=== WPMasterToolKit (WPMTK) - All in one plugin ===
Contributors: ludwigyou
Tags: all in one plugin, admin, security, disable features, easy to use
Requires at least: 6.0.0
Tested up to: 6.9.0
Requires PHP: 7.4
Stable tag: 2.13.1
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/old-licenses/gpl-2.0.txt

Duplicate post, post order, email via SMTP, code snippets, disable gutenberg, child theme generator, svg support, disable XMLRPC, and more...

== Description ==
WP Master ToolKit is your all-in-one solution for optimizing WordPress. It streamlines your dashboard, enhances workflows, and simplifies content and settings management. Customize your WordPress installation effortlessly with all the tools you need at your fingertips.

**Test by Alexis Fichou (WP-Origami) :**
[youtube https://www.youtube.com/watch?v=Lw0EeaBy4W4]

**Test by Enzo (Easy WordPress) :**
[youtube https://www.youtube.com/watch?v=I1GdHeeJp6E&t]

= 89 FREE modules =

* Adminer: A full-featured database management tool.
* Allow Menu Custom Links to Open in New Tab.
* Apple Touch Icon: Manage app icon (Apple Touch Icon) individually.
* Auto Regenerate Salt Keys.
* Auto-Publish Posts with Missed Schedule: Automatically initiate the publication of scheduled posts marked with &quot;missed schedule&quot; upon each visit to the website, across all post types.
* Ban Emails: Ban the chosen emails.
* Blacklisted Usernames: Prevent the creation of new user accounts with predifined blacklisted usernames. Blacklist usernames that are too common.
* Block User Registration from Disposable Email: Block user registration from disposable email addresses. Disposable email addresses are temporary email addresses that are used to register on websites that require email verification.
* Browser Theme Color: Select a tag color to allow seamless theme customization in all major browsers.
* Child theme generator: A simple tool to generate a child theme on your WordPress. You can disable it after generation.
* Clean Profiles: Tidy up user profiles by removing sections you do not utilise.
* Clean Up Admin Bar.
* Code Snippets: Add custom code snippets without editing the theme's **functions.php**.
* Content Duplication: Enable one-click duplication of pages, posts and custom posts. The corresponding taxonomy terms and post meta will also be duplicated.
* Content Order: Enable custom ordering of various &quot;hierarchical&quot; content types or those supporting &quot;page attributes&quot;. A new &#039;Order&#039; sub-menu will appear for enabled content type(s).
* Custom Admin CSS: Add custom CSS on all admin pages for all user roles.
* Custom Body Class: Add custom &lt;body&gt; class(es) on the singular view of some or all public post types.
* Custom Frontend CSS: Add custom CSS on all frontend pages for all user roles.
* Disable All Updates: Completely disable core, theme and plugin updates and auto-updates. Will also disable update checks, notices and emails.
* Disable Block-Based Widgets Settings Screen: Disable block-based widgets settings screen. Restores the classic widgets settings screen when using a classic (non-block) theme. This has no effect on block themes.
* Disable Dashboard Widgets: Clean up and speed up the dashboard by completely disabling some or all widgets. Disabled widgets won&#039;t load any assets nor show up under Screen Options.
* Disable Feeds: Completely disable RSS, Atom, and RDF feeds for posts, categories, tags, comments, authors, and search. Removes all feed URL references from the `<head>` section.
* Disable Gutenberg: Deactivate the Gutenberg block editor selectively, allowing you to control its usage for specific or all relevant post types.
* Disable REST API: Disable REST API access for non-authenticated users and remove URL traces from &lt;head&gt;, HTTP headers and WP RSD endpoint.
* Disable Really Simple Discovery (RSD) &lt;link&gt; tag: Disable the Really Simple Discovery (RSD) <link> tag in <head>. The RSD tag is used by XML-RPC clients to discover the location of the XML-RPC endpoint on your site.
* Disable WP Sitemap: Disable the default WordPress sitemap.
* Disable Windows Live Writer (WLW) manifest &lt;link&gt; tag: Disable the Windows Live Writer (WLW) manifest &lt;link&gt; tag in &lt;head&gt;. The WLW app was discontinued in 2017.
* Disable WordPress shortlink &lt;link&gt; tag: Disable the WordPress shortlink `<link>` tag in `<head>`. Replace with a shortlink plugin for custom names and click tracking.
* Disable XML-RPC.
* Disable cart fragments scripts: Disable cart fragments scripts on the front-end for public site visitors. This might break the functionality of the cart and checkout pages if they depend on cart fragments.
* Disable dashicons CSS and JS files.
* Disable emoji support: Disable emoji support on the admin and frontend for pages, posts, and custom post types. Modern browsers now natively support emojis, making this feature unnecessary.
* Disable jQuery Migrate: Removes the jQuery Migrate script from the frontend of your site.
* Disable wp_mail: Disable the wp_mail function, which is used by WordPress to send emails. This feature is useful for websites that do not send emails, as it prevents the wp_mail function from loading and consuming resources.
* Disallow Bad Requests: Protect your site against a wide range of threats. check all incoming traffic and quietly blocks bad requests containing nasty stuff like eval(, base64_, and excessively long request-strings.
* Disallow Dir Listing: Disable the listing of the directories.
* Disallow Malicious File Access in upload: Protect your website from malicious file access in the upload directory.
* Disallow Plugin Upload: Disable zip file uploads for plugins, which are used to install plugins on your website.
* Disallow Theme Upload: Disable zip file uploads for themes, which are used to install themes on your website.
* Disallow WP File Edit: Prevent the modification of your website&#039;s core files through the WordPress admin panel.
* Disallow register user: Prevent the creation of new user accounts on your website with the native WordPress registration form.
* Duplicate Menu: Easily duplicate your WordPress Menus
* Enhance List Tables: Improve the usefulness of listing pages for various post types and taxonomies, media, comments and users by adding / removing columns and elements.
* Export Posts &amp; Pages: Download your posts and pages to a .csv format.
* Export Users: Download your user data to a .csv format.
* External Permalinks: Enable pages, posts and/or custom post types to have permalinks that point to external URLs. The rel=&quot;noopener noreferrer nofollow&quot; attribute will also be added for enhanced security and SEO benefits.
* File Manager: Browser and manage your files efficiently and easily.
* Force SSL: Force HTTPS on your site to ensure all traffic is encrypted and secure.
* Force Strong Password: Enforce the use of strong passwords for all users on your website. This feature is especially useful for websites with multiple users, as it ensures that all users have a strong password that is difficult to guess or crack.
* Heartbeat Control: Modify the interval of the WordPress heartbeat API or disable it on admin pages, post creation/edit screens and/or the frontend. This will help reduce CPU load on the server.
* Hide Admin Bar: Hide the admin bar on the front end of your website for either specific user roles or all users.
* Hide Admin Notices: Improve user experience on admin pages by gathering all notifications in a popup (opened by clicking on the bell at the top right).
* Hide Login Errors: Hide the default WordPress login errors that appear when an incorrect username or password is entered.
* Hide PHP Versions: Some servers send a header called X-Powered-By that contains the PHP version used on your site. It may be a useful information for attackers, and should be removed.
* Hide WordPress Version
* Image Upload Control: Resize newly uploaded, large images to a smaller dimension and delete originally uploaded files. BMPs and non-transparent PNGs will be converted to JPGs and resized.
* Insert &lt;head&gt;, &lt;body&gt; and &lt;footer&gt; Code: Easily insert &lt;meta&gt;, &lt;link&gt;, &lt;script&gt; and &lt;style&gt; tags, Google Analytics, Tag Manager, AdSense, Ads Conversion and Optimize code, Facebook, TikTok and Twitter pixels, etc.
* Last Login Column: Track and record the most recent login activity of site users, then showcase the date and time in the users list table
* Limit Login Attempts: Prevent brute force attacks by limiting the number of failed login attempts allowed per IP address.
* Local avatars: Replaces GRAVATAR management with media management.
* Lock Admin Email: Prevent the modification of the admin email address on your website.
* Lock Site URL: Prevent the modification of the site URL on your website.
* Log In/Out Menu: Enable log in, log out and dynamic log in/out menu item for addition to any menu.
* Maintenance Mode: Show a customizable maintenance page on the frontend while performing a brief maintenance to your site. Logged-in administrators can still view the site as usual.
* Manage ads.txt and app-ads.txt: Easily edit and validate your ads.txt and app-ads.txt content.
* Manage robots.txt: Easily edit and validate your robots.txt content.
* Media Cleaner: Automatically sanitize uploaded file names by removing special characters, and streamline media management by auto-generating key metadata fields (title, caption, alt text, and description) directly from the cleaned file name.
* Media Encoder: Automatically converts images to WebP (or AVIF in PRO) when they are uploaded to the media library.
* Meta Debugger: Display all metadata for a post, user, term, or comment.
* Move Login URL: Change the default login URL to a custom URL of your choice.
* Multiple User Roles: Enable assignment of multiple roles during user account creation and editing. This maybe useful for working with roles not defined in WordPress core, e.g. from e-commerce or LMS plugins.
* Nav Menu Visibility: Control your nav menu by allowing you to apply visibility controls to menu.
* Obfuscate Author Slugs: Obfuscate author page URLs to hide user slugs (e.g., `sitename.com/author/username1/` becomes `sitename.com/author/a6r5b8ytu9gp34bv/`) and return 404 errors for original URLs. Also obfuscates user data in the `/wp-json/wp/v2/users/` REST API endpoint.
* Obfuscate Email Addresses: Obfuscate email address to prevent spam bots from harvesting them, but make it readable like a regular email address for human visitors, using shortcode [wpm_obfuscate email=&quot;example@email.com&quot; display=&quot;newline&quot;]
* Open All External Links in New Tab: Ensure all external links in post content open in a new tab with `target="_blank"` and include `rel="noopener noreferrer nofollow"` for security and SEO benefits.
* Password Protection: Password-protect the entire site to hide the content from public view and search engine bots / crawlers. Logged-in administrators can still access the site as usual.
* Plugin &amp; Theme Rollback: Revert to previous versions of any theme or plugin from WordPress.org.
* Post Per Page: Specifying the number of posts to display per page, for each post type.
* Prevent User Enumeration: Prevent user enumeration via ?author=X and REST API /users/ endpoints.
* Protect Website Headers: Add security headers quickly to your site to protect it from threats such as phishing attacks, data theft and more.
* Quick Add Post: A new button to quickly add new posts to speed up your workflow.
* Redirect 404 to Homepage: Sends visitors to your homepage if they try to access a page that doesn&#039;t exist, ensuring they stay on your site.
* Redirect After Login
* Redirect After Logout
* Revisions Control: cap the number of revisions to save for certain or all types of posts that support revisions.
* Register Custom Content Types: Register CPTs & Taxnomies.
* SMTP Mailer: Set custom sender name and email. Optionally use external SMTP service to ensure notification and transactional emails from your site are being delivered to inboxes.
* SVG Upload: Enable SVG upload support in the media library.
* Wider Admin Menu

= 30 Pro features =
* 410 Manager
* Add Essentials Shortcodes
* Admin Menu Organizer
* Auto clean actionscheduler_actions: Clean actionscheduler_actions database table from actions that have been completed | failed | cancelled.
* Better Password Hash
* CRON Manager: Manage cron events on your website.
* Change Database Prefix: Quickly change your WordPress database prefix to save time and enhance security.
* Custom Login Design: Personalize your login page to match your brand.
* Disable Comments: Manage the visibility of comments on your public posts by selectively disabling them for specific post types or across all posts.
* Disable Plugin For Debug: Temporarily disable specific plugins to troubleshoot and debug issues on your WordPress site without uninstalling.
* Disable Woocommerce Logout Confirmation
* Disallow Access WP Sensible Files: Delete the wp-config-sample.php, block access to readme.html, license.txt
* Disallow Countries IP
* Download medias as zip
* Force Send All Email To: Force all emails sent from your website to be sent to a specific email address.
* Generate Alt Text With AI: Automatically generate alternative text using AI.
* Head Sorter: Automatically sorts and optimizes the &lt;head&gt; of your website, making sure important tags load first for better speed and SEO.
* Hook And Filter Debugger: Displaying the sequence of action and filter hooks by their origin on a single page.
* Link Shortener: Shorten your links with a custom prefix. You can also track the number of clicks on each link.
* Manage Admin Emails Notifications: Check the types of emails you no longer want to receive as an administrator.
* Media Replacement
* My Account Menu Customizer: for WooCommerce My Account page.
* No Plugin Activation / Deactivation / Deletion: Prevents plugin activation, deactivation, and deletion for enhanced security.
* Paste Image In Media: With this feature you can paste directly your picture in WordPress media.
* Plugin Download: Download plugins from the plugins page in the WordPress admin panel.
* Post Type Switcher
* Two Factor Authentication
* Updates Logs: Track and record the most recent login activity of site users, then showcase the date and time in the users list table
* User Switching
* Vulnerabilities Scan

= PRO Additionnals Features =
* Move Login URL: Stop access to /wp-admin with server side 403 error. To prevent ressource loading.
* Maintenance Mode: A real countdown that puts your site live once finished. Also, a bypass link for the maintenance mode.
* Media Encoder: Convert images to AVIF (php ≥ 8.1).

⭐️ UPGRADE TO PRO VERSION: [WPMasterToolKit Pro](https://wpmastertoolkit.com) ⭐️

== Other plugin by Webdeclic ==
[Webdeclic](https://webdeclic.com) is a French web agency based in Paris. We are specialized in the creation of websites and e-commerce sites. We are also the creator of the following plugins:
* [QuickWebP](https://wordpress.org/plugins/quickwebp/)
* [Cookie Dough](https://wordpress.org/plugins/cookie-dough-compliance-and-consent-for-gdpr/)
* [Univeral Honey Pot](https://wordpress.org/plugins/universal-honey-pot/)
* [Clean My WP](https://wordpress.org/plugins/clean-my-wp/)
* [Mentions Legales Par Webdeclic](https://wordpress.org/plugins/mentions-legales-par-webdeclic/)
* [Lexilink](https://wordpress.org/plugins/lexilink/)
* [Show all plugins on WordPress.org](https://wordpress.org/plugins/search/webdeclic/)

== Installation ==

1. Upload the plugin files to the `/wp-content/plugins/wp-mastertoolkit` directory, or install the plugin through the WordPress plugins screen directly.
2. Activate the plugin through the 'Plugins' screen in WordPress
3. Use the WPMasterToolKit screen to configure the plugin

== Frequently asked questions ==

= What is WPMasterToolKit? =
WPMasterToolKit is a comprehensive plugin that provides a wide range of features designed to improve your WordPress. It includes tools to improve media management, user interface, site security and much more.

= Will WPMasterToolKit slow down my website? =
No, WPMasterToolKit is designed to be lightweight and efficient. This should not negatively impact your website performance.

=Can WPMasterToolKit help with SEO? =
Although WPMasterToolKit is not primarily an SEO plugin, it does include features that can help your site's SEO, such as the ability to open external links in a new tab with the appropriate "rel" attributes.

= How often is WPMasterToolKit updated? =
We regularly update WPMasterToolKit to introduce new features, fix bugs and ensure compatibility with the latest versions of WordPress.

= How can I contribute to WPMasterToolKit? =
Contributions are welcome! You can contribute by reporting bugs, suggesting features, translating the plugin, or submitting code fixes.

= Is WPMasterToolKit similar to ASE ? =
Yes, WPMasterToolKit is similar to Admin and Site Enhancements (ASE), WP Extended and other all in one plugin.

= Can I replace my security plugin with WPMTK? =
Yes, WPMTK includes many security features that can replace your existing security plugin. WPMTK includes up to 90% of the features known from security plugins like Wordfence, Sucuri, iThemes Security, SecuPress, etc.

= Can I replace plugins like Imagify or ShortPixel? =
Yes, WPMTK includes a media encoder that can convert images to WebP and AVIF if you have the PRO version. This very similar to the features of Imagify and ShortPixel, the big difference is that WPMTK convert your images locally and not on the cloud. So you don't need to worry about your images being uploaded to a third party server.

= How can I report security bugs? =
You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. [Report a security vulnerability.](https://patchstack.com/database/wordpress/plugin/wpmastertoolkit/vdp)

== Screenshots ==
1. Admin page
2. Import / Export settings
3. Move login submenu
4. Code snippets

== Changelog ==

= 2.13.1 =
* Security: Module: Code Snippets: Restrict access to Administrator-only capability to prevent code injection vulnerability (CVE-2025-14166).

= 2.13.0 =
* Update Pro feature in Module: Maintenance Mode: Add input for exclude some pages from maintenance mode
* Fix Module: Maintenance Mode: show copy bypass link only if the maintenance enable and change the text button for FR
* Update Pro Module: Admin Menu Organizer: Add reset button, separator, highlight seperator, restore original icon
* Fix Pro Module: Vulnerabilities Scan module use slug instead of text domain for better compatibility
* Fix Module: Lock Site URL: prevent update option, use filter to get option value from wp-config for better compatibility with WPML and others mulingual plugins
* Fix Pro Module: Disallow Countries IP: geoip2 library errors
* Fix: prevent clear license key if the server not responding

= 2.12.0 =
* Add Pro Module: Admin Menu Organizer
* Add Pro Module: Disable Plugin For Debug
* Add Pro Module: Download medias as zip
* Add Pro Module: My Account Menu Customizer
* Fix: Code_Snippets module save the snippet post_content instead of a custom post meta
* Fix: Initialize user variable in change_avatar_data method
* Fix: Move_Login_URL module allow JS CSS IMG files exist in wp-admin in redirection 403
* Update Module: Maintenance Mode: Copy bypass link in admin bar

= 2.11.0 =
* Add Pro Module: Media Replacement

= 2.10.0 =
* Add Pro Module: Head Sorter
* Add constant for debug the plugin when a module turn down the website
* Fix: Add max length on post type key input to prevent error on post type key with more than 20 characters.
* Fix: register custom content types module bugs
* Add copy button in export page for Register Custom Content Types module
* Fix: Maintenance Mode module with cache plugins
* Update Module: Optimize External Permalinks module split target, noopener, noreferrer, nofollow

= 2.9.0 =
* Update Module: User Switching: Add a new option to switch user from user edit page. Add a new filter for get the switch to user link from another plugin.
* Update Module: Maintenance Mode: Add a new option to preview the maintenance mode page.
* Update Module: CRON Manager: Add search input to filter the cron events.
* Update Module: Register Custom Content Types: Add a popup to manage migration or deletion of post type or taxonomy key. Add export code feature.
* Update Module: Regenerate Salt Keys: Prevent logout after save with first regeneration after 30min.
* Update Module: Generate Alt Text With AI: Show notice if no api key exist, track the post id in bulk action
* Fix incompatibility with other plugins using geoip dependency.
* Add Pro Module: Disable Woocommerce Logout Confirmation
* Modules list is now sorted by name.

= 2.8.0 =
* Add PRO Module: Better Password Hash.
* Add Pro Module: Generate Alt Text With AI
* Add Credentials manager on settings page.
* Update Module: Force Strong Password: Remove zxcvbn password strength check and replace with custom function for better performance and lightweight.
* Fix Module: Media Encoder: Black background issue when converting to WebP/AVIF for PNG images with transparency.
* Update Module: Custom Link Menu New Tab: add options for attributes

= 2.7.0 =
* Modern Post List on Code Snippets, Link Shortener and Register Custom Content Types modules.
* Fix: File Manager: Problem with sprintf syntax.
* Fix: File Manager: Security improvement on all actions in handle_actions() function.
* Update: Register Custom Content Types: Add taxonomy creation support.

= 2.6.0 =
* Fix: Move Login URL: Problem on front with ajax if you activate 403 on /wp-admin.
* Add Module: Register Custom Content Types
* Fix Reported Vulnerability: CVE-2025-3300: '≤ 2.5.2 - Authenticated (Administrator+) to Arbitrary File Read and Write' on File Manager module.
* Better CSS on administration pages.
* Update Module: Media encoder: Add AVIF support (PRO ONLY) (php ≥ 8.1).
* Update Module: Media encoder: Better interface and change library for image conversion.

= 2.5.2 =
* Fix: Media Encoder: Problem with exif rotation when uploading images.
* Fix: Image Upload Control: add compression on WebP resize to prevent a problem or the images becoming heavier.
* Update: Image Upload Control: 'big_image_size_threshold' turned off, to prevent conflict with the 'Image Upload Control' module.

= 2.5.1 =
* Fix: include assets on multiple modules, forgotten following major code refactoring.

= 2.5.0 =
* Add Module: Browser Theme Color
* Add Pro Module: Post Type Switcher
* Fix: quick add post module on fullscreen mode

= 2.4.1 =
* Fix: Adminer: Problem with session_start() on REST-API. Related support ticket: https://wordpress.org/support/topic/problemes-critiques/#post-18381082
* Fix: Multiple User Roles: Prevents the administrator from removing his own administrator role. Related support ticket: https://wordpress.org/support/topic/multiple-user-roles-generates-a-403-forbidden-error-2/#post-18381136

= 2.4.0 =
* Add Module: Force SSL
* Fix: Enhance List Tables : The CSS was not loading after changing the folder of the CSS file. The path had not been updated.
* Fix: All PRO modules were still written "coming soon" even those available in the PRO version.

= 2.3.0 =
* Add Pro Modules informations
* Better UX for Upgrade Pro page
* Open Code for Addon Developers
* Update Module: Disallow Access WP Sensible Files: Now unwanted files are deleted again after core update.
* Update Module: Maintenance Mode: Add a Bypass link for the maintenance mode (PRO Only).
* Update Module: SMTP mailer: Add current user email in test input value.
* Light pot file (better exclusion)
* Fix: Text Domain Mismatch
* Fix: Missing Translators Comment
* Fix: Non Singular String Literal Text
* Fix: rand() function replaced by wp_rand()
* Fix: date() function replaced by wp_date()
* Complet review with Plugin Check
* Better code organization

= 2.2.0 =
* Add Pro Modules informations
* Change HTML / CSS on some modules settings

= 2.1.0 =
* Add Pro Modules informations

= 2.0.0 =
* Added license system to switch to PRO version.
* Added links to the documentation of each module under their description.
* Add documentation in code on hooks and filters.
* Fix: Module "Move Login URL": Problem with TranslatePress if the option "Use a subdirectory for the default language" is enabled on the TranslatePress settings.
* Fix: Module Local avatars: New CSS compatible with WP 6.7+.
* Fix: Module Apple Touch Icon: New CSS + JS compatible with WP 6.7+.
* Fix: Module Clean Up Admin Bar: Remove Howdy doesn't work.
* Update: Module: Hide Admin Notices: Complete redesign of the interface, removal of the dedicated submenu and addition of a modal to store notifications in the admin bar.
* Update: Module maintenance mode: Add a countdown (PRO Only).

= 1.15.0 =
* Add Module: Prevent User Enumeration: Prevent user enumeration via ?author=X and REST API /users/ endpoints.

= 1.14.0 =
* Add Module: Media Cleaner: Automatically sanitize uploaded file names by removing special characters, and streamline media management by auto-generating key metadata fields (title, caption, alt text, and description) directly from the cleaned file name.
* Security update (reported by Patchstack, thanks @darius_fx):  Arbitrary File Upload vulnerability and Arbitrary File Download vulnerability in Child Theme Generator module.

= 1.13.1 =
* FIX: WP 6.7 compatibility with translations, move translatable strings in hook after init.

= 1.13.0 =
* FIX: WP 6.7 compatibility with translations
* Add Module: Media Encoder: Automatically converts images to WebP when they are uploaded to the media library.

= 1.12.5 =
* FIX: Auto Regenerate Salt Keys: Problem on some installations

= 1.12.4 =
* FIX: Problem with 'Header set Content-Security-Policy "upgrade-insecure-requests;"'

= 1.12.3 =
* FIX: Problem with stats modal consent if you click on the bottom button for save.

= 1.12.2 =
* FIX: Problem with constant replacement in wp-config.php, better method.

= 1.12.1 =
* FIX: Problem with constant replacement in wp-config.php.

= 1.12.0 =
* Update Module: Limit Login Attempts: Add option to delete blocked IP.
* Update Module: Maintenance Mode: Add admin bar switcher and switch in the settings page.
* Update Module: Protect Website Headers: Add more information about the headers.
* UX improvement: Add a new filter in settings page for show only active modules
* Add config sharing feature
* Add modal for consent to collect data
* Fix: Local avatars: php warning

= 1.11.0 =
* Add Module: Adminer
* Add Module: Apple Touch Icon
* Add Module: Local avatars

= 1.10.2 =
* Fixed: Problem with modules using textarea fields. Now, the textarea fields are correctly escaped with wp_unslash.

= 1.10.1 =
* Fixed: module child theme generator: Better method for zip creation

= 1.10.0 =
* Add Module: Disable jQuery Migrate
* Add Module: Multiple User Roles
* Add Module: Plugin &amp; Theme Rollback
* Fixed: Bug on child theme generator on some servers.
* Update Module: File Manager: Edit files from default view and better UX.

= 1.9.0 =
* Add Module: Child theme generator
* Add Module: File Manager
* Add Module: Protect Website Headers
* Fixed: Prevent the form submit when the user press Enter in the search input (on settings).
* Update: Better results on search input (on settings) if you don't use special characters.

= 1.8.1 =
* Fixed: Problem if Parsedown library doesn't exist on the server.

= 1.8.0 =
* Update Module: SMTP mailer: Replace password input type.
* Change logo on admin page.
* Add version on header of admin page.
* What's new modal in settings page.

= 1.7.0 =
* Add Module: Ban emails
* Add Module: SMTP mailer
* Update Module: Auto Regenerate Salt Keys: Better approach to regenerate salt keys.

= 1.6.0 =
* Add Module: Block User Registration from Disposable Email

= 1.5.1 =
* Fix: Meta Debugger module: Add support on edit_user_profile

= 1.5.0 =
* Add Module: Custom Frontend CSS
* Add Module: Disable All Updates
* Add Module: Disable REST API
* Add Module: Heartbeat Control
* Add Module: Image Upload Control
* Add Module: Insert <head>, <body> and <footer> Code
* Add Module: Limit Login Attempts
* Add Module: Manage ads.txt and app-ads.txt
* Add Module: Manage robots.txt
* Add Module: Obfuscate Author Slugs
* Add Module: Obfuscate Email Addresses
* Fix: Increase the prioarity for the filter in hide admin bar module
* Fix: Problem with "Disallow bad requests" module

= 1.4.0 =
* Add Module: Clean Up Admin Bar
* Add Module: Content Duplication
* Add Module: Content Order
* Add Module: Custom Admin CSS
* Add Module: Enhance List Tables
* Add Module: External Permalinks
* Add Module: Log In/Out Menu
* Add Module: Meta Debugger
* Add Module: Post Per Page
* Fix: Problem with import / export settings feature

= 1.3.0 =
* Add Module: Auto Regenerate Salt Keys: WordPress salt keys or security keys are codes that help protect important information on your website.
* Add Module: Auto-Publish Posts with Missed Schedule: Automatically initiate the publication of scheduled posts marked with "missed schedule" upon each visit to the website, across all post types.
* Add Module: Clean Profiles: Tidy up user profiles by removing sections you do not utilise.
* Add Module: Custom Body Class: Add custom <body> class(es) on the singular view of some or all public post types.
* Add Module: Disable Block-Based Widgets Settings Screen: Disable block-based widgets settings screen. Restores the classic widgets settings screen when using a classic (non-block) theme. This has no effect on block themes.
* Add Module: Disable Dashboard Widgets: Clean up and speed up the dashboard by completely disabling some or all widgets. Disabled widgets won't load any assets nor show up under Screen Options.
* Add Module: Disable Really Simple Discovery (RSD) <link> tag: Disable loading of Dashicons CSS and JS files on the front-end for public site visitors. This might break the layout or design of custom forms, including custom login forms, if they depend on Dashicons. Make sure to check those forms after disabling.
* Add Module: Disable Windows Live Writer (WLW) manifest <link> tag: Disable the Windows Live Writer (WLW) manifest <link> tag in <head>. The WLW app was discontinued in 2017.
* Add Module: Disable WordPress shortlink <link> tag: Disable the default WordPress shortlink <link> tag in <head>. Ignored by search engines and has minimal practical use case. Usually, a dedicated shortlink plugin or service is preferred that allows for nice names in the short links and tracking of clicks when sharing the link on social media.
* Add Module: Disable cart fragments scripts: Disable cart fragments scripts on the front-end for public site visitors. This might break the functionality of the cart and checkout pages if they depend on cart fragments.
* Add Module: Disable dashicons CSS and JS files: Disable loading of Dashicons CSS and JS files on the front-end for public site visitors. This might break the layout or design of custom forms, including custom login forms, if they depend on Dashicons. Make sure to check those forms after disabling.
* Add Module: Disable emoji support: Disable emoji support for pages, posts and custom post types on the admin and frontend. The support is primarily useful for older browsers that do not have native support for it. Most modern browsers across different OSes and devices now have native support for it.
* Add Module: Disallow Bad Requests: Protect your site against a wide range of threats. check all incoming traffic and quietly blocks bad requests containing nasty stuff like eval(, base64_, and excessively long request-strings.
* Add Module: Disallow Dir Listing: Disable the listing of the directories.
* Add Module: Disallow Malicious File Access in upload: Protect your website from malicious file access in the upload directory.
* Add Module: Duplicate Menu: Easily duplicate your WordPress Menus
* Add Module: Export Posts & Pages: Download your posts and pages to a .csv format.
* Add Module: Export Users: Download your user data to a .csv format.
* Add Module: Hide PHP Versions: Some servers send a header called X-Powered-By that contains the PHP version used on your site. It may be a useful information for attackers, and should be removed.
* Add Module: Maintenance Mode: Show a customizable maintenance page on the frontend while performing a brief maintenance to your site. Logged-in administrators can still view the site as usual.
* Add Module: Nav Menu Visibility: Control your nav menu by allowing you to apply visibility controls to menu.
* Add Module: Password Protection: Password-protect the entire site to hide the content from public view and search engine bots / crawlers. Logged-in administrators can still access the site as usual.
* Add Module: Quick Add Post: A new button to quickly add new posts to speed up your workflow.
* Add Module: Redirect 404 to Homepage: Sends visitors to your homepage if they try to access a page that doesn't exist, ensuring they stay on your site.
* Add Module: Redirect After Login: Set custom redirect URL for all or some user roles after login.
* Add Module: Redirect After Logout: Set custom redirect URL for all or some user roles after logout.
* Add Module: Revisions Control: Avoid overloading the database by setting a cap on the number of revisions to save for certain or all types of posts that support revisions.
* Add Module: Wider Admin Menu: Give the admin menu more room to better accommodate wider items.
* Upgrade Module : Blacklisted Usernames : Add tool for fix blacklisted usernames.

= 1.2.1 =
* Fix : SVG Upload doesn't work properly
* Security update : Sanitize uploaded SVG files

= 1.2.0 =
* Add module : Code Snippets

= 1.1.0 =
* Add module : Hide WordPress Version
* Fix : Activate / deactivate module action

= 1.0.0 =
* Initial release