ageonce

AgeOnce Verification integrates with the AgeOnce API to provide enterprise-grade age verification for your WordPress site. Protect WooCommerce checkout for age-restricted products and gate content based on taxonomy rules (categories, tags) or manual overrides.
<h4>Features</h4>
<ul>
<li>WooCommerce Integration – Require age verification before checkout when cart contains restricted products</li>
<li>Content Protection – Restrict posts, pages, and custom post types by taxonomy (categories, tags)</li>
<li>Multi-Age Support – Configure different rules for 16+, 18+, and 21+ content</li>
<li>Manual Override – Lock individual items via metabox regardless of taxonomy rules</li>
<li>Product-Level Control – Enable age verification per product in WooCommerce</li>
<li>Secure OAuth Flow – One-time verification with CSRF protection</li>
<li>Production-ready – Connects to AgeOnce cloud (app.ageonce.com, api.ageonce.com)</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>WordPress 5.0 or higher</li>
<li>WooCommerce 5.0 or higher (for checkout protection)</li>
<li>AgeOnce API account (client ID and secret)</li>
</ul>
<h4>Getting Started</h4>
<ol>
<li>Install and activate the plugin</li>
<li>Create an account at <a href="https://www.ageonce.com" rel="nofollow ugc">AgeOnce</a> to obtain API credentials</li>
<li>Go to AgeOnce Settings in the admin menu</li>
<li>Enter your Client ID and Client Secret</li>
<li>Configure Content Rules for post types and taxonomies</li>
<li>Enable the plugin and save</li>
</ol>
For detailed setup and API reference, see <a href="https://docs.ageonce.com/" rel="nofollow ugc">Documentation</a>.
<h4>Privacy</h4>
This plugin sends data to the AgeOnce service (app.ageonce.com, api.ageonce.com) only when a user explicitly starts age verification (e.g. clicks “Verify Age” at checkout or on restricted content). No tracking or data collection occurs without that user action. See the <a href="https://www.ageonce.com" rel="nofollow ugc">AgeOnce service</a> for its privacy and terms.
<h3>External services</h3>
This plugin relies on third-party services operated by AgeOnce (the verification provider). They are required for OAuth login and token exchange so the site can confirm age verification.
<ul>
<li>
AgeOnce web app (app.ageonce.com) — Used for the user-facing OAuth authorization screen when someone clicks “Verify Age”. The browser is redirected here with your site’s OAuth client ID, redirect URI, a state value, and required minimum age. The user completes verification on AgeOnce; no WordPress account password is sent to AgeOnce.
</li>
<li>
AgeOnce API (api.ageonce.com) — Used when the user returns to your site with an authorization code. The plugin sends a server-to-server request to exchange that code for an access token: it transmits the authorization code, redirect URI, OAuth state, and HTTP Basic authentication using your Client ID and Client Secret (stored in WordPress options). On success, the plugin may store a verification flag in the WooCommerce session or a cookie and optional transaction metadata for orders. This happens only during that callback after the user completes the flow.
</li>
<li>
Terms and privacy (AgeOnce) — <a href="https://app.ageonce.com/terms" rel="nofollow ugc">Terms of service</a>, <a href="https://app.ageonce.com/privacy" rel="nofollow ugc">Privacy policy</a>.
</li>
</ul>

AgeOnce Verification

Enterprise-grade Age Verification via AgeOnce API. Protects WooCommerce Checkout and Content.

AAM Plugin

Advanced Access Manager (AAM) introduces Access Governance for WordPress – a systematic approach to securing your site by controlling who can access what, when, and why.
Most WordPress security plugins focus on external threats like malware, firewalls, and brute-force attacks. AAM addresses the root cause of the #1 WordPress security risk: broken access controls, excessive privileges, and misconfigured roles.
Instead of reacting to attacks, AAM helps you design security into your WordPress site.
<h4>What Access Governance means in practice</h4>
<ul>
<li>Mitigate Broken Access Controls. Ensure roles, users, and permissions are correctly configured to prevent unauthorized actions and privilege escalation.</li>
<li>Eliminate Excessive Privileges. Identify overpowered users and reduce access to critical functionality, admin areas, and APIs.</li>
<li>Secure Content by Design. Control who can view, edit, publish, or delete posts, pages, media, taxonomies, and custom content types.</li>
<li>Govern Access with Policy. Define access rules using JSON Access Policies — portable, auditable, and automation-friendly.</li>
<li>Build Custom Security Logic. Use the AAM PHP Framework to create advanced, programmatic access controls tailored to your application.</li>
</ul>
<h4>Key Features</h4>
<ul>
<li>Security Audit. Detect risky role assignments, misconfigurations, and compromised accounts.</li>
<li>Granular Access Control. Manage permissions for any user, role, or visitor with precision.</li>
<li>Role & Capability Management. Customize WordPress roles and capabilities beyond defaults.</li>
<li>Admin & Menu Control. Restrict dashboard areas and tailor the admin experience per user or role.</li>
<li>API & Endpoint Protection. Secure REST and XML-RPC access with fine-grained controls.</li>
<li>Modern Authentication Options. Support passwordless and secure login flows.</li>
<li>Developer-Ready Framework. Extend WordPress security using AAM’s powerful SDK.</li>
<li>Ad-Free & Transparent. – No ads, no tracking, no bloat.</li>
</ul>
<h4>Built for Security-Conscious WordPress Users</h4>
AAM is trusted by 150,000+ websites to deliver enterprise-grade access control without unnecessary complexity. Whether you’re a site owner, agency, developer, or security professional, AAM gives you full control over WordPress access — by design.
Most core features are free. Advanced capabilities are available via premium add-ons.
No hidden tracking. No data collection. No unwanted changes. 
Just security you can reason about, audit, and trust.

Advanced Access Manager – Access Governance for WordPress

This plugin made it so easy to create accounts for coworkers who only need to do one or two tasks on a website and it's so easy to do. :) 

I love this plugin!

Use at your own risk as the plugin author @vasyltech never replies to support messages on here.

No support

Access Governance for WordPress. Control roles, users, content, admin areas, and APIs to prevent broken access controls and excessive privileges.

AgeOnce Verification vs Advanced Access Manager – Access Governance for WordPress