Admin Optimizer – Performance, Security & Site Cleanup vs WPMasterToolKit (WPMTK) – All in one plugin

Admin Optimizer is a modular all-in-one WordPress plugin built to improve performance, harden security, and streamline your admin workflow — without the bloat of installing a dozen separate plugins. Whether you need to clean your database, manage redirects, inject custom code snippets, protect your login page, or build custom post types, Admin Optimizer covers it all in one place. Key highlights: – Improve site speed with database optimization and script management – Strengthen security with 2FA, login protection, and attack blocking – Manage URL redirects and monitor 404 errors from the dashboard – Add custom CSS, JavaScript, HTML, and PHP code snippets without a child theme – Build forms, custom post types, and Pro custom fields without extra plugins – Send reliable transactional email via SMTP – Access migration options through the Yipresser Migrator for Admin Optimizer Instead of installing 10+ plugins, you can enable only the modules you need — all from a single, lightweight plugin. Why Admin Optimizer? Replace multiple single-purpose plugins with one Modular system — activate only what you need, disable the rest Lightweight — no unnecessary scripts or styles loaded on your site Built with standard WordPress hooks (no core hacks) Beginner-friendly interface, developer-safe architecture What can it replace? Admin Optimizer can replace plugins like: Database cleaner and optimizer plugins Redirect manager and 301 redirect plugins Limit login attempts plugins XML sitemap plugins Custom post type and taxonomy plugins SMTP email plugins Security hardening plugins Form builder plugins Custom code / code snippets plugins Members/User roles editor plugins …and more. Modules: See all modules >> Performance Database Cleaner: Schedule automatic optimization and cleaning of the WordPress database to improve site speed. Pro adds options to manually clean individual DB tables, track unused options, and remove autoload bloat from the Options table. Heartbeat Control: Adjust the WordPress Heartbeat API interval to reduce server load and improve the editor experience. Disable Emojis: Remove all emoji-related styles and scripts from the site to reduce HTTP requests. Disable jQuery Migrate: Prevent the jQuery Migrate script from loading on the frontend for faster page loads. Disable 404 URL Redirect: Stop WordPress from redirecting requests to a similar-looking URL when a page is not found, preventing unintended content from being shown. Remove oEmbed links: Remove the “json+oembed” and “xml+oembed” discovery links from the site header, preventing other sites from embedding your content. Security Block Failed Login: Limit failed login attempts and block brute-force attacks. Pro adds customisable lockout duration, a full lockout mode, and the ability to hide the login form during lockout. Two-Factor Authentication (2FA): Enable TOTP-based two-factor authentication for your users. Pro adds options to enforce 2FA for specific user roles, block logins without 2FA, and allow trusted device saving. Custom Login URL: Hide the wp-login.php URL and set a custom secret login URL to protect your login page from bots. Disable XML-RPC: Disable the XML-RPC protocol, which has no built-in encryption or authentication hardening and is a common attack vector. Hide WordPress Version: Remove the WP version tag from the site header to obscure your WordPress installation. Remove X-Pingback header: Remove the “X-Pingback” HTTP header to prevent pingback abuse. Remove X-Powered-By header: Remove the “X-Powered-By” HTTP header to hide PHP and server information from attackers. Remove REST API link: Remove REST API discovery links from the site header for non-authenticated users. Remove Really Simple Discovery (RSD) link: Remove the RSD link used by XML-RPC clients to discover your endpoint. Remove Shortlink: Remove the shortlink tag from the site header. SEO SEO Manager: Optimize titles, descriptions, canonical URLs, social images, schema, and indexing rules for posts and pages. Pro adds AI-assisted SEO suggestions through AI Connectors. XML Sitemap: Configure and manage the native WordPress XML sitemap for search engines. Pro adds sitemap caching and a Google News sitemap. Redirect Manager: Create and manage URL redirects directly from the WordPress dashboard, with support for 301 and 302 redirects. Pro adds automatic redirect creation on permalink changes, a 404 error monitor to identify broken links, and post-level redirect workflow tools. Robots.txt and Ads.txt Manager: Manage robots.txt, ads.txt, and app-ads.txt directly from the WordPress dashboard — no FTP or file editor required. Disable Category Archive Page: Disable all category archive pages on the site frontend. Disable Tag Archive Page: Disable all tag archive pages on the site frontend. Disable Author Archive Page: Disable all author archive pages on the site frontend. Disable Date Archive Page: Disable all date-based archive pages on the site frontend. Content & Media Post Cloner: Easily clone and duplicate posts and any custom post type, including all post meta and taxonomies. Content Refresh: Keep content updated for SEO without creating a new URL. Clone a post as a draft, edit it, and republish to update the original post in place. Pro Content Author Policy: Control who can be recorded as the author when configured content is published. Choose eligible WordPress roles, then either replace an ineligible author with a default eligible author or return the content to Draft until an eligible author is selected. The policy also covers REST and scheduled publication. Pro Auto-Publish Posts with Missed Schedule: Automatically publish posts that missed their scheduled publication time. Disable Comments: Disable comments and pingbacks across all post types and remove comment-related interfaces from the WordPress admin area. Lock Modified Date: Prevent the post modified date from updating unnecessarily. Pro adds support for custom post types and per-role permissions. SVG File Upload: Allow SVG file uploads, with automatic sanitisation on upload to ensure files are safe to use. Auto-convert image filename to Alt text: Automatically pre-fill empty Alt text fields with the image filename to improve accessibility. Limit Image Upload Size: Set a maximum file size for image uploads to stop users from uploading oversized files. Convert underscore to hyphen in image filenames: Automatically rename uploaded images, replacing underscores with hyphens for SEO-friendly URLs. Auto add anchor target to Headings block: Transform WordPress heading blocks into clickable anchor links, making it easy for readers to link to specific sections. Disable Gutenberg Editor: Disable the block editor and restore the Classic editor as the default for all post types. Page Ordering: Reorder pages and custom post types that support page attributes using drag and drop. Auto Open Advanced Panel in Gutenberg: Automatically expand the Advanced panel in the block inspector on mouse hover, saving extra clicks. Media Manager: Organize, audit, and maintain your WordPress Media Library — virtual folders, enhanced search and filters, per-attachment usage lookup, a batch media usage scanner with a keep/delete review workflow, safe cleanup of unused files, and a media health overview. Pro Custom Fields & Types Custom Fields Builder: Build reusable custom field groups for posts, pages, custom post types, terms, and users. Add text, media, relationship, choice, date, color, layout, and editor fields; start faster with field group presets; control where field groups appear with display conditions; show field values with dynamic blocks, shortcodes, template helpers, and admin columns. Pro Custom Post Status: Register custom post statuses for your content workflow. Pro adds options to assign them to specific post types and restrict availability by user role. Custom Post Types: Register new custom post types for your content. Custom Taxonomies: Register new custom taxonomies for any post type. Users User Access Manager: Review and edit role capabilities, add custom capabilities, control which roles can access the WordPress admin area, and hide the frontend admin toolbar by role. Pro adds custom role management and admin menu visibility controls. User Switching: Temporarily switch into non-privileged user accounts to verify role capabilities and access restrictions, with a secure switch-back workflow. Pro Disable User Account: Disable accounts for inactive users and prevent them from logging in. Hide Update Notice: Hide the WordPress update notification for all users except those with the Update capability (administrators by default). Track User Last Login: Record and display the last login date for every user in the Users list. Track User Registration Date: Display each user’s registration date in the Users list. Disable New User Signup Notification: Suppress the default email notification sent when a new user account is created. System Tools AI Connectors: Connect AI providers, manage API keys, route AI-powered features, and view usage costs and request logs. Pro Site Traffic Manager: Track page views for posts, pages, and custom post types, and gain insights into how your content performs over time. Email & SMTP: Replace the default WordPress mailer with an external SMTP service to ensure reliable transactional email delivery. Includes provider presets for Gmail, Mailgun, Amazon SES, SendGrid, Brevo, and Postmark, encrypted SMTP password storage, Force From controls, AUTH key change warnings, test email sending, a Send Email tool, Quick Email admin bar links, and an optional dashboard email widget. Pro adds SMTP Profiles, Email Routing, advanced routing rules, and developer APIs for sending through configured profiles. Form Builder: Create contact forms with drag-and-drop fields, row layouts, per-form styling, submit button controls, entry storage, email notifications, import/export, and honeypot, reCAPTCHA, or Turnstile spam protection. Pro unlocks form presets, product review forms, star ratings, a custom redirect URL after submission, per-field file type and size controls, submission limits by count or date, access control by login state or user role, and CSV entry export. Custom Code: Add and manage custom CSS, JavaScript, and HTML snippets from the WordPress dashboard without editing theme files or creating a child theme. Choose frontend locations, output CSS inline or as an external file, insert JS/HTML in common WordPress hook positions, use the built-in shortcode library inside HTML snippets, and manage snippets from a searchable list. Pro adds snippet presets, load priority, CSS minification, shortcode snippet creation, conditional loading by login state, role, or user, role/user exclusions, targeting specific posts or pages, and load priority controls. Migration Migration options: Add a dedicated Migration tab for the Yipresser Migrator for Admin Optimizer. If the tool is already installed, Admin Optimizer can activate it; otherwise, it prompts an administrator to install it from WordPress.org. See all modules >> Your feedback is WELCOME!

WP Master ToolKit is your all-in-one solution for optimizing WordPress. It streamlines your dashboard, enhances workflows, and simplifies content and settings management. Customize your WordPress installation effortlessly with all the tools you need at your fingertips. Test by Alexis Fichou (WP-Origami) : Test by Enzo (Easy WordPress) : 97 FREE modules Adminer: A full-featured database management tool. Advanced Debug Mode Allow Menu Custom Links to Open in New Tab. Apple Touch Icon: Manage app icon (Apple Touch Icon) individually. Auto Regenerate Salt Keys. Auto-Publish Posts with Missed Schedule: Automatically publish scheduled posts marked as "missed schedule" across all post types. Ban Emails: Ban the chosen emails. Blacklisted Usernames: Prevent creation of user accounts with predefined blacklisted or common usernames. Block User Registration from Disposable Email: Block user registration from temporary disposable email addresses. Block 404 PHP File Scanning Browser Theme Color: Select a tag color to allow seamless theme customization in all major browsers. Child theme generator: Generate a child theme directly from WordPress dashboard. Clean Profiles: Tidy up user profiles by removing sections you do not utilise. Clean Up Admin Bar. Code Snippets: Add custom code snippets without editing the theme’s functions.php. Content Duplication: One-click duplication of pages, posts and custom post types with taxonomy terms and post meta. Content Order: Custom ordering for hierarchical content types and those supporting page attributes. Custom Admin CSS: Add custom CSS on all admin pages for all user roles. Custom Body Class: Add custom class(es) on the singular view of some or all public post types. Custom COOKIEHASH Custom Frontend CSS: Add custom CSS on all frontend pages for all user roles. Disable All Updates: Completely disable core, theme and plugin updates and auto-updates. Will also disable update checks, notices and emails. Disable Block-Based Widgets Settings Screen: Restore classic widgets settings screen for non-block themes. Disable Dashboard Widgets: Clean up and speed up dashboard by disabling widgets that won’t load assets. Disable Feeds: Disable RSS, Atom, and RDF feeds and remove feed URL references from section. Disable Gutenberg: Selectively disable Gutenberg block editor for specific or all post types. Disable REST API: Disable REST API for non-authenticated users and remove URL traces. Disable Really Simple Discovery (RSD) tag: Remove RSD tag used by XML-RPC clients. Disable WP Sitemap: Disable the default WordPress sitemap. Disable Windows Live Writer (WLW) manifest tag: Remove discontinued WLW manifest tag. Disable WordPress shortlink tag: Remove WordPress shortlink tag from . Disable XML-RPC. Disable cart fragments scripts: Disable WooCommerce cart fragments scripts for public visitors. Disable dashicons CSS and JS files. Disable emoji support: Remove emoji scripts as modern browsers natively support emojis. Disable jQuery Migrate: Removes the jQuery Migrate script from the frontend of your site. Disable wp_mail: Disable WordPress email function to save resources on sites that don’t send emails. Disallow Bad Requests: Block malicious requests containing eval(, base64_, and excessively long strings. Disallow Dir Listing: Disable the listing of the directories. Disallow Malicious File Access in upload: Prevent malicious file access in upload directory. Disallow Plugin Upload: Disable plugin zip file uploads. Disallow Theme Upload: Disable theme zip file uploads. Disallow WP File Edit: Prevent core file modifications through admin panel. Disallow register user: Prevent new user account creation via WordPress registration form. Duplicate Menu: Easily duplicate your WordPress Menus Enhance List Tables: Add or remove columns in listing pages for post types, taxonomies, media, comments and users. Export Posts & Pages: Export posts and pages to CSV format. Export Users: Export user data to CSV format. External Permalinks: Set permalinks to external URLs with rel="noopener noreferrer nofollow" attributes. File Manager: Browse and manage files efficiently. Force SSL: Force HTTPS for encrypted secure traffic. Force Strong Password: Enforce strong passwords for all users to prevent weak credentials. Heartbeat Control: Modify or disable WordPress heartbeat API to reduce server CPU load. Hide Admin Bar: Hide admin bar on frontend for specific roles or all users. Hide Admin Notices: Gather all notifications in a popup accessible from top-right bell icon. Hide Login Errors: Hide default WordPress login error messages. Hide PHP Versions: Remove X-Powered-By header that reveals PHP version to potential attackers. Hide WordPress Version Image Upload Control: Resize large images, convert BMPs and PNGs to JPGs, delete originals. Insert , and Code: Insert tracking pixels, analytics, meta tags, and custom scripts. Last Login Column: Display last login date and time in users list table. Limit Login Attempts: Prevent brute force attacks by limiting failed login attempts per IP. Local avatars: Replaces GRAVATAR management with media management. Lock Admin Email: Prevent admin email address modifications. Lock Site URL: Prevent site URL modifications. Log In/Out Menu: Add dynamic login/logout menu items. Mail Catcher: Capture all outgoing emails. Maintenance Mode: Display customizable maintenance page. Administrators can still access the site. Manage ads.txt and app-ads.txt: Edit and validate ads.txt files. Manage robots.txt: Edit and validate robots.txt file. Media Cleaner: Sanitize file names and auto-generate metadata (title, caption, alt text, description). Media Encoder: Automatically convert images to WebP (AVIF in PRO). Meta Debugger: Display all metadata for a post, user, term, or comment. Move Login URL: Change the default login URL to a custom URL of your choice. Multiple User Roles: Assign multiple roles per user, useful for e-commerce or LMS plugins. Nav Menu Visibility: Apply visibility controls to menu items. Obfuscate Author Slugs: Hide user slugs in author URLs and REST API endpoints. Obfuscate Email Addresses: Protect emails from spam bots via [wpm_obfuscate] shortcode. Open All External Links in New Tab: Open external links in new tab with security attributes. Password Protection: Password-protect entire site from public and search engines. Admins retain access. Plugin & Theme Rollback: Revert plugins/themes to previous WordPress.org versions. Post Per Page: Set posts per page for each post type. Prevent User Enumeration: Block user enumeration via ?author= and REST API. Protect Website Headers: Add security headers to protect against phishing and data theft. Quick Add Post: Quick button to add new posts faster. Redirect 404 to Homepage: Redirect non-existent pages to homepage. Redirect After Login Redirect After Logout Redirect Manager Revisions Control: Limit number of revisions saved per post type. Register Custom Content Types: Register custom post types and taxonomies. Search Replace in database SMTP Mailer: Configure sender name/email and external SMTP for reliable email delivery. SVG Upload: Enable SVG file uploads. Temporary Login Wider Admin Menu 31 Pro Modules 410 Manager Add Essentials Shortcodes Admin Menu Organizer Auto clean actionscheduler_actions: Clean actionscheduler_actions database table from actions that have been completed | failed | cancelled. Better Password Hash Password Expiration CRON Manager: Manage cron events on your website. Change Database Prefix: Quickly change your WordPress database prefix to save time and enhance security. Custom Login Design: Personalize your login page to match your brand. Disable Comments: Manage the visibility of comments on your public posts by selectively disabling them for specific post types or across all posts. Disable Plugin For Debug: Temporarily disable specific plugins to troubleshoot and debug issues on your WordPress site without uninstalling. Disable Woocommerce Logout Confirmation Disallow Access WP Sensible Files: Delete the wp-config-sample.php, block access to readme.html, license.txt Disallow Countries IP Download medias as zip Force Send All Email To: Force all emails sent from your website to be sent to a specific email address. Generate Alt Text With AI: Automatically generate alternative text using AI. Head Sorter: Automatically sorts and optimizes the of your website, making sure important tags load first for better speed and SEO. Hook And Filter Debugger: Displaying the sequence of action and filter hooks by their origin on a single page. Link Shortener: Shorten your links with a custom prefix. You can also track the number of clicks on each link. Manage Admin Emails Notifications: Check the types of emails you no longer want to receive as an administrator. Media Replacement My Account Menu Customizer: for WooCommerce My Account page. No Plugin Activation / Deactivation / Deletion: Prevents plugin activation, deactivation, and deletion for enhanced security. Paste Image In Media: With this feature you can paste directly your picture in WordPress media. Plugin Download: Download plugins from the plugins page in the WordPress admin panel. Post Type Switcher Two Factor Authentication Updates Logs: Track and record the most recent login activity of site users, then showcase the date and time in the users list table User Switching Vulnerabilities Scan PRO Additionnals Features Move Login URL: Block access to /wp-admin with server side 403 error for non-logged users. Maintenance Mode: Real countdown timer with automatic site activation. Bypass link generation for access during maintenance. Exclude specific URLs from maintenance mode. Media Encoder: Convert images to AVIF format (PHP ≥ 8.1). Free version limited to WebP only. Mail Catcher: Unlimited email capture. Free version limited to 5 emails per day. Advanced Debug Mode: Live log streaming viewer with real-time monitoring. Daily logs with date suffix. Custom log path with enhanced protection. Search Replace in database: several search/replace pairs, support for regular expressions and a much more complete detailed overview of detected changes. SMTP Mailer: 19+ premium providers including Gmail, Outlook, SendGrid, AWS SES, Brevo, Mailgun, Mailjet, Postmark, SparkPost, MailerSend, Resend, SendLayer, SMTP.com, SMTP2GO, Elastic Email, Zoho Mail, SendPulse, Mandrill, and Pepipost. Free version limited to PHP mail and generic SMTP. Redirect Manager: Advanced redirect engines (Apache and Nginx), redirect logs, and CSV import/export. Free version limited to WordPress (PHP) redirects without logs/import-export. ⭐️ UPGRADE TO PRO VERSION: WPMasterToolKit Pro ⭐️ Other plugin by Webdeclic Webdeclic is a French web agency based in Paris. We are specialized in the creation of websites and e-commerce sites. We are also the creator of the following plugins: * QuickWebP * Cookie Dough * Univeral Honey Pot * Clean My WP * Mentions Legales Par Webdeclic * Lexilink * Show all plugins on WordPress.org