Editant vs Plugin Auditor

Editant is a content review and approval plugin for WordPress. Generate a secure preview link for any post, page, or custom post type and share it with reviewers – clients, stakeholders, internal teams, regulators – who can read the rendered content, leave threaded feedback, and approve or request changes. No WordPress login required for reviewers. Everything runs on your own WordPress instance. There is no SaaS backend, no per-seat fee, and no reviewer data leaves your server. What’s included Tokenised preview links for any public post type, with configurable expiry and one-click revocation. Login-free reviewer access via secure 256-bit tokens, stored hashed. Threaded comments – reviewers and authors can reply within threads. Optional reviewer identity capture: anonymous, name only, or name plus email. Block editor sidebar showing live comment threads alongside the content you’re editing, with auto-refresh and manual refresh. Admin dashboard listing every active link with reviewer counts, decisions, and last activity. Approve and Request Changes decisions, recorded with full history. Email notifications for new comments, replies, and decisions. Configurable defaults for new links, email sender, and rate limits via the Settings page. Custom post type support out of the box. Full RTL language support across reviewer page, sidebar, and dashboard. Translation-ready, with a .pot file shipped. GDPR data exporter and eraser hooked into WordPress core privacy tools. Coming next (Pro) Editant Pro will add inline (text-anchored) commenting, tracked-changes-style suggestions, multi-reviewer quorum approvals, signed audit trails, deadlines and reminders, per-link access control (passwords, IP allow-lists, view-once links), white-labelling and branding for the reviewer page, and AI-assisted review features using your own provider keys. Privacy Editant stores reviewer comments and decisions in your own database. IP addresses and user agents are hashed with a per-site salt before storage. No data is sent to any external service from the free plugin. AI features (Pro) require you to bring your own provider key (OpenAI, Anthropic, Azure OpenAI, or local models via Ollama) – Editant never proxies AI calls. Development Editant is open source under the GPL. The full source for the admin and reviewer interfaces (React/JSX and SCSS) ships in this plugin under assets/src/. Running the build below produces the files in assets/build/ that ship with the plugin. To rebuild from source: Install Node.js 22 or later and PHP 8.1 or later. From the plugin directory, run composer install and npm install. Run npm run build. Configuration files included in the plugin: webpack.config.js, package.json, composer.json. Third-party dependencies are declared in package.json (JavaScript) and composer.json (PHP). The build pipeline uses @wordpress/scripts.

Have you ever had that situation where you have a bunch of plugins installed and you can’t remember why half of them are there? It is important to clean out unused plugins and keep your plugins up to date, but this can be difficult if you have forgotten why you installed them in the first place. This is particularly true for sites with multiple admin users, and for agencies that manage their clients sites. You don’t want to delete an old plugin without being 100% sure why it was installed and therefore know if it is still needed. The Plugin Auditor tells you why each plugin was installed and also keeps a record of who installed it so that you know who to ask if you have any questions when performing maintenance on the site. Plugin Auditor can be installed at any time but to get the most benefit from it, it should be installed as the first plugin that you install on any WordPress site that you manage.