Translate WordPress with GTranslate
Translate WordPress with GTranslate plugin uses Google Translate AI translation service to translate wordpress site with Google power and make it multilingual. With 103 available languages your site will be available to more than 99% of internet users. Our paid versions are fully SEO compatible which will increase your international traffic and sales. This translate plugin is a budget multilingual WordPress solution which combines automatic and human translations to save money and is easy to implement. GTranslate is a leading website translation services provider since 2008, it moves away the language barriers. Compared to other translation plugins for WordPress, we use cloud based approach which does not slow down your website. In addition to that, we can offer complete SEO features based on sub-domains with our paid options, which can make your website appear in search engines in different languages which will increase your international traffic and sales. In our paid versions we DO NOT limit the number of words or the number of translated pageviews. You DO NOT pay additionally for automatic translations. Please use GTranslate Support for your questions and support requests! We are multilingual! Please check our FAQ to get quick answers. Free translation service: permitted use Under the GTranslate Terms of Service, the free translation service is available for personal, educational, internal testing, nonprofit and governmental purposes, provided the use does not directly generate revenue from the service. Nonprofit use must further nonprofit activities; governmental use includes public institutions and other public-sector entities. Commercial or revenue-generating use requires an applicable paid subscription. This free-service restriction does not apply to free trials of paid subscriptions. These service conditions do not change the WordPress plugin code’s GPLv2-or-later license. Features Automatic machine translation Translate website on the fly Translate posts and pages Translate categories and tags Menus and widgets translation Themes and plugins translation Right to left language support Google Translate website translator widget alternative Auto-switch language based on browser defined language Available styles Float, Dropdown, Flags, Flags with dropdown, Nice dropdown with flags, Flags with language names, Flags with language codes, Language names, Language codes, Globe, Popup Floating language selector WooCommerce shop translation Multilingual language names in native alphabet Alternative flags for Quebec, Canada, USA, Brazil, Mexico, Argentina, Colombia Lazy loading for language flags and js libraries to boost performance Lightweight vanilla javascript without dependencies Forum Support Paid Features Multilingual SEO – Enable search engine indexing Neural machine translations with human level translation quality Increase traffic and AdSense revenue Search engine friendly (SEF) URLs Yoast SEO compatible – translate meta keywords, meta description, schema.org data structures, translate sitemaps WooCommerce compatible – translate products, schema.org data structures You can have sub-directory (example.com/es/) or sub-domain (es.example.com) URL structure URL Translation aka slug translation is possible (example.com/about-us → example.es/sobre-nosotros) Add hreflang tags for translated alternatives You can manually correct translations In context translation interface (make corrections without losing the context) Meta data translation (meta keywords, meta description) Translating schema.org microdata for better search engine appearance Seamless updates (cloud service updated on our side – SaaS, you do not need to worry about backups on your side) JSON format translation Translate WooCommerce emails AMP translation (Accelerated Mobile Pages translation) Image localization – Media translation Translation Proxy (aka Translation Delivery Network) Centralized Translation Cache – We revise and improve translations over time Language Hosting (example.fr) User Dashboard with Analytics Live Chat Support See also If you are looking for unlimited, high-quality automatic translations, check out TranslateX – an automatic translation API offering unlimited translation for your website or application. We also offer integration plugins: TranslateX for Loco Translate – integrate TranslateX API directly into Loco Translate for seamless, unlimited automatic translations. TranslateX for TranslatePress – bring unlimited automatic translation to TranslatePress using TranslateX API. These solutions make it easy to supercharge your WordPress multilingual setup with TranslateX’s secure and affordable API. GTranslate WordPress Demo Watch GTranslate Tour Edit Translations Demo (paid) External services This plugin uses external services to load the language selector and obtain automatic translations. GTranslate widget delivery When the widget loads, the visitor’s browser requests its files from cdn.gtranslate.net over HTTPS. GTranslate, Inc. provides the widget, which connects the visitor’s browser to the translation service. Google translation requests When page translation is requested, the widget sends page text for translation from the visitor’s browser to translate-pa.googleapis.com over HTTPS. Google processes these translation requests. The content sent is the page text being translated. Loading widget files and requesting translations are separate network operations. These requests also expose standard connection and HTTP request information, such as the visitor’s IP address and browser headers, to the receiving service. Provider processing and retention practices are described in the applicable policies; browser-based translation does not mean that no data leaves the browser or that providers retain no data. If you configure a paid translation proxy service, translated versions of your website are processed and served through GTranslate’s cloud infrastructure according to your service configuration. GTranslate, Inc.: Terms of Service, Privacy Policy Google: Terms of Service, Privacy Policy Review these services when updating your website’s privacy information and configuring any consent or content-security controls. The plugin requires access to the relevant external services for translation to work.
Pinny’s REST Lock – Block REST User Enumeration
Blocks public REST API user enumeration while preserving full WordPress functionality. Pinny’s REST Lock is an ultra-lightweight security plugin that locks down WordPress REST API user endpoints without breaking your site. It is designed to fix one of the most common and overlooked WordPress security issues — public user enumeration via the REST API — using the correct, core-aligned approach. 🚨 Why This Plugin Is Necessary By default, WordPress publicly exposes REST API endpoints such as: /wp-json/wp/v2/users On public sites, these endpoints can be accessed without authentication and are routinely used as the first step in real-world attacks. This is where attackers start. Public access to REST user endpoints allows attackers to: Enumerate valid usernames Identify administrator and privileged accounts Eliminate guesswork before brute-force attacks Chain enumeration with login abuse and password reset attacks This is not theoretical. User enumeration is a baseline reconnaissance technique used by bots and human attackers alike. Blocking public access to REST user endpoints should be considered required security hygiene for every WordPress site. ⚠️ Common REST Protection Pitfalls Securing REST user endpoints requires precision. Broad or poorly timed restrictions often introduce serious side effects. Common issues include: Blocking all users, including administrators, which breaks authenticated workflows Disabling the REST API entirely, causing the block editor, WooCommerce, and modern plugins to fail Applying restrictions before authentication, preventing WordPress from distinguishing public and authorized requests Allowing low-privilege roles, such as subscribers, to retain access — leaving user enumeration possible Effective protection must be narrowly scoped, permission-aware, and aligned with WordPress core behavior. ✅ How Pinny’s REST Lock Works Pinny’s REST Lock takes a surgical, WordPress-native approach: Targets only REST API user endpoints Runs after WordPress authentication Allows access only to users with appropriate permissions Returns a proper 403 Forbidden response to unauthorized requests What this means: Administrators continue to work normally The REST API remains fully functional Gutenberg, WooCommerce, and REST-based plugins are unaffected Only public user enumeration is blocked This follows WordPress core’s intended permission model. 🚀 Ultra-Lightweight by Design Pinny’s REST Lock is intentionally minimal: ~1.3 KB uncompressed Single-file plugin No settings page No database tables No logs No tracking No ads No performance impact It activates, applies the protection, and gets out of the way. 🛡️ A Required Fix for Modern WordPress Sites If your site is public, your REST user endpoints should not be. Pinny’s REST Lock closes one of the most common entry points attackers look for — without breaking WordPress, without blocking admins, and without adding bloat. Install it. Activate it. And remove an entire class of attacks from your site.
