Title: WLock – Lock Your Site Against Unapproved Installs Author: Bytes Vibe Published: November 7, 2026 Last modified: November 7, 2026 --- Search plugins ![](https://ps.w.org/wlock/assets/banner-772x250.png?rev=3789878) ![](https://ps.w.org/wlock/assets/icon-256x256.png?rev=3789878) # WLock – Lock Your Site Against Unapproved Installs By [Bytes Vibe](https://profiles.wordpress.org/bytesvibe/) [Download](https://downloads.wordpress.org/plugin/wlock.1.0.0.zip) * [Details](https://wordpress.org/plugins/wlock/#description) * [Reviews](https://wordpress.org/plugins/wlock/#reviews) * [Installation](https://wordpress.org/plugins/wlock/#installation) * [Development](https://wordpress.org/plugins/wlock/#developers) [Support](https://wordpress.org/support/plugin/wlock/) ## Description WLock lets a site administrator define an approved whitelist of plugin and theme slugs. Once enabled, any attempt to install something that isn’t on the list — whether searched for in the WordPress.org repository or uploaded as a .zip — is blocked with a clear on-screen explanation. This is useful for: * Agencies who manage client sites and want to prevent clients (or other admin- level users) from installing unapproved plugins/themes that cause support issues. * Site owners who want a second line of defense against accidental installs of low-quality or conflicting plugins. * Teams with multiple administrators who want to standardize which tools are allowed on a site. **What it does not do** * It does not affect activating, deactivating, deleting, or updating anything already installed — only fresh installs are restricted. * It does not restrict installs made outside of wp-admin (WP-CLI, SFTP, etc.) — those bypass the WordPress installer entirely and are outside what any plugin can intercept. * It is fully self-managed: whoever has the `manage_options` capability on the site can enable/disable it and edit the whitelist at any time from Settings WLock, and can deactivate the plugin like any other. ## Screenshots [⌊Settings screen showing the approved plugin/theme lists and the enforcement toggle.⌉⌊ Settings screen showing the approved plugin/theme lists and the enforcement toggle .⌉[ Settings screen showing the approved plugin/theme lists and the enforcement toggle. [⌊The message shown when a non-approved install is blocked.⌉⌊The message shown when a non-approved install is blocked.⌉[ The message shown when a non-approved install is blocked. ## Installation 1. Upload the plugin files to `/wp-content/plugins/wlock`, or install directly through the WordPress plugins screen. 2. Activate the plugin through the ‘Plugins’ screen in WordPress. 3. Go to Settings WLock. 4. Add the plugin/theme slugs you want to approve (one per line), then check “Block installation of anything not on the approved lists below” and save. ## FAQ ### How do I find a plugin’s slug? It’s the folder name the plugin installs into under `wp-content/plugins/`, which is also the last part of its WordPress.org URL. For example, Akismet installs to` wp-content/plugins/akismet`, and its directory page is `https://wordpress.org/plugins/ akismet/` — so its slug is `akismet`. ### Does this stop existing plugins/themes from being updated? No. Updates to anything already installed are never blocked, only fresh installs. ### Can a site admin bypass this? Yes, deliberately. Anyone with the `manage_options` capability can edit the whitelist or deactivate the plugin. WLock is a self-managed safeguard, not a hard lock against the site’s own administrators. ### Does this work with uploaded .zip installs, not just the WordPress.org search? Yes. The check runs after a package is unpacked, regardless of whether it came from the repository or a direct upload. ### Is this safe to use? All settings are saved through WordPress’s own Settings API, which handles the nonce and capability checks for you, and every value is sanitized on save and escaped on output. Only users with the `manage_options` capability can view or change the whitelist. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “WLock – Lock Your Site Against Unapproved Installs” is open source software. The following people have contributed to this plugin. Contributors * [ Bytes Vibe ](https://profiles.wordpress.org/bytesvibe/) [Translate “WLock – Lock Your Site Against Unapproved Installs” into your language.](https://translate.wordpress.org/projects/wp-plugins/wlock) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/wlock/), check out the [SVN repository](https://plugins.svn.wordpress.org/wlock/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/wlock/) by [RSS](https://plugins.trac.wordpress.org/log/wlock/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.0 * Initial release. ## Meta * Version **1.0.0** * Last updated **13 hours ago** * Active installations **Fewer than 10** * WordPress version ** 6.3 or higher ** * Tested up to **7.1.4** * PHP version ** 7.4 or higher ** * Tags * [agency](https://wordpress.org/plugins/tags/agency/)[install](https://wordpress.org/plugins/tags/install/) [lockdown](https://wordpress.org/plugins/tags/lockdown/)[security](https://wordpress.org/plugins/tags/security/) [whitelist](https://wordpress.org/plugins/tags/whitelist/) * [Advanced View](https://wordpress.org/plugins/wlock/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/wlock/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/wlock/reviews/) ## Contributors * [ Bytes Vibe ](https://profiles.wordpress.org/bytesvibe/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/wlock/)