WellTend Site and Admin Toolkit

Description

WellTend Site and Admin Toolkit replaces a pile of single-purpose plugins with one screen of switches under WellTend > Toolkit. Every module starts off, explains itself in plain words, and can be undone.

What it covers

• Security: limit login attempts, disable XML-RPC, block user listing, security headers, password policy, hide the WordPress version.
• Login: change the login URL, redirects after login and logout, last-login and registration-date columns.
• Admin: clean up the dashboard and admin bar, hide admin notices, organise the admin menu, wider admin menu.
• Content: duplicate posts and menus, replace media, SVG and AVIF uploads, publish missed scheduled posts.
• Disable: comments, emojis, embeds, feeds, the block editor, the plugin and theme editor.
• Utilities: maintenance mode, password-protect the site, roll back plugins and themes, view the admin as another role.

Easy to use

• Press / and type to find a module by name, description or option label.
• Switches save at once and show an Undo button.
• Risky switches ask first and tell you how to get back in.

Safe by design

• Uses only WordPress filters and actions. It never edits wp-config.php or .htaccess.
• Turning a module off, or deactivating the plugin, removes its effect.
• Locked out? Run wp welltend toolkit disable <module-id>, or add define( 'WELLTEND_KIT_DISABLE_MODULES', true ); to wp-config.php.
• Only administrators can change settings. No tracking, and no outside requests except the Rollback module (see External services).

WP-CLI

wp welltend toolkit list|enable|disable|get|set|reset|undo

Learn more

• Plugin page and docs
• WordPress security settings that matter, in order
• Change the login URL safely
• Maintenance mode without hurting your search rankings
• Fixes for common WordPress errors and free WordPress tools

WellTend is made by AllWPCare, a family of free plugins and guides for looking after WordPress sites.

External services

The Plugins and Themes Rollback module (off until you switch it on) connects to WordPress.org, and only when you use its screen:

• To list the versions you can go back to, it asks the WordPress.org Plugins or Themes API (api.wordpress.org) about that one plugin or theme. It sends the plugin’s or theme’s slug. Like every request WordPress makes, it also sends your WordPress version and site address in the user agent.
• When you choose a version, it downloads that version’s zip file from downloads.wordpress.org. Nothing else is installed, and no other address is ever used.

No other module makes outside requests.

This service is provided by the WordPress Foundation through WordPress.org. Terms and guidelines: https://wordpress.org/about/license/ Privacy policy: https://wordpress.org/about/privacy/