Security snippets
-
WordPress REST API Restricted to Authenticated Users
Restrict the WordPress REST API to logged-in users with one filter. Keep an allowlist of public routes such as oEmbed or the WooCommerce Store API.
Category: WordPress -
Disable WordPress Automatic Updates but Keep Security Fixes
Disable WordPress automatic updates for major core versions, plugins and themes, while minor security releases keep installing on their own.
-
Disable the Theme and Plugin File Editor in WordPress
Disable the theme and plugin file editor in WordPress with DISALLOW_FILE_EDIT, plus a capability filter that holds even if wp-config says otherwise.
-
WP CLI List Admin Users, Including Hidden Admins
A custom WP-CLI command that reads every admin account straight from the database and flags admins hidden from the Users screen.
-
WordPress Export Custom Post Type to CSV Without Plugin
Add an Export CSV button to any WordPress post type list screen, with nonce and capability checks, terms, meta and formula-injection protection.
Category: WordPress
3rd party plugins actions admin admin bar archive block-themes block editor Blocks block theme build caching capabilities core CSS custom post types development filters gutenberg hook hooks Image img javascript load styles maintenance media Must Have npm Oxygen performance php plugins rest api scripts organizer security single product tailwind theme.json Tips transients updates WooCommerce wordpress wp-cli WP Admin