms between taxonomies in a single click.</li>
<li>Taxonomy Term Metadata Box: Adds a meta box to taxonomy terms for easy management of custom fields.</li>
</ul>
<h4>Users</h4>
<ul>
<li>Disable User Registration: Block all new user registrations.</li>
<li>Force Strong Passwords: Enforce password complexity rules (length, case, numbers, symbols).</li>
<li>Auto-Logout User: Auto-logout users after inactivity (customizable per role and time).</li>
<li>Hide Admin Bar: Hide the admin bar for specific users.</li>
<li>Redirect After Login/Logout: Customize where users go after logging in or out</li>
<li>Users Metadata Box: Adds a meta box to users for easy management of custom fields.</li>
<li>Last Login Tracking: Tracks when users log in, displays the information in the users table, and shows it on their profile pages.</li>
</ul>
<h4>Debug</h4>
<ul>
<li>WP Debug: Enable WordPress debug mode.</li>
<li>WP Debug Log: Log errors to a file.</li>
<li>WP Debug Display: Show/hide errors on the site.</li>
<li>Debug Log Viewer: View the debug log directly from the admin panel.</li>
<li>Maintenance Mode: Prevent all users from accessing the site but not the admin area.</li>
<li>Network Viewer: Enable the Network Viewer to log all incoming HTTP connections to your site in real-time. This feature helps you monitor traffic, detect suspicious activity, and understand how visitors interact with your site.</li>
<li>Email log: Complete email logging system. Track every email sent from your WordPress site including recipient, subject, content, and delivery status. Debug email delivery issues, monitor notifications, and ensure critical emails reach their destination. Perfect for troubleshooting SMTP configurations and auditing site communications.</li>
</ul>
<h4>Media</h4>
<ul>
<li>Upload Max File Size: Set maximum upload file size.</li>
<li>Allow SVG Uploads: Enable SVG file uploads with security checks.</li>
<li>Allow Custom File Extension Uploads: Enable additional file types beyond WordPress defaults</li>
<li>Media Infinite Scrolling: Enable infinite scrolling for media library.</li>
<li>Disable Big Image Threshold: Disable the threshold for displaying large images in the media library.</li>
</ul>
<h4>Automatic Installation</h4>
<ol>
<li>Log in to your WordPress admin panel</li>
<li>Go to Plugins > Add New</li>
<li>Search for “AdminEase”</li>
<li>Click “Install Now” and then “Activate”</li>
<li>Navigate to the AdminEase menu to configure your settings</li>
</ol>
<h4>Manual Installation</h4>
<ol>
<li>Download the plugin zip file</li>
<li>Log in to your WordPress admin panel</li>
<li>Go to Plugins > Add New > Upload Plugin</li>
<li>Choose the downloaded zip file and click “Install Now”</li>
<li>Activate the plugin</li>
<li>Navigate to the AdminEase menu to configure your settings</li>
</ol>
<h4>After Activation</h4>
<ol>
<li>Go to the AdminEase menu in your WordPress admin</li>
<li>Explore the organized tabs (Updates, Security, Performance, etc.)</li>
<li>Enable the features you need</li>
<li>Save your settings</li>
</ol>
Important: We recommend testing on a staging site first and always maintain backups before making configuration changes.
<h3>Important Disclaimer</h3>
This plugin modifies core WordPress functionality and behaviors. While we strive to maintain compatibility and stability:
<ul>
<li>The plugin’s features may work differently or not at all depending on your server configuration, hosting environment, and installed plugins</li>
<li>Some features may be restricted on certain hosting providers or server setups</li>
<li>We strongly recommend testing the plugin in a staging environment before using it on a production site</li>
<li>Always maintain regular backups of your website before making any changes</li>
</ul>
<h3>Server Compatibility Notice</h3>
Different server configurations may affect the plugin’s functionality:
<ul>
<li>Shared hosting environments might have restrictions that prevent certain features from working</li>
<li>Some features may require specific PHP extensions or server modules</li>
<li>Server-level email configurations might affect notification control features</li>
<li>.htaccess modifications require Apache or compatible web servers</li>
</ul>
If you experience any issues, please check with your hosting provider about server limitations.

AdminEase


An extensive and powerful set of tool for any site admin


Must have in any site!

Boosts your WordPress admin with tools for updates, security, performance, and user management - no coding required.

Juanma Evaristo

Lock My Site is a lightweight plugin that enables remote management of your WordPress site through a secure REST API. Perfect for agencies, freelancers, and anyone managing multiple WordPress sites.
<h4>Features</h4>
<ul>
<li>Complete Health Check – Monitor site status, PHP version, memory usage, and more</li>
<li>Update Management – Manage plugins, themes, core, and translations updates remotely</li>
<li>Plugin Management – Activate, deactivate, and get detailed plugin information</li>
<li>Theme Management – Switch themes and manage theme updates</li>
<li>Database Optimization – Clean up and optimize database tables</li>
<li>Security Audit – Basic security checks and recommendations</li>
<li>Error Logs – Access PHP error logs remotely</li>
<li>User Management – List users and roles</li>
</ul>
<h4>Security</h4>
<ul>
<li>API Key authentication</li>
<li>Optional HMAC signature verification</li>
<li>Optional IP whitelist</li>
<li>Rate limiting protection</li>
<li>Automatic lockout after failed attempts</li>
<li>API key expiration (90 days)</li>
<li>Email alerts for suspicious activity</li>
<li>Activity logging</li>
</ul>
<h4>Available Endpoints</h4>
Status & Health 
* <code>GET /ping</code> – Connection check 
* <code>GET /health</code> – Complete site health status
Updates 
* <code>GET /updates</code> – Available updates (plugins, themes, core, translations) 
* <code>POST /update/plugin</code> – Update a specific plugin 
* <code>POST /update/theme</code> – Update a specific theme 
* <code>POST /update/core</code> – Update WordPress core 
* <code>POST /update/all-plugins</code> – Update all plugins 
* <code>POST /update/all-themes</code> – Update all themes 
* <code>POST /update/translations</code> – Update all translations
Plugins 
* <code>GET /plugins</code> – List all plugins 
* <code>GET /plugins/{plugin}</code> – Get plugin details 
* <code>POST /plugins/activate</code> – Activate a plugin 
* <code>POST /plugins/deactivate</code> – Deactivate a plugin 
* <code>GET /plugins/ignored</code> – List ignored plugins 
* <code>POST /plugins/ignore</code> – Ignore a plugin from bulk updates 
* <code>POST /plugins/unignore</code> – Remove plugin from ignored list
Themes 
* <code>GET /themes</code> – List all themes 
* <code>POST /themes/activate</code> – Activate a theme
Database 
* <code>GET /database/stats</code> – Database statistics 
* <code>POST /database/cleanup</code> – Clean database (revisions, drafts, spam, etc.) 
* <code>POST /database/optimize</code> – Optimize database tables
Logs 
* <code>GET /logs/php</code> – PHP error log 
* <code>GET /logs/activity</code> – Plugin activity log
Users 
* <code>GET /users</code> – List WordPress users
<h3>External services</h3>
This plugin connects to the following external services:
<h4>1. WordPress.org Checksums API</h4>
<ul>
<li>Service URL: <code>https://api.wordpress.org/core/checksums/1.0/</code></li>
<li>What it does: Retrieves the official MD5 checksums for all WordPress core files so the plugin can verify that no core file has been modified or tampered with.</li>
<li>When data is sent: Only when a core integrity check is explicitly triggered by the site administrator via the authenticated REST API endpoint <code>/security/core-integrity</code>.</li>
<li>What data is sent: The installed WordPress version number and the site locale (e.g. <code>en_US</code>). No personal data is sent.</li>
<li>Service provider: WordPress.org (Automattic Inc.)</li>
<li>Terms of use: <a href="https://wordpress.org/about/domains/" rel="ugc">WordPress.org Terms of Service</a></li>
<li>Privacy policy: <a href="https://wordpress.org/about/privacy/" rel="ugc">WordPress.org Privacy Policy</a></li>
</ul>
<h4>2. WordPress.org Translations API</h4>
<ul>
<li>Service URL: <code>https://api.wordpress.org/translations/plugins/1.0/</code>, <code>https://api.wordpress.org/translations/themes/1.0/</code>, and <code>https://api.wordpress.org/translations/core/1.0/</code></li>
<li>What it does: Returns the latest available translation package versions for plugins, themes, and WordPress core in the site’s locale, so the plugin can determine which translations need updating.</li>
<li>When data is sent: When translation updates are checked, either on demand or as part of a full updates check, explicitly triggered by the site administrator via the authenticated REST API.</li>
<li>What data is sent: Plugin/theme slugs, their version numbers, and the site locale. No personal data is sent.</li>
<li>Service provider: WordPress.org (Automattic Inc.)</li>
<li>Terms of use: <a href="https://wordpress.org/about/domains/" rel="ugc">WordPress.org Terms of Service</a></li>
<li>Privacy policy: <a href="https://wordpress.org/about/privacy/" rel="ugc">WordPress.org Privacy Policy</a></li>
</ul>
These are the only two external services this plugin connects to. No other HTTP requests are made to any third-party service.
<h4>Important note about domain name references in the source code</h4>
The plugin’s security scanner contains a hardcoded list of well-known, legitimate third-party domain names used as a local string-matching whitelist only. This list includes domains such as:
<ul>
<li>google-analytics.com, googletagmanager.com, googleapis.com</li>
<li>maps.google.com, maps.googleapis.com</li>
<li>tawk.to, crisp.chat, intercom.io, zendesk.com</li>
<li>cdn.jsdelivr.net, cdnjs.cloudflare.com, code.jquery.com, unpkg.com</li>
<li>recaptcha.net, gstatic.com</li>
</ul>
These domains are NOT contacted, called, or connected to in any way by this plugin. No HTTP requests, API calls, or any form of network communication is made to any of these domains.
The domain names appear as plain string constants in a PHP array. When the security scanner analyzes post and page content for potentially malicious script injections (e.g. <code><script src="..."></code> tags), it compares the <code>src</code> attribute against this whitelist using local string matching. Scripts referencing whitelisted domains are recognized as legitimate and excluded from the scan results, reducing false positives. The entire comparison happens locally in PHP memory — no data leaves the server.

Lock My Site

Lightweight worker plugin for remote WordPress maintenance and management via secure REST API.

AdminEase vs Lock My Site