Dynamic Functionalities for WordPress

Dynamic Functionalities replaces the stack of single-purpose plugins most WordPress sites depend on. Instead of installing separate plugins for performance cleanup, redirect management, login security, schema markup, external link control, and code snippets, you get 16 purpose-built modules in one package that loads less code than most individual plugins.

Every module is independent. Enable what you need, disable what you don’t. Disabled modules load zero code — no hooks, no files, no queries.

Full documentation lives at functionalities.dev, including a module reference, a getting started guide, and a complete hook reference.

New in 1.6.0 A security and correctness release, tested on WordPress 7.1.

Abilities API permissions tightened. Each WordPress 7 ability now carries its own permission callback and rejects undeclared input. Previously a shared callback widened to edit_post whenever a request carried a post_id, so anyone who could edit a single post could reach administrator-only operations.

Data files moved somewhere private. Redirects, the 404 log, and task notes now live in a folder with a random name and are no longer readable at a guessable URL. Existing files migrate automatically.

Snippets reach visitors intact. Header and footer code is filtered once at save time against the author’s capability instead of being re-filtered against each visitor’s, which used to mangle && and comparison operators for logged-out readers.

Content filters use the WordPress HTML API. Link Management, Block Cleanup, and Schema edit attributes in place instead of reserializing through DOMDocument. Pages built with Vue, Alpine, or mustache templates are processed correctly rather than skipped.

Existing settings, hooks, admin URLs, and data files carry over untouched. The full list is in the changelog below.