James Robinson

JMR.codes

<p>A self-hosted site manager’s toolkit: the security hardening, performance tuning, admin cleanup, content controls and email handling you’d otherwise install half a dozen micro-plugins for — as independent modules on a single settings page (Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> Site Toolkit). Every module is off by default and registers no hooks while disabled, so the plugin changes nothing until you opt in.</p>
<p>🔐 <strong>Security</strong> — disable XML-RPC, hide the WordPress version, disable user enumeration (author scans, sitemaps, oEmbed, author archives), block the REST users endpoint, disable the file editors, block readme/license files, security headers (with optional HSTS), disable application passwords, session management, and an admin audit log.</p>
<p>🔓 <strong>Login Page</strong> — change the login URL, login rate limiting, hide detailed login errors, username-only sign-in, disable the language switcher, record each user’s last login, and login screen branding (use your site identity automatically or a custom logo from the media library).</p>
<p>🚀 <strong>Performance</strong> — control autosave and post revisions, remove asset version query strings, throttle the Heartbeat API, remove wp_head bloat and generator tags, dequeue unused default assets (emoji, jQuery Migrate, Block Library CSS), disable self-pings, scheduled database maintenance, DNS prefetch/preconnect hints, and manage generated image sizes.</p>
<p>🛠️ <strong>Admin / UX</strong> — hide the front-end toolbar, change the WordPress greeting, replace the account menu with a logout button, dashboard widget manager, custom admin footer, maintenance mode, media library user isolation, environment indicator, suppress update notices on non-production, trim the WordPress toolbar menu, and an “All Settings” menu item.</p>
<p>📝 <strong>Content & Editorial</strong> — customize excerpts, disable the block editor per post type, disable trackbacks, targeted comment controls (media comments, plain-text links, minimum length), disable comments entirely, disable oEmbed, and restore the Links Manager.</p>
<p>📧 <strong>Email & Notifications</strong> — disable selected notification emails, and redirect or block all outgoing email on non-production environments.</p>
<p>If you have further suggestions, please contact us via the <a href="https://wordpress.org/support/plugin/wp-performance-security" rel="ugc">plugin support page</a>.</p>
<p>If this plugin is useful for managing your WordPress settings, please <a href="https://wordpress.org/support/view/plugin-reviews/wp-performance-security" rel="ugc">leave a review</a>.</p>
<p>Developed by <a href="https://jmr.codes" rel="nofollow ugc">JMR.codes</a>.</p>


Performance & Security

A site manager's toolkit. Settings to modify WordPress and improve performance and security.

Themeum

Ari Stathopoulos

David Vongries

DannyCooper

Ignacio Cruz Moreno

wplemon

<p><a href="https://kirki.com/" rel="nofollow ugc">Kirki</a> is a <strong>freeform visual builder for WordPress and an advanced theme customizer</strong> that lets you design and build complete websites visually — without coding.</p>
<p>Unlike traditional page builders, Kirki uses an <strong>infinite freeform canvas</strong>, giving you full creative freedom without rigid grids or layout restrictions.</p>
<p>Build landing pages, business websites, blogs, and full websites with responsive controls, dynamic content, and powerful design tools — all inside WordPress.</p>
<p><strong>Watch Kirki in action:</strong></p>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/ofDMD1j4A2Y?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<h3>🔥 Why Choose Kirki?</h3>
<p>Kirki combines a modern visual builder with WordPress’s powerful customization system — so you can design freely without sacrificing flexibility.</p>
<p>✔ Freeform canvas — no rigid layouts or constraints<br />
✔ Drag-and-drop visual editor with precise control<br />
✔ Responsive editing for desktop, tablet, and mobile<br />
✔ Built-in tools (forms, popups, dynamic content)<br />
✔ Clean, performance-focused output<br />
✔ Works with any WordPress theme<br />
✔ Built for designers, developers, and teams</p>
<h3>🧱 Core Features</h3>
<h3>Visual Website Builder</h3>
<p>Design your website visually with full control.</p>
<ul>
<li>Freeform drag-and-drop editor</li>
<li>Infinite canvas — no grid or column restrictions</li>
<li>Real-time responsive editing (desktop, tablet, mobile)</li>
<li>Pre-built components and layout blocks</li>
<li>Global styles (colors, fonts, spacing)</li>
<li>Version history and rollback</li>
<li>Media manager for assets</li>
<li>Light & dark mode interface</li>
</ul>
<h3>⚡ Dynamic Content & Smart Features</h3>
<p>Build scalable, data-driven websites.</p>
<ul>
<li>Dynamic content system (collections & templates)</li>
<li>Conditional visibility controls</li>
<li>Custom attributes for advanced control</li>
<li>Developer-friendly extensibility</li>
<li>Reusable design systems and components</li>
</ul>
<h3>🎨 Templates & Design Assets</h3>
<p>Start fast and customize everything.</p>
<ul>
<li>Ready-made website templates</li>
<li>Pre-built sections and layout blocks</li>
<li>Reusable design assets</li>
<li>Import / export projects easily</li>
</ul>
<h3>🧩 Built-in Tools</h3>
<p>Everything you need — without extra plugins.</p>
<ul>
<li>Form builder with submission management</li>
<li>Popup builder with visual controls</li>
<li>Interaction and animation builder</li>
<li>Icon library and media tools</li>
</ul>
<h3>🎬 Interactions & Animations</h3>
<p>Create engaging, modern experiences.</p>
<ul>
<li>Visual animation builder</li>
<li>Interaction timeline editor</li>
<li>Custom transitions and effects</li>
<li>Text animation tools</li>
</ul>
<h3>⚙️ Advanced WordPress Customizer</h3>
<p>Extend WordPress customization with powerful controls.</p>
<ul>
<li>35+ customizer controls</li>
<li>Real-time preview</li>
<li>Automatic CSS generation</li>
<li>Conditional logic support</li>
<li>Developer-friendly API</li>
<li>Performance optimized</li>
</ul>
<h3>👥 Who Is Kirki For?</h3>
<ul>
<li>Designers who want full creative freedom</li>
<li>Freelancers building client websites</li>
<li>Agencies managing multiple projects</li>
<li>Developers extending WordPress functionality</li>
<li>Anyone looking for a <strong>no-code visual builder for WordPress</strong></li>
</ul>
<h3>🚀 What Makes Kirki Different?</h3>
<p>Kirki is not just another page builder.</p>
<p>Instead of forcing layouts into rows and columns, Kirki gives you a <strong>freeform design experience</strong> — similar to modern design tools — while keeping the full power of WordPress.</p>
<p><strong>Design freely. Build with WordPress.</strong></p>
<h3>Support</h3>
<ul>
<li>Community support: https://facebook.com/groups/kirkicommunity</li>
<li>Documentation: https://kirki.com/docs</li>
<li>Website: https://kirki.com</li>
</ul>


Kirki – Freeform Page Builder, Website Builder & Customizer


WordPress themes utilizing the Kirki customizer framework are currently broken. Due to critical security vulnerabilities, an update is mandatory, but there is unfortunately zero support available for legacy versions.


no legacy support

Freeform page builder & website builder for WordPress. Infinite canvas for complex, interactive websites. Built-in forms, animations & Customizer.

Performance & Security vs Kirki – Freeform Page Builder, Website Builder & Customizer