[youtube
https://www.youtube.com/watch?v=H5vXwe5nyiQ]
🚀 Boost your website’s performance, security, SEO and user experience with WP EXtra – the ultimate lightweight all-in-one toolkit for WordPress!
WP EXtra is built from the ground up with a modular architecture: features run with
zero frontend overhead via smart lazy-loading, and every option is centralized in a single autoloaded database setting.
🌟 14 CORE MODULES & POWER TOOLS
1. 📊 Dashboard
- Widgets Cleanup: Disable unnecessary WordPress core and third-party dashboard widgets with one click.
- System Info Cards: Real-time server diagnostics (PHP version, memory limits, MySQL, server software) rendered cleanly without external assets.
- Custom Admin Notice: Broadcast personalized announcements or instructions to specific user roles with custom alert styles.
2. ✍️ Posts & Writing
- Classic Editor Integration: Seamlessly switch between Gutenberg and the Classic Editor for posts and pages.
- Featured Image Column: View, set, or replace post featured thumbnails directly inside the admin post list.
- Extended TinyMCE Toolbar: Enhanced editor buttons including Table generator, Checklist, Visual Blocks, Letter-spacing, Text Case, Underline, and Clean HTML formatting.
- Category Description Editor: Rich WYSIWYG editor for category and taxonomy descriptions.
- Writing Aids: Post word counter, post ID columns in admin, and automatic revision cleanup.
3. 📑 Table of Contents
- Auto-Insertion: Automatically generate a structured Table of Contents for posts, pages, or custom post types.
- Headings Numbering: Customizable multi-level numbering hierarchy (1, 1.1, 1.1.1...) for H1-H6 tags.
- Sticky Floating Badge & Drawer: Off-canvas sliding TOC drawer triggered by a modern floating action button (FAB).
- SEO Schema: Native
SiteNavigationElement JSON-LD structured data for Google rich snippets.
4. 📋 Clone Content (Duplicate)
- 1-Click Duplication: Duplicate posts, pages, and custom post types with all meta fields, taxonomies, and featured images.
- Taxonomy Duplication: Clone categories, tags, and custom taxonomy terms in bulk with chunked processing to prevent memory issues.
5. 🖼️ Media & SVG
- Secure SVG Uploads: Full support for SVG media files with built-in sanitization against malicious XML and XSS scripts.
- Auto Image Conversion: Automatically convert uploaded images to modern WebP or optimized JPG with customizable quality.
- SEO Image Renaming: Automatically clean and sanitize image filenames on upload (removes accents, spaces, and special characters).
- Auto Remote Image Downloader: Automatically save external images to the WordPress media library upon publishing.
6. 💬 Comments & Anti-Spam
- Global Comment Control: Disable comments site-wide or selectively by post type.
- Close Attachment Comments: Automatically prevent spam on image and media attachment URLs.
- Spam Link Filter: Block automated spam comments containing excessive links without requiring third-party captcha.
7. 🔐 Branding & Login
- Custom Login URL: Protect
/wp-login.php by setting a custom login slug (e.g. /login or /member-login).
- Modern Login Presets: 5 curated visual themes (Classic Dark, Clean White, Gradient Blue, Glassmorphism, Warm Peach) with custom logo and background support.
- Cloudflare Turnstile Captcha: Seamless, privacy-friendly bot protection for login, registration, and lost password forms.
- Limit Login Attempts: IP-based temporary lockout to prevent brute-force attacks.
- Content Protection: Disable text selection, right-click context menu, and image dragging.
8. 🛡️ Permission & Roles
- Role-based Backend Lockdown: Restrict
/wp-admin access by user role and redirect unauthorized users to the homepage.
- Hide Admin Bar: Automatically hide the WordPress admin toolbar on frontend for non-admin user roles.
- Menu Restrictions: Restrict access to specific admin sidebar menu items by user role.
- Hide Plugins: Hide sensitive plugins from the
/wp-admin/plugins.php list table for non-super admins.
9. 🔒 Security & Core Hardening
- Disable XML-RPC & REST API: Block pingback spam, DDoS vectors, and lock down REST API endpoints for non-logged-in visitors.
- Hide WordPress Version: Remove generator meta tags and version query strings from HTML source.
- Block Author Enumeration: Stop bot scanners from discovering admin usernames via
?author=N and REST API user routes.
- HTTP Security Headers: Send modern security headers (
X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy).
- Disable File Editors: Lock theme and plugin code editors in the admin area (
DISALLOW_FILE_EDIT).
- Disable Core Auto-Updates: Maintain full control over WordPress core version upgrades.
- Block Outgoing HTTP Calls: Block external API calls to specific external domains to prevent timeouts.
10. ⚡ Speed & Optimize
- Asset Cleanups: Dequeue WordPress emojis, guest Dashicons, and default Gutenberg block CSS (~50KB).
- Remove Global Styles: Eliminate inline
global-styles-inline-css and SVG duotone filters from page footers.
- Strip Query Strings: Remove
?ver= parameters from static CSS/JS files to maximize browser and CDN caching.
- Preconnect CDNs: Add preconnect resource hints for Google Fonts CDN to accelerate asset loading.
11. 🔗 Permalinks & SEO
- Remove Category Slugs: Strip
/category/ or custom taxonomy base prefixes from URLs.
- Single Post Auto-Redirect: Automatically redirect category archives containing only 1 post directly to the article.
- Attachment Redirect: Redirect media attachment pages to the parent post or homepage to prevent thin-content SEO issues.
- External Link Optimization: Automatically append
rel="nofollow noopener noreferrer" and target="_blank" to outbound links with domain whitelisting (using fast native WP_HTML_Tag_Processor).
- Virtual Robots.txt Manager: Customize dynamic robots.txt rules directly within WordPress.
12. 💻 Custom Code & CSS
- Script Injection: Insert custom HTML, tracking tags, and JavaScript into
<head>, opening <body>, and page footer.
- Responsive CSS: Add custom CSS rules with dedicated code editors for Desktop, Tablet, and Mobile devices with automatic minification.
13. 🍪 Cookie Consent
- GDPR/CCPA Compliance: Lightweight, customizable cookie consent banner for compliance with international privacy laws.
- Modern Design Presets: Choose between Classic Light, Dark Modern, Soft Warm, or custom color palettes.
- 100% Cache Compatible: Fully client-side JavaScript execution ensuring compatibility with WP Rocket, LiteSpeed, and full-page CDN caching.
14. ✉️ SMTP Mailer
- Multi-Account SMTP Rotation: Configure multiple SMTP accounts with daily quotas; automatically rotates when daily limits are reached.
- 1-Click Provider Presets: Pre-configured settings for Gmail, Mailgun, Outlook / Office 365, Yahoo Mail, Amazon SES, Zoho Mail, SendGrid, and Sendinblue (Brevo).
- Live AJAX Test Email: Interactive test sender with real-time response latency measurement and intelligent diagnostic troubleshooting.
- Email Delivery Logs: Searchable database log tracking recipients, subjects, sending mailer, status, and error traces.
🛠️ Directory & Server Tools
- .htaccess Directory Protection: Block direct PHP script execution inside
wp-includes, wp-content/uploads, .env, .git, and sensitive configuration files.
- Encrypted JSON Backup & Restore: Export and import full plugin configuration safely with encrypted JSON files.
You can install the WP EXtra from your WordPress Dashboard or manually via FTP.
From WordPress Dashboard
- Navigate to 'Plugins -> Add New' from your WordPress dashboard.
- Search for
WP EXtra and install it.
- Activate the plugin from Plugins menu.
- Configure the plugin's settings
Manual Installation
- Download the plugin file:
wp-extra.zip
- Unzip the file
- Upload the
wp-extra.zip folder to your /wp-content/plugins directory (do not rename the folder)
- Activate the plugin from Plugins menu.
- Configure the plugin's settings