iNET

<p><strong>Sitevorx</strong> is a lightweight, all-in-one WordPress plugin that helps you optimize performance, harden security, and manage your website from a single, modern dashboard. No bloat, no external dependencies — just the tools you need.</p>
<h4>Security Center (NEW in 1.1.0)</h4>
<ul>
<li><strong>Security Score Dashboard</strong>: A single 0–100 score that summarizes the hardening state of your site, with prioritized recommendations.</li>
<li><strong>Core Integrity Checker</strong>: Compares every WordPress core file against the official <code>api.wordpress.org</code> MD5 checksums to detect modified, missing, or extra files.</li>
<li><strong>HTTP Security Headers</strong>: One-click enable <code>X-Content-Type-Options</code>, <code>X-Frame-Options</code>, <code>Referrer-Policy</code>, and <code>Permissions-Policy</code> on the frontend.</li>
<li><strong>Login Honeypot</strong>: Invisible bait field on <code>wp-login.php</code> that silently rejects spam bots without affecting real users.</li>
<li><strong>User Enumeration Protection</strong>: Blocks <code>?author=N</code> probing and the public REST <code>/wp/v2/users</code> endpoint for non-logged-in visitors.</li>
<li><strong>Login Notification</strong>: Emails the administrator whenever an account with <code>manage_options</code> logs in successfully (1-hour cooldown per IP).</li>
<li><strong>Login Attempt Limiter</strong>: Lock out IPs after repeated failed login attempts, with configurable threshold, lockout duration, and IP allowlist.</li>
<li><strong>Secret Login URL</strong>: Hide the default <code>wp-login.php</code> behind a custom keyword.</li>
<li><strong>Google reCAPTCHA v2 / v3</strong>: Protect the login form from bots, with a configurable v3 score threshold.</li>
<li><strong>Disable XML-RPC</strong> and <strong>Disable File Editor</strong>: Block DDoS / brute-force vectors and stop code editing from the dashboard.</li>
</ul>
<h4>Speed Optimization</h4>
<ul>
<li><strong>Heartbeat Throttle</strong>: Slows the Heartbeat API to 60 seconds instead of disabling it, preserving autosave and post-locking.</li>
<li><strong>System Tweaks</strong>: Lazy load images, limit post revisions, allow safe SVG uploads (with XXE-hardened sanitizer).</li>
<li><strong>Database Cleanup</strong>: Remove revisions, spam comments, and expired transients in one click.</li>
<li><strong>Malware Scanner</strong>: Scan your entire codebase and database for suspicious injections.</li>
</ul>
<h4>SMTP Configuration</h4>
<ul>
<li>Send emails via <strong>Gmail</strong> (App Password) or a <strong>custom SMTP server</strong> (SSL/TLS).</li>
<li>Built-in <strong>Test Email</strong> sender.</li>
<li>Email delivery log with success/failure tracking.</li>
<li>Force From Name and From Email to prevent address drift.</li>
</ul>
<h4>Website Utilities</h4>
<ul>
<li>Inject tracking codes in <strong>Header/Footer</strong> (Google Analytics, Facebook Pixel, etc.).</li>
<li><strong>Content Protection</strong>: Disable right-click, text selection, and drag-and-drop.</li>
<li><strong>Maintenance Mode</strong>: Display a professional “under construction” page to visitors.</li>
<li><strong>Custom Login Logo</strong>: Replace the WordPress logo on the login screen with your own brand.</li>
</ul>
<h4>Disk Space Manager</h4>
<ul>
<li>Recursively scan your hosting for large files (>50 MB).</li>
<li>Auto-categorize files (backups, error logs, large media).</li>
<li>Bulk delete to free up disk space instantly.</li>
</ul>
<h4>Floating Contact Buttons</h4>
<ul>
<li><strong>Phone Hotline</strong> button with animated icon.</li>
<li><strong>Zalo</strong> chat button (auto-opens Zalo app).</li>
<li><strong>Messenger</strong> chat button (m.me deep link).</li>
<li>Fully responsive floating widget in the corner of your site.</li>
</ul>
<h4>Import / Export Settings</h4>
<ul>
<li><strong>Export</strong> all Sitevorx settings as a JSON file.</li>
<li><strong>Import</strong> settings from another site in one click.</li>
<li><strong>Reset</strong> all settings to factory defaults.</li>
</ul>
<h4>Scheduled Cleanup (WP-Cron)</h4>
<ul>
<li>Automatic cleanup: daily, twice daily, or weekly.</li>
<li>Clears temp files, auto-drafts, spam, and optimizes database tables.</li>
<li>Activity log showing the last 20 cleanup runs.</li>
</ul>
<h4>Maintenance & Update Monitor</h4>
<ul>
<li>Track plugins and themes that need updating.</li>
<li>Check WordPress core, PHP version, SSL status, and WP_DEBUG.</li>
<li>Maintenance health score with actionable recommendations.</li>
</ul>
<h4>Server Info</h4>
<ul>
<li>View Web Server, PHP, MySQL, and WordPress versions at a glance.</li>
<li>PHP limits: memory, execution time, input vars, upload size.</li>
<li>List all loaded PHP extensions.</li>
<li>Database size monitoring.</li>
</ul>
<h3>External Services</h3>
<h4>Google reCAPTCHA (v2 and v3)</h4>
<p>Sitevorx can optionally integrate with Google reCAPTCHA (v2 checkbox or v3 invisible / score-based) to protect the WordPress login form. This feature is disabled by default and only works when an administrator explicitly enables it, selects a version, and provides valid Google-issued API keys.</p>
<p>When enabled, the plugin loads the Google reCAPTCHA JavaScript on the login screen and sends the generated verification token to Google’s verification endpoint (<code>https://www.google.com/recaptcha/api/siteverify</code>) during login validation. For v3, the configurable score threshold (filter <code>sitevorx_recaptcha_v3_score_threshold</code>, default <code>0.5</code>) is compared against Google’s returned score.</p>
<p>This service is provided by Google:<br />
* Service URL: https://www.google.com/recaptcha/<br />
* Verification endpoint: https://www.google.com/recaptcha/api/siteverify<br />
* Terms of Service: https://policies.google.com/terms<br />
* Privacy Policy: https://policies.google.com/privacy</p>
<h4>WordPress.org Core Checksums API</h4>
<p>The <strong>Security Center <span aria-hidden="true" class="wp-exclude-emoji">→</span> Kiểm Tra Toàn Diện <span aria-hidden="true" class="wp-exclude-emoji">→</span> WordPress Core Integrity</strong> check (off by default; runs only when the admin clicks “Kiểm tra”) fetches the official MD5 checksums for the installed WordPress version from WordPress.org so it can flag modified or missing core files.</p>
<ul>
<li>Verification endpoint: https://api.wordpress.org/core/checksums/1.0/</li>
<li>Request payload: only the installed WordPress version string (e.g. <code>6.4.2</code>) and the locale <code>en_US</code>. No site URL, user data, or content is sent.</li>
<li>Operated by: WordPress.org</li>
<li>Terms of Service: https://wordpress.org/about/privacy/</li>
</ul>
<h3>Highlights</h3>
<ul>
<li><strong>All-in-one</strong>: Replaces 5-7 single-purpose plugins (SMTP, Security, Optimization, Cleanup, Maintenance).</li>
<li><strong>Modern UI</strong>: Gradient banners, collapsible sidebar, toast notifications, fully responsive.</li>
<li><strong>Secure by design</strong>: Nonce verification, input sanitization, CSRF protection, prepared database queries.</li>
<li><strong>Lightweight</strong>: Modular architecture — only loads what you use. Zero frontend impact. No Composer or NPM required.</li>
<li><strong>Localized</strong>: Full Vietnamese (vi) translation included via .po/.mo files.</li>
</ul>


Sitevorx

An all-in-one WordPress toolkit for site optimization, security hardening, SMTP configuration, disk cleanup, and maintenance monitoring.

Brice Capobianco

<p><strong>Let you delete your posts revisions individually or all at once (purge or bulk action). Compatible with Gutenberg (experimental) and classic editor.</strong></p>
<h4>What does it do?</h4>
<p>Simple Revisions Delete adds a discreet link within a post submit box to let you purge (delete) its revisions via AJAX. Bulk actions also available.</p>
<p>It helps you keep a clean database by removing unnecessary posts revisions. Unlike other similar plugins, it lets you delete only specific posts revisions, not all your site revisions at once.<br />
The plugin is perfectly integrated in the WordPress back-end, and uses native core functions to safely delete revisions.<br />
It is very lightweight, very simple to use, and just does the job!</p>
<h4>How does it work?</h4>
<p>The plugin adds a discreet link in the post submit box, next to the default revisions counter (see screenshots section).<br />
When you click on it, it will purge the appropriate post revisions via AJAX (no JS is also support).<br />
It also add a new bulk action option in the post/page row view to let you purge revisions of multiple posts at once.</p>
<h4>What’s new?</h4>
<p><strong>Since v2</strong> you can now purge all your posts revisions from within the Gutenberg editor.<br />
Keep in mind that this feature is experimental. I haven’t yet find any way to make it works in a proper way with the current block editor available methods. I’m using jQuery (and AJAX) which is pretty much a hack (a workaround) and not a clean method considering the langages using by the Block Editor.</p>
<p><strong>Since v1.3</strong> you can delete a single revision at once (see screenshots).</p>
<p><a href="http://b-website.com/simple-revisions-delete-free-wordpress-plugin" title="Plugin page" rel="nofollow ugc">See plugin page</a></p>
<p>NOTE: There is no admin page for this plugin – none is needed.</p>
<h4>Post Types support</h4>
<p>The default supported post types are <strong>post</strong> and <strong>page</strong>, but you can easily add custom post types or remove default post types with the following hook:</p>
<pre><code>function bweb_wpsrd_add_post_types( $postTypes ){
    $postTypes[] = 'additional-cpt';
    $postTypes[] = 'another-cpt';
    return $postTypes;
}
add_filter( 'wpsrd_post_types_list', 'bweb_wpsrd_add_post_types' );
</code></pre>
<p>See CODEX to add support to all CPTs: https://codex.wordpress.org/Function_Reference/get_post_types</p>
<h4>Custom user capability</h4>
<p>The default capability to purge or remove rivisions is delete_post, but you can override this with the following hook:</p>
<pre><code>function bweb_wpsrd_capability() {
    return 'edit_post';
}
add_filter('wpsrd_capability', 'bweb_wpsrd_capability');
</code></pre>
<h4>Languages</h4>
<p>The plugin only bears a few sentences, but you can easily translate them through .MO & .PO files. Currently available languages are:</p>
<ul>
<li>English</li>
<li>French</li>
<li>Deutsch – Thanks to <a href="https://profiles.wordpress.org/mallard66" title="mallard66" rel="nofollow ugc">mallard66</a></li>
<li>Dutch – Thanks to <a href="https://profiles.wordpress.org/jondor" title="jondor" rel="nofollow ugc">jondor</a></li>
</ul>
<p>Become a translator and send me your translation! <a href="http://b-website.com/contact" title="Contact" rel="nofollow ugc">Contact-me</a></p>
<p><a href="http://b-website.com/category/plugins-en" title="More plugins by b*web" rel="nofollow ugc">CHECK OUT MY OTHER PLUGINS</a></p>
<p><strong>Please ask for help or report bugs if anything goes wrong. It is the best way to make the community benefit!</strong></p>


Simple Revisions Delete


Installed and activated on WordPress 6.2.2, opened a page in the block editor and clicked Purge. Done.



A really clean implementation of this feature. Very nice work @brikou!



When you get a chance, give it a test run yourself in WordPress 6.3 and update the Tested up to header. This shouldn't be missed out on because of a "Has not been tested with your version of WordPress" message!


Clean and simple

Simple Revisions Delete adds a discreet link within a post submit box to let you purge (delete) its revisions via AJAX. Bulk actions also available.

Sitevorx vs Simple Revisions Delete