One plugin for the jobs every WordPress site needs, instead of five or six:
- E-mails that do not arrive — send through SMTP or an API, keep a log of every message, and read the server's own reason when one fails.
- A cookie banner that really blocks — third-party scripts and embeds wait for consent, with Google Consent Mode v2.
- 404s after a redesign — a log of the broken addresses visitors hit, with their count, redirected in one click.
- Security — a light firewall, HTTP headers, a limit on failed logins, and your plugins checked against known vulnerabilities.
Each job is a module you switch on from the hub, and a module that is off registers nothing: none of its hooks run on the site. The modules:
- Dashboard — a readable admin home and a tidied toolbar.
- Shortcuts — duplicate content, reorder it by hand, add entries in one click.
- Roles & capabilities — capabilities sorted under the post type that creates them, and the site seen through a role's eyes without leaving your own account.
- Activity log — who changed what, with the before and the after.
- Cookies — a consent banner, third-party scripts held back until consent, and a scan that finds them.
- SEO — titles and descriptions with a suggestion drawn from the page's text, sitemap, schema, llms.txt.
- Mail — SMTP, an API provider, or a Gmail or Microsoft 365 account connected with OAuth, a delivery log, a test message, an invisible captcha for the site's forms.
- Redirects — exact redirects and a 404 log with the hit count.
- Media — regenerate thumbnails in the background, in batches.
- Security — a light firewall that refuses requests carrying an attack before WordPress runs, security headers, a content policy, a limit on failed logins, and a check of the installed plugins against known vulnerabilities.
- Maintenance — a holding page, database clean-up, a database export, and the previous version of each extension kept before its update.
- Custom fields — field groups with repeaters, flexible content and relations, kept in their own tables, and content types and taxonomies of your own.
- Element — sixteen Elementor widgets for custom fields, NCF’s or ACF’s: repeaters as cards, tabs or tables, galleries and sliders, key figures, teams, timelines, taxonomies, maps.
- Translate — your site in several languages: each page linked to its translations, a translation editor beside the original (blocks, Elementor, ACF and NCF fields), addresses in /en/, a menu per language, a language switcher, hreflang, and every text of the site translated from the admin. A site coming from WPML or Polylang moves over in one click.
Free and Pro
Everything above is free, on as many sites as you like. nexya Pro, sold on nexya.dev, adds three modules — nexya forms, Mailya for newsletters and a page cache — and the parts that do the repetitive work for you: suggested redirects and pattern rules, CSV import, a daily vulnerability pass and a file fingerprint with rollback, a two-step login, updates undone by themselves when they break the site, undo from the activity log, a second sending server and failure alerts for mail, a branded login screen and admin skin, banner appearance and consent service by service, scheduled database clean-up, orphan image sizes, folders in the media library, and longer log retention. The free version contains none of that code; nexya Pro is delivered by Freemius after purchase, and takes over from this plugin with the same settings.
Privacy
The plugin sends nothing to a third party by default. The features that reach the network, and what they send, are listed under External services below.
Multisite
Multisite networks are not supported. On a network the plugin stays switched off and says so.