Rolly Bueno

<p>Contributor Highlights is a lightweight plugin designed for individuals and organizations who want to display their WordPress.org contribution journey or highlight the efforts of others in the WordPress community.</p>
<p>With this plugin, you can easily fetch and present detailed contributor information from public WordPress.org profiles. The plugin pulls in and displays:</p>
<ul>
<li>Contributor name, avatar, and profile meta (handle, location, member since, links, teams, and languages)</li>
<li>Current job</li>
<li>Short biography with optional read more/less</li>
<li>Recent impact stats (30, 90, and 12 month periods)</li>
<li>Team focus and WordPress releases (full card)</li>
<li>Contribution badges grouped by category (e.g., Core Contributor, Plugin Developer, Translation Editor, etc.)</li>
</ul>
<p>Perfect for personal portfolios, agency team pages, or contributor showcases on community sites.</p>
<p>This plugin does not require any API keys or manual data entry — just input a WordPress.org username, and the profile will be automatically rendered in a card format.</p>
<p>Whether you’re celebrating your own WordPress journey or recognizing others, Contributor Highlights makes it easy to bring open-source contributions front and center.</p>
<h3>External Services</h3>
<p>The plugin interacts with the following external services:</p>
<ul>
<li><strong>WordPress.org Profiles</strong>
<ul>
<li><strong>Purpose</strong>: To fetch and display contributor profile data within the plugin interface.</li>
<li><strong>What is fetched?</strong>: Publicly available data such as display name, avatar, badges, and contribution activity.</li>
<li><strong>Authentication</strong>: No authentication or login is required.</li>
<li><strong>Privacy Impact</strong>: The plugin only reads data that is already publicly accessible on profiles.wordpress.org. It does not store, share, or transmit this data beyond displaying it to site users.</li>
</ul>
</li>
</ul>
<p>For more information, see <a href="https://wordpress.org/about/privacy/" rel="ugc">WordPress.org Privacy Policy</a>.</p>
<h3>Privacy & Data Collection</h3>
<p>This plugin does not collect or store any personal data from your website visitors. It fetches publicly available contributor information from WordPress.org Profiles (including avatars) without requiring authentication. To improve performance, the data is temporarily cached and automatically cleared upon deactivation.</p>


Contributor Highlights

Display WordPress.org contributor profiles on your site using a block or shortcode.

RAKIBUZZAMAN

<p><strong>GuestDock</strong> is the most secure and feature-complete way to accept guest posts on WordPress. It creates a fully sandboxed contributor environment where guest authors get temporary, strictly limited, and completely isolated access to the WordPress backend — without ever seeing other users’ content, media, or site settings.</p>
<p>Unlike the default WordPress contributor role, GuestDock enforces real isolation. Guest authors are completely siloed: they can only view, edit, and interact with their own posts and their own media uploads. No data leaks, no accidental exposure, and no security risks.</p>
<p><strong>Who is GuestDock for?</strong></p>
<p>GuestDock is the ideal guest post plugin for multi-author blogs, online magazines, news sites, content agencies, and any brand that needs to accept guest contributions without compromising WordPress security or editorial quality.</p>
<h3>✨ Key Features</h3>
<h4>Sandbox & Access Control</h4>
<ul>
<li><strong>True Sandbox Isolation</strong> — Guests are restricted at the query level via <code>pre_get_posts</code>, <code>ajax_query_attachments</code>, and REST API filters. They only see content they created. No other user’s drafts, media, or data is ever visible.</li>
<li><strong>Time-Limited Guest Access</strong> — Set exact expiration dates for every guest author. Accounts automatically lose access once the time is up — zero manual cleanup.</li>
<li><strong>Post Submission Limits</strong> — Control exactly how many posts each guest can submit. Prevent unlimited content flooding.</li>
<li><strong>Runtime Capability Enforcement</strong> — Belt-and-suspenders: even if another plugin grants capabilities, GuestDock’s runtime filter ensures guests cannot exceed their allowed permissions.</li>
</ul>
<h4>Editorial Workflow</h4>
<ul>
<li><strong>Approval & Feedback System</strong> — Return posts to “Draft” with inline admin feedback notes. Guests see feedback on their dashboard and in the editor. Automatic email notifications keep everyone in the loop.</li>
<li><strong>Review Queue</strong> — Centralized queue with inline post preview, word count badges, QA status indicators, and direct edit links for efficient editorial review.</li>
<li><strong>Smart Submission Checklist</strong> — A live-updating Gutenberg sidebar panel replaces the old notice-based QA with a modern, visual experience. Color-coded checks for word count, featured image, excerpt, and external links — always visible while writing.</li>
<li><strong>Content Quality Enforcement</strong> — Block submission until guests meet minimum word counts, upload a featured image, and provide a custom excerpt.</li>
</ul>
<h4>Content & SEO Protection</h4>
<ul>
<li><strong>SEO & Spam Link Protection</strong> — Limit external links per post and automatically inject <code>rel="nofollow sponsored"</code> attributes to safeguard your site’s SEO authority.</li>
<li><strong>SEO Pre-Check Panel</strong> — Built-in Gutenberg sidebar SEO audit: focus keyword detection, heading structure analysis, image alt text coverage, meta description length check, and internal/external link ratio — all with a visual score.</li>
<li><strong>Category Locking</strong> — Restrict guest posts to specific pre-approved categories to maintain your site’s content organization.</li>
<li><strong>Gutenberg Block Restriction</strong> — Prevent script injection by denying dangerous blocks (Custom HTML, Shortcode, Code) while allowing access to all other Gutenberg blocks for full content creation. Fully customizable via the <code>guestdock_denied_block_types</code> filter.</li>
</ul>
<h4>Media & Upload Security</h4>
<ul>
<li><strong>Media Upload Security</strong> — Strict MIME type validation (JPG, PNG, GIF, WebP only), configurable file size limits, double-extension checks, and per-user upload quotas with race condition protection.</li>
<li><strong>API & XML-RPC Hardening</strong> — Completely disables XML-RPC access and tightly secures REST API endpoints for guest accounts to prevent unauthorized programmatic access.</li>
</ul>
<h4>Analytics & Reporting</h4>
<ul>
<li><strong>Analytics Dashboard</strong> — Per-guest metrics: posts submitted, approval rate, average word count. Overview cards showing total published posts, active guests, and performance trends.</li>
<li><strong>CSV Export</strong> — One-click export of all contributor analytics data for stakeholder reporting and content strategy.</li>
<li><strong>Admin Dashboard Widget</strong> — “GuestDock at a Glance” widget on the WordPress dashboard showing pending post count, active guest count, and recent submissions with one-click links to the Review Queue.</li>
</ul>
<h4>Content Templates</h4>
<ul>
<li><strong>Post Templates</strong> — Admins create reusable content templates (e.g., “Product Review”, “How-To Guide”) with pre-filled structure. Guests select a template when starting a new post, ensuring consistent content format across all contributions.</li>
<li><strong>Template Selector Modal</strong> — Beautiful modal overlay intercepts the “Add New Post” button, presenting available templates and a “Start Blank” option.</li>
</ul>
<h4>Guest Experience</h4>
<ul>
<li><strong>Guest Onboarding Modal</strong> — When a guest first logs in, a branded welcome overlay shows site-specific writing guidelines, content requirements summary, post allowance tracker, and a “Start Writing” call-to-action.</li>
<li><strong>Guest Contributor Profiles</strong> — Public author bio pages with custom bio, website, and social media links (X/Twitter, LinkedIn). Automatically displayed on author archive pages.</li>
<li><strong>Custom Writing Guidelines</strong> — Add editorial instructions that appear directly in the guest’s dashboard widget and post list page with smart dismissible notices.</li>
</ul>
<h4>Admin Experience</h4>
<ul>
<li><strong>Admin Onboarding Wizard</strong> — First-time 4-step setup wizard: configure content rules, create your first invite, set up secure login, and copy the shortcode — all without leaving the page.</li>
<li><strong>Inline Guest Management</strong> — Edit expiration dates and post limits directly from the admin dashboard without opening each user profile.</li>
<li><strong>Safe Guest Removal</strong> — Delete guest accounts while safely reassigning their published posts to an administrator, preventing content loss. Automatically cleans up orphaned media.</li>
<li><strong>Auto Username Generation</strong> — Automatically generate clean usernames from email prefixes during guest creation.</li>
</ul>
<h4>Integrations & Developer Tools</h4>
<ul>
<li><strong>REST API</strong> — Full REST API under <code>guestdock/v1</code> namespace: list guests, get guest details, list submissions, view stats. All endpoints require <code>manage_options</code> authentication.</li>
<li><strong>Webhooks</strong> — Configure webhook URLs to receive POST notifications on <code>guest.invited</code>, <code>post.submitted</code>, and <code>post.approved</code> events. Compatible with Zapier, Make, Slack, and custom endpoints.</li>
<li><strong>Frontend Request Form</strong> — Use the <code>[guestdock_request_form]</code> shortcode to let visitors apply for guest author access directly from your site. Built-in honeypot and rate limiting for spam protection.</li>
<li><strong>Email Template Customization</strong> — Fully customize the subject and body of all 6 automated email types: Invitations, Feedback Notifications, Approval Confirmations, Submission Alerts, Request Confirmations, and Access Requests.</li>
<li><strong>Secure Login Integration</strong> — One-click install and activate AuthDock from within GuestDock for magic link authentication, eliminating password management for guest authors.</li>
<li><strong>30+ Developer Hooks</strong> — Over 30 WordPress-style filters and actions across every plugin class for full extensibility, from capabilities and email notifications to validation rules and upload quotas.</li>
<li><strong>In-Plugin Help Center</strong> — Built-in “Help” and “Shortcode Reference” tabs for instant admin guidance — no external docs needed.</li>
<li><strong>Clean Uninstall</strong> — Proper <code>uninstall.php</code> removes all plugin data (options, user meta, post meta, custom post types, transients) when the plugin is deleted.</li>
</ul>
<h3>Documentation & Resources</h3>
<p>For a complete step-by-step guide on how to use GuestDock, including setup instructions and workflows for both administrators and guest authors, please read our <a href="https://wpinlearn.com/guestdock-user-guide" rel="nofollow ugc">GuestDock User Guide</a>.</p>
<p>To learn more about the philosophy behind GuestDock and why it’s the most secure way to manage guest posts, check out our blog post: <a href="https://wpinlearn.com/manage-guest-posts-wordpress-guestdock" rel="nofollow ugc">The Ultimate Way to Manage Guest Posts on WordPress</a>.</p>


GuestDock — Guest Post Management, Contributor Sandbox, Editorial Workflow & Content Security

Securely manage guest posts on WordPress. Invite contributors with time-limited access, sandboxed isolation, editorial workflow, analytics, content te …

Contributor Highlights vs GuestDock — Guest Post Management, Contributor Sandbox, Editorial Workflow & Content Security