Syed Balkhi

chriscct7

Zain Balkhi

WPControl is the ultimate way to clean up your WordPress site.
With over 20 built-in optimizations, WPControl allows you to easily enable and disable WordPress Core features, letting you remove those features that you don’t use from the dashboard you and your users see.
Simply put, WPControl is the ultimate plugin that you need to control your website. With our single plugin, you can remove the need to have plugins for things like:
<ul>
<li>Disabling emails</li>
<li>Disabling comments</li>
<li>Disabling the WordPress REST API</li>
<li>and so much more</li>
</ul>
All in a single, easy to use plugin that helps boost both the performance and security of your WordPress install.
WPControl is designed for simplicity first, made by the same <a href="https://wpbeginner.com/" title="WPBeginner" rel="friend nofollow ugc">WPBeginner team</a> that makes your favorite WordPress tutorials.
Our plugin is used by the plugin authors behind many of your favorite WordPress plugins including <a href="https://www.monsterinsights.com/" title="MonsterInsights" rel="friend nofollow ugc">MonsterInsights</a> , <a href="https://wpforms.com/" title="WPForms" rel="friend nofollow ugc">WPForms</a>, <a href="https://aioseo.com/" title="AIOSEO" rel="friend nofollow ugc">AIOSEO</a> and more.
<blockquote>
Simple, yet powerful. I love that I can easily disable all of the features of WordPress I’m not using in a single plugin. It makes new site setup a breeze! 
 
 Chris Christoff
</blockquote>
At WPControl, we found that there are many unused features of WordPress that make it a hassle sometimes or we just don’t need. There are tons of plugins already out there that will disable a specific feature. But taking the time and energy to optimize all of them was too much. We made just one plugin that has the features of many so you can have a one stop shop for disabling unused features of WordPress.
Unlike other methods of disabling features, WPControl allows you to disable many features with just a few clicks (no need to hire a developer).
<h4>Settings Include</h4>
<ul>
<li>
Disable Comments – You can disable comments site wide or on specific post types such as posts, pages, and media.
</li>
<li>
Disable Gutenberg – Disables the Gutenberg block editor and reverts it the Classic Editor
</li>
<li>
Disable “Try Gutenberg” Nag – Removes the annoying admin notice that keeps nagging you to try Gutenberg
</li>
<li>
Disable Shortlinks – The tag is auto generated by WordPress and is used to create shortlinks. If you are already using pretty permalinks, such as the PrettyLinks plugin. Then there is no need for this unnecessary tag.
</li>
<li>
Disable RSD Link – RSD Links are used by blog clients and some 3rd parties that utilize XML-RPC requests. If you edit your site through your browser, then you do not need it. Most of the time, it is just unnecessary code.
</li>
<li>
Remove XFN Profile Link – The XFN Profile Link is used to add semantic data to links to be used by browsers to assign relationships between profiles. Basically it tells browsers that the site contains links that use XFN Specification
</li>
<li>
Disable wlwmanifest Link – The wlwmanifest link is used by Windows Live Writer. If you don’t use Windows Live Writer then disable the link as it is unnecessary code.
</li>
<li>
Disable Links to Previous and Next Post – If your site is not a blog and is used as a CMS, then this feature will remove the previous and next post links in your WordPress theme.
</li>
<li>
Disable XML-RPC Pingback – Removes XML-RPC method to prevent abuse of site’s pingback while you can use the rest of the XML-RPC Pingback method.
</li>
<li>
Disable Gravatar – Blocks users WordPress from getting user Gravatar from their email to add privacy for the users or prevent inappropriate avatars.
</li>
<li>
Disable Rest API – Disables the REST-API to prevent abuse of Rest/JSON API.
</li>
<li>
Hide Login Errors – An attacker can find the authors login using a similar request as mysite.com/?author=1.
</li>
<li>
Remove HTML comments – Removes HTML comments in source code to add a layer of defense from attackers trying to find the version of plugins.
</li>
<li>
Remove Meta Generator – This meta tag allows attackers to see the version of WordPress, it serves no useful purpose.
</li>
<li>
Disable Right Click – You can disable the ability to right click on your site, or just specific things like posts, pages, media, front page, and even have the ability to show an alert to the user that right click is disabled.
</li>
<li>
Disable Admin Notices – You can disable all admin notices that appear in the admin settings page.
</li>
<li>
Disable New User Emails – Stops WordPress from sending new user notification emails to admin.
</li>
<li>
Disable Search – Disable the front-end search bar in WordPress.
</li>
<li>
Disable Lazy Loading – Removes the lazy loading functionality that was added in WordPress 5.3.
</li>
<li>
Hide Admin Toolbar – Hides the admin toolbar when the admin is on the front-end
</li>
<li>
Disable Dashboard Widgets – Gives you the option to disable whichever default dashboard widgets you want.
</li>
</ul>
After reading this feature list, you can probably imagine why WPControl is the best disable plugin for WordPress.
Give WPControl a try today!
<h4>Credits</h4>
This plugin is created by Zain Balkhi of the <a href="https://wpbeginner.com/" title="WPBeginner" rel="friend nofollow ugc">WPBeginner team</a>.
<h4>What’s Next</h4>
If you like this plugin, then consider checking out our other projects:
<ul>
<li><a href="https://www.monsterinsights.com/" title="MonsterInsights" rel="friend nofollow ugc">MonsterInsights</a> – Best Google Analytics plugin for WordPress</li>
<li><a href="http://optinmonster.com/" title="OptinMonster" rel="friend nofollow ugc">OptinMonster</a> – Get More Email Subscribers</li>
<li><a href="https://wpforms.com/" title="WPForms" rel="friend nofollow ugc">WPForms</a> – Best WordPress Contact Form Plugin</li>
<li><a href="https://aioseo.com/" title="AIOSEO" rel="friend nofollow ugc">AIOSEO</a> – The original WordPress SEO plugin to help you rank higher in search results (trusted by over 2 million sites)</li>
<li><a href="https://www.seedprod.com/" title="SeedProd" rel="friend nofollow ugc">SeedProd</a> – Most popular coming soon & maintenance mode plugin for WordPress</li>
<li><a href="https://wpmailsmtp.com/" title="WP Mail SMTP" rel="friend nofollow ugc">WP Mail SMTP</a> – Improve email deliverability for your contact form with the most popular SMTP plugin for WordPress</li>
<li><a href="https://rafflepress.com/" title="RafflePress" rel="friend nofollow ugc">RafflePress</a> – Best WordPress giveaway and contest plugin to grow traffic and social followers</li>
<li><a href="https://smashballoon.com/" title="Smash Balloon" rel="friend nofollow ugc">Smash Balloon</a> – #1 social feeds plugin for WordPress – display social media content in WordPress without code</li>
<li><a href="https://pushengage.com/" title="PushEngage" rel="friend nofollow ugc">PushEngage</a> – Connect with visitors after they leave your website with the leading web push notification plugin</li>
<li><a href="https://trustpulse.com/" title="TrustPulse" rel="friend nofollow ugc">TrustPulse</a> – Add real-time social proof notifications to boost your store conversions by up to 15%</li>
</ul>
This plugin would not be possible without the help and support of <a href="http://www.wpbeginner.com/" title="WPBeginner" rel="friend nofollow ugc">WPBeginner</a>, the largest WordPress resource site. You can learn from our <a href="http://www.wpbeginner.com/category/wp-tutorials/" title="WordPress Tutorials" rel="friend nofollow ugc">free WordPress Tutorials</a> like <a href="http://www.wpbeginner.com/how-to-install-wordpress/" title="How to Install WordPress - Step by Step" rel="friend nofollow ugc">how to install WordPress</a>, <a href="http://www.wpbeginner.com/wordpress-hosting/" title="How to choose the best WordPress hosting" rel="friend nofollow ugc">choose the best WordPress hosting</a>, <a href="http://www.wpbeginner.com/glossary/" title="WordPress Glossary Terms for Beginners" rel="friend nofollow ugc">WordPress glossary</a>, and more.
You can also learn about other <a href="http://www.wpbeginner.com/category/plugins/" title="Best WordPress Plugins" rel="friend nofollow ugc">best WordPress plugins</a>.

WPControl – The Easiest Optimization Plugin for WordPress

The easiest way to improve your website's security, performance, and user experience.

MaxtDesign

MaxtDesign REST API Control gives you complete control over who can access your WordPress REST API and which endpoints are available.
By default, WordPress exposes a REST API to the public, which can reveal usernames, post data, and site structure to anyone. This plugin lets you lock down the REST API for unauthenticated visitors while keeping it fully functional for logged-in users and the plugins that need it.
<h4>Key Features</h4>
<ul>
<li>One-click disable — Block all REST API access for unauthenticated users with a single toggle.</li>
<li>Endpoint whitelisting — Auto-discovers all registered REST API endpoints and lets you whitelist specific ones, even when the API is disabled.</li>
<li>Per-role access control — Restrict REST API access for specific user roles with individual endpoint whitelists.</li>
<li>Smart defaults — Automatically detects Contact Form 7 and WooCommerce and whitelists their required endpoints on activation.</li>
<li>Zero frontend footprint — No CSS, JavaScript, or HTTP requests are added to your frontend. Ever.</li>
<li>Lightweight — No database queries on frontend requests. Uses a single autoloaded option.</li>
<li>Import/Export — Transfer settings between sites with JSON export and import.</li>
<li>Clean uninstall — Removes all plugin data when deleted. Leaves no trace.</li>
</ul>
<h4>How It Works</h4>
The plugin uses the <code>rest_authentication_errors</code> filter — the correct, modern WordPress approach — to intercept REST API requests early in the lifecycle, before any endpoint logic executes. This means blocked requests have virtually zero performance impact.
<h4>Built for Performance</h4>
This plugin follows the MaxtDesign performance-first philosophy:
<ul>
<li>Zero frontend asset loading (no CSS, no JS, no HTTP requests)</li>
<li>Admin assets load only on the plugin’s own settings page</li>
<li>Single autoloaded database option — no extra queries</li>
<li>Filter fires before endpoint logic — blocked requests are fast</li>
</ul>
<h3>Privacy</h3>
This plugin makes no external HTTP requests, sets no cookies, loads no third-party scripts, and collects no analytics. It does not track usage and never “calls home.” It stores a single settings option (<code>mdra_settings</code>) in your database and nothing else; that option is removed when you delete the plugin. No personal or visitor data is processed or transmitted.

MaxtDesign REST API Control

Full control over your WordPress REST API. Block, restrict, or whitelist endpoints per user role. Lightweight, fast, zero frontend footprint.

WPControl – The Easiest Optimization Plugin for WordPress vs MaxtDesign REST API Control