Puneet Tiwari

Essentials by Digital Creatings is a lightweight and powerful WordPress plugin designed to improve security, optimize performance, and enhance email functionality. This plugin provides essential security features, removes unnecessary WordPress bloat, and allows you to customize SMTP settings for email delivery.
New in Version 1.3: 
✔ SMTP Email Configuration – Set up SMTP credentials for outgoing emails 
✔ Test Email Feature – Send test emails directly from the admin panel 
✔ Login Security – Customize the login URL to enhance security (Coming soon) 
✔ Additional Security Features – Disable REST API links, self-pingbacks, and Google Maps 
✔ Improved Performance – Remove jQuery Migrate, RSD links, shortlinks, and embed scripts
🔒 Security + Optimization + Email Control in one plugin!
Features: 
🔹 Security Enhancements: 
– Disable XML-RPC to prevent brute force attacks 
– Hide WordPress version details (meta, query strings, HTTP headers) 
– Remove REST API links to reduce exposure 
– Disable RSS feeds and feed links 
– Block self-pingbacks and comment spam 
– Remove RSD (Really Simple Discovery) link 
– Remove shortlinks for better privacy
🚀 Performance Optimizations: 
– Disable Emojis to reduce unnecessary script loads 
– Remove jQuery Migrate to improve front-end speed 
– Disable Google Maps API if unused 
– Remove WordPress embeds to prevent external content embedding
📧 SMTP Email Configuration: 
– Configure SMTP settings (Host, Port, Username, Password, Encryption) 
– Set custom “From Name” and “From Email” for outgoing emails 
– Send test emails directly from the admin panel
🔐 Login Security: 
– Customize the WordPress login URL to prevent brute force attacks
<h3>New Features in 1.3</h3>
🆕 SMTP Email Configuration – Custom SMTP settings for all WordPress emails 
🆕 Test Email Functionality – Verify email settings with a test email feature 
🆕 Login Security – Customize the login URL for added security 
🆕 Security Enhancements – Disable RSS feeds, REST API links, and more 
🆕 Performance Boost – Remove jQuery Migrate, Google Maps, and WordPress embeds
<h3>Support</h3>
For support, please visit <a href="https://www.digitalcreatings.com" rel="nofollow ugc">Digital Creatings</a>.

Essentials by Digital Creatings

Lightweight plugin by Digital Creatings that hides WordPress version info from source code, RSS feeds, scripts & HTTP headers for better protection.

MOHIT GOYAL

HTTP Security Header helps protect your WordPress site by adding critical HTTP headers to each response — with no code required. These headers provide additional layers of protection against attacks such as cross-site scripting (XSS), clickjacking, content injection, and resource leaks.
This plugin offers a modern, responsive admin dashboard with validation, fallback safety, and full control over each header’s default or custom value.
<h3>🔎 Scan Your Website Security Headers</h3>
Before configuring headers, instantly check your website’s current security score using our online header scanner:
👉 <a href="https://inspiredmonks.com/http-security-header-scanner/" rel="nofollow ugc">Scan Your Website Security Headers</a>
✔ Enter your website URL 
✔ Get instant Security Grade (A+ to F) 
✔ See which headers are Present or Missing 
✔ Get clear, actionable recommendations 
✔ Easily fix them using this plugin
Used by thousands of websites to enhance security and protect user data.
Features Include: 
– Visual toggles for enabling/disabling headers 
– Option to use default or custom header values 
– Secure fallback if a header is misconfigured 
– Integrated header validation 
– Support for all major browser-supported headers 
– Nonce-based saving and admin notices 
– WP Multisite compatible 
– “Disable All” and “Reset to Important Headers” actions 
– Per-header input validation with real-time error fallback
Supported Headers: 
* Strict-Transport-Security (HSTS) 
* X-Frame-Options 
* X-Content-Type-Options 
* Referrer-Policy 
* Content-Security-Policy 
* Permissions-Policy 
* X-XSS-Protection 
* X-Permitted-Cross-Domain-Policies 
* Expect-CT 
* Cross-Origin-Opener-Policy (COOP) 
* Cross-Origin-Resource-Policy (CORP) 
* Cross-Origin-Embedder-Policy (COEP)
<h3>Features</h3>
<ul>
<li>Lightweight and performance-focused </li>
<li>No front-end impact </li>
<li>Choose default or custom header values </li>
<li>Secure validation and auto-fallbacks </li>
<li>Seamless plugin compatibility (including WP Rocket) </li>
<li>Fully translation-ready and i18n-compliant </li>
<li>Nonce-protected admin save actions </li>
<li>Optional reset-to-default support </li>
<li>Reset or disable all headers with one click</li>
</ul>

HTTP Security Header


I recently integrated the Security Header plugin into my WordPress site, and it has significantly improved my website's security posture. The user-friendly interface made it easy to enable essential HTTP security headers with just a few clicks. 


Essential for Enhancing Website Security

Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.

Essentials by Digital Creatings vs HTTP Security Header