amirshk

This plugin will automatically generate an ordered menu from the headers in your post.
<ol>
<li>The plugin adds an ID to all your headers in the post.</li>
<li>Add the shortcode [autogen_menu] anywhere in the post, to automatically generate a menu with links to your post’s headers.</li>
<li>You have the option to add links the top of the page next to all the headers. Do this by adding the custom field “autogen_menu_show_top” with a value “true” to the relevant posts.</li>
</ol>
<h4>“autogen_menu” Shortcode Options</h4>
Options for the [autogen_menu] shortcode:
<ul>
<li>head_class = style classes for the <code>Menu</code> header.</li>
<li>div_class = style classes for the wrapping div.</li>
<li>ol_class = style classes for all <code>OL</code>.</li>
<li>li_class = style classes for all <code>LI</code>.</li>
<li>a_class = style classes for all the links.</li>
<li>depth = the maximum levels of menu to display. The default is 3.</li>
</ul>
<h4>Custom Fields</h4>
<ol>
<li>Add the custom field “autogen_menu_show_top” with a value “true” to add “top” links next to your headers.</li>
<li>Add “autogen_menu_show_numbering” to add numbers to all your headers.</li>
</ol>
<h4>Widgets</h4>
<ol>
<li>There is a new widget called ‘Autogen Menu Widget’ that displays the post’s generated menu.</li>
</ol>

Autogen Headers Menu

Automatically create a main-menu from the headers in your post using a simple and configurable shortcode.

Marc Armengou

Security Hardener is inspired by the official WordPress hardening guide (Advanced Administration / Security / Hardening). It uses the platform’s standard functions and does not override core. Applies a prudent set of defenses:
<ul>
<li>Security headers: <code>X-Frame-Options</code>, <code>X-Content-Type-Options</code>, <code>Referrer-Policy</code>, <code>Permissions-Policy</code>, <code>COOP/CORP</code>. </li>
<li>HSTS (optional; HTTPS only). </li>
<li>Basic nonce-based CSP (optional; requires testing). </li>
<li>Disable XML-RPC and pingbacks (optional; enabled by default). </li>
<li>Hide the WordPress version in the <code><head></code>. </li>
<li>Block user enumeration via <code>/?author=</code> by returning 404. </li>
<li>Generic login errors (prevents information leakage). </li>
<li>IP-based login rate limiting with transients (configurable threshold and window). </li>
<li>Restrict the REST API to authenticated users, with a minimal allowlist for oEmbed/index.</li>
</ul>
<blockquote>
⚠️ Important: The restrict REST API option and CSP can affect integrations and plugins. Test it in staging first.
</blockquote>
Privacy: the plugin does not send data to external services or create new tables. It only uses transients to count failed login attempts.

Security Hardener

Basic hardening: secure headers, enumeration blocking, generic login errors, IP-based rate limiting, and optional restriction of the REST API.

Autogen Headers Menu vs Security Hardener