iNET

<p><strong>Sitevorx</strong> is a lightweight, all-in-one WordPress plugin that helps you optimize performance, harden security, and manage your website from a single, modern dashboard. No bloat, no external dependencies — just the tools you need.</p>
<h4>Security Center (NEW in 1.1.0)</h4>
<ul>
<li><strong>Security Score Dashboard</strong>: A single 0–100 score that summarizes the hardening state of your site, with prioritized recommendations.</li>
<li><strong>Core Integrity Checker</strong>: Compares every WordPress core file against the official <code>api.wordpress.org</code> MD5 checksums to detect modified, missing, or extra files.</li>
<li><strong>HTTP Security Headers</strong>: One-click enable <code>X-Content-Type-Options</code>, <code>X-Frame-Options</code>, <code>Referrer-Policy</code>, and <code>Permissions-Policy</code> on the frontend.</li>
<li><strong>Login Honeypot</strong>: Invisible bait field on <code>wp-login.php</code> that silently rejects spam bots without affecting real users.</li>
<li><strong>User Enumeration Protection</strong>: Blocks <code>?author=N</code> probing and the public REST <code>/wp/v2/users</code> endpoint for non-logged-in visitors.</li>
<li><strong>Login Notification</strong>: Emails the administrator whenever an account with <code>manage_options</code> logs in successfully (1-hour cooldown per IP).</li>
<li><strong>Login Attempt Limiter</strong>: Lock out IPs after repeated failed login attempts, with configurable threshold, lockout duration, and IP allowlist.</li>
<li><strong>Secret Login URL</strong>: Hide the default <code>wp-login.php</code> behind a custom keyword.</li>
<li><strong>Google reCAPTCHA v2 / v3</strong>: Protect the login form from bots, with a configurable v3 score threshold.</li>
<li><strong>Disable XML-RPC</strong> and <strong>Disable File Editor</strong>: Block DDoS / brute-force vectors and stop code editing from the dashboard.</li>
</ul>
<h4>Speed Optimization</h4>
<ul>
<li><strong>Heartbeat Throttle</strong>: Slows the Heartbeat API to 60 seconds instead of disabling it, preserving autosave and post-locking.</li>
<li><strong>System Tweaks</strong>: Lazy load images, limit post revisions, allow safe SVG uploads (with XXE-hardened sanitizer).</li>
<li><strong>Database Cleanup</strong>: Remove revisions, spam comments, and expired transients in one click.</li>
<li><strong>Malware Scanner</strong>: Scan your entire codebase and database for suspicious injections.</li>
</ul>
<h4>SMTP Configuration</h4>
<ul>
<li>Send emails via <strong>Gmail</strong> (App Password) or a <strong>custom SMTP server</strong> (SSL/TLS).</li>
<li>Built-in <strong>Test Email</strong> sender.</li>
<li>Email delivery log with success/failure tracking.</li>
<li>Force From Name and From Email to prevent address drift.</li>
</ul>
<h4>Website Utilities</h4>
<ul>
<li>Inject tracking codes in <strong>Header/Footer</strong> (Google Analytics, Facebook Pixel, etc.).</li>
<li><strong>Content Protection</strong>: Disable right-click, text selection, and drag-and-drop.</li>
<li><strong>Maintenance Mode</strong>: Display a professional “under construction” page to visitors.</li>
<li><strong>Custom Login Logo</strong>: Replace the WordPress logo on the login screen with your own brand.</li>
</ul>
<h4>Disk Space Manager</h4>
<ul>
<li>Recursively scan your hosting for large files (>50 MB).</li>
<li>Auto-categorize files (backups, error logs, large media).</li>
<li>Bulk delete to free up disk space instantly.</li>
</ul>
<h4>Floating Contact Buttons</h4>
<ul>
<li><strong>Phone Hotline</strong> button with animated icon.</li>
<li><strong>Zalo</strong> chat button (auto-opens Zalo app).</li>
<li><strong>Messenger</strong> chat button (m.me deep link).</li>
<li>Fully responsive floating widget in the corner of your site.</li>
</ul>
<h4>Import / Export Settings</h4>
<ul>
<li><strong>Export</strong> all Sitevorx settings as a JSON file.</li>
<li><strong>Import</strong> settings from another site in one click.</li>
<li><strong>Reset</strong> all settings to factory defaults.</li>
</ul>
<h4>Scheduled Cleanup (WP-Cron)</h4>
<ul>
<li>Automatic cleanup: daily, twice daily, or weekly.</li>
<li>Clears temp files, auto-drafts, spam, and optimizes database tables.</li>
<li>Activity log showing the last 20 cleanup runs.</li>
</ul>
<h4>Maintenance & Update Monitor</h4>
<ul>
<li>Track plugins and themes that need updating.</li>
<li>Check WordPress core, PHP version, SSL status, and WP_DEBUG.</li>
<li>Maintenance health score with actionable recommendations.</li>
</ul>
<h4>Server Info</h4>
<ul>
<li>View Web Server, PHP, MySQL, and WordPress versions at a glance.</li>
<li>PHP limits: memory, execution time, input vars, upload size.</li>
<li>List all loaded PHP extensions.</li>
<li>Database size monitoring.</li>
</ul>
<h3>External Services</h3>
<h4>Google reCAPTCHA (v2 and v3)</h4>
<p>Sitevorx can optionally integrate with Google reCAPTCHA (v2 checkbox or v3 invisible / score-based) to protect the WordPress login form. This feature is disabled by default and only works when an administrator explicitly enables it, selects a version, and provides valid Google-issued API keys.</p>
<p>When enabled, the plugin loads the Google reCAPTCHA JavaScript on the login screen and sends the generated verification token to Google’s verification endpoint (<code>https://www.google.com/recaptcha/api/siteverify</code>) during login validation. For v3, the configurable score threshold (filter <code>sitevorx_recaptcha_v3_score_threshold</code>, default <code>0.5</code>) is compared against Google’s returned score.</p>
<p>This service is provided by Google:<br />
* Service URL: https://www.google.com/recaptcha/<br />
* Verification endpoint: https://www.google.com/recaptcha/api/siteverify<br />
* Terms of Service: https://policies.google.com/terms<br />
* Privacy Policy: https://policies.google.com/privacy</p>
<h4>WordPress.org Core Checksums API</h4>
<p>The <strong>Security Center <span aria-hidden="true" class="wp-exclude-emoji">→</span> Kiểm Tra Toàn Diện <span aria-hidden="true" class="wp-exclude-emoji">→</span> WordPress Core Integrity</strong> check (off by default; runs only when the admin clicks “Kiểm tra”) fetches the official MD5 checksums for the installed WordPress version from WordPress.org so it can flag modified or missing core files.</p>
<ul>
<li>Verification endpoint: https://api.wordpress.org/core/checksums/1.0/</li>
<li>Request payload: only the installed WordPress version string (e.g. <code>6.4.2</code>) and the locale <code>en_US</code>. No site URL, user data, or content is sent.</li>
<li>Operated by: WordPress.org</li>
<li>Terms of Service: https://wordpress.org/about/privacy/</li>
</ul>
<h3>Highlights</h3>
<ul>
<li><strong>All-in-one</strong>: Replaces 5-7 single-purpose plugins (SMTP, Security, Optimization, Cleanup, Maintenance).</li>
<li><strong>Modern UI</strong>: Gradient banners, collapsible sidebar, toast notifications, fully responsive.</li>
<li><strong>Secure by design</strong>: Nonce verification, input sanitization, CSRF protection, prepared database queries.</li>
<li><strong>Lightweight</strong>: Modular architecture — only loads what you use. Zero frontend impact. No Composer or NPM required.</li>
<li><strong>Localized</strong>: Full Vietnamese (vi) translation included via .po/.mo files.</li>
</ul>


Sitevorx

An all-in-one WordPress toolkit for site optimization, security hardening, SMTP configuration, disk cleanup, and maintenance monitoring.

Jon Christopher

cageehv

NerdPress

Colin Devroe

<p>NerdPress has adopted Optimize Database After Deleting Revisions! <a href="https://www.nerdpress.net/announcing-optimize-database/" rel="nofollow ugc">Read the announcement here.</a></p>
<p>This plugin is a ‘One Click’ WordPress database cleaner & optimizer, with precise revision cleanup and flexible scheduling.</p>
<h4>Main Features</h4>
<ul>
<li>Deletes revisions of posts, pages and / or custom post types (you optionally can keep an ‘x’-amount of the most recent revisions and you can choose to delete revisions older than…)</li>
<li>Deletes trashed posts, pages and comments (optional)</li>
<li>Deletes spammed comments (optional)</li>
<li>Deletes unused tags (optional)</li>
<li>Deletes ‘expired or all transients’ (optional)</li>
<li>Deletes ‘pingbacks’ and ‘trackbacks’ (optional)</li>
<li>Clears the ‘OEMBED cache’ (optional)</li>
<li>Deletes ‘orphan postmeta items’</li>
<li>Optimizes the database tables (optionally you can exclude certain tables, or even specific posts/pages, from optimization)</li>
<li>Creates a log of the optimizations (optional)</li>
<li>Optimization can be scheduled to automatically run once hourly, twice daily, once daily or once weekly at a specific time (optional)</li>
<li>‘Optimize DB (1 click)’ link in the admin bar (optional)</li>
<li>‘Optimize Database’ Icon in the admin menu (optional)</li>
<li>MULTISITE compatible: optimizes all sites in the network with one click</li>
</ul>
<h4>Settings</h4>
<p>You can find the settings page in the WP Admin Panel » Optimize Database -or- via the WP Admin Panel » Optimize Database icon (depends on settings)</p>
<h4>Excluding specific posts/pages from deleting revisions</h4>
<p>If you want to keep revisions for a specific post/page (no matter what the other settings are), create a custom field named ‘keep_revisions’ for that post/page and give it the value ‘Y’</p>
<h4>Starting the Analysis / Optimization</h4>
<p>You can start the Optimization in the WP Admin Panel » Optimize Database.<br />
Note: if you use the Scheduler the Optimization will run automatically!<br />
Note: you also can click the ‘Optimize DB (1 click)’ link in the admin bar (if enabled)<br />
You can click one of the following buttons:<br />
‘Analyze (summary): analyzes the database and gives the count of what will be cleaned<br />
‘Analyze (detail): analyzes the database and gives a detailed report of what will be deleted<br />
‘Optimize (summary): actually deletes the items and gives the count of what has been deleted<br />
‘Optimize (detail): actually deletes the items and gives a detailed report of what has been deleted</p>
<h4>Multisite Support</h4>
<ul>
<li>Install the plugin as Network Administrator (Network Admin » Plugins)</li>
<li>‘Network Activate’ the plugin</li>
<li>You only can configure and run the plugin on the main network site, but it will optimize ALL the sub-sites too!</li>
</ul>
<h4>Running the plug in from a Unix crontab</h4>
<p>In case you cannot use WPCron, but you can edit the Unix crontab:</p>
<p>Create a .php file, in the root directory of your site, with:<br />
<?php<br />
define(‘RUN_OPTIMIZE_DATABASE’, true);<br />
require_once(‘wp-load.php’);<br />
?></p>
<p>Then, start the .php file from your crontab!</p>
<h4>Supported languages</h4>
<ul>
<li>Belarus [be_BY] – translated by Natasha – https://www.ustarcash.com/ – keyword UStarCash</li>
<li>Danish [da_DK] – translated by Alexander Leo-Hansen – http://alexanderleohansen.dk</li>
<li>Dutch [nl_NL] – translated by Rolf van Gelder, CAGE Web Design – http://cagewebdev.com</li>
<li>English [en_US] – translated by Rolf van Gelder, CAGE Web Design – http://cagewebdev.com</li>
<li>French [fr_FR] – translated by Guillaume Blet – http://www.mycinetheque.fr</li>
<li>German [de_DE] – translated by Kolja Spyra</li>
<li>Indonesian [id_ID] – translated by ChameleonJohn.com</li>
<li>Italian [it_IT] – translated by Fabio Marzocca</li>
<li>Persian [fa_IR] – translated by Milad Mordi, http://seodaramal.ir</li>
<li>Portuguese [po_BR] – translated by Rede Sul Mineira de Comunicações</li>
<li>Russian [ru_RU] – translated by Vadim Sokhin, PluginZone – http://pluginzone.ru</li>
<li>Serbian [sr_RS] – translated by Ogi Djuraskovic, FirstSiteGuide  – http://firstsiteguide.com</li>
<li>Swedish [sv_SE] – translated by P.E.</li>
<li>Turkish [tr_TR] – translated by Keremcan Buyuktaskin</li>
<li>Ukranian [uk_UA] – translated by Anna Goriacha, Coupofy – http://coupofy.com</li>
</ul>
<h4>Disclaimer</h4>
<p>NO WARRANTY, USE IT AT YOUR OWN RISK! MAKE BACKUPS FIRST!</p>


Optimize Database after Deleting Revisions

In principle this would be an excellent plugin but it always leads in time-out errors. In our view, the problem lies with the execution of the optimization process itself. There is no safeguard against time-out errors. This should be fixed as there must be better ways to code this. 

Good plugin but leads to ongoing time-out errors


Plugin works exactly as described. Thanks! It was easy to configure and I especially like the ability to remove all revisions except for XX amount, which makes it great for cleaning up existing sites where you've reduced the number of revisions, but the database still contains heaps of older revisions.


Easy to use with great results

One-click database optimization with precise revision cleanup and flexible scheduling. Speeding up sites since 2011!

Sitevorx vs Optimize Database after Deleting Revisions