Title: WPMasterToolKit (WPMTK) – All in one plugin
Author: Ludwig You
Published: February 23, 2024
Last modified: March 19, 2026
---
Search plugins
# WPMasterToolKit (WPMTK) – All in one plugin
By [Ludwig You](https://profiles.wordpress.org/ludwigyou/)
[Download](https://downloads.wordpress.org/plugin/wpmastertoolkit.2.19.0.zip)
* [Details](https://pcd.wordpress.org/plugins/wpmastertoolkit/#description)
* [Reviews](https://pcd.wordpress.org/plugins/wpmastertoolkit/#reviews)
* [Installation](https://pcd.wordpress.org/plugins/wpmastertoolkit/#installation)
* [Development](https://pcd.wordpress.org/plugins/wpmastertoolkit/#developers)
[Support](https://wordpress.org/support/plugin/wpmastertoolkit/)
## Description
WP Master ToolKit is your all-in-one solution for optimizing WordPress. It streamlines
your dashboard, enhances workflows, and simplifies content and settings management.
Customize your WordPress installation effortlessly with all the tools you need at
your fingertips.
**Test by Alexis Fichou (WP-Origami) :**
**Test by Enzo (Easy WordPress) :**
#### 93 FREE modules
* Adminer: A full-featured database management tool.
* Advanced Debug Mode
* Allow Menu Custom Links to Open in New Tab.
* Apple Touch Icon: Manage app icon (Apple Touch Icon) individually.
* Auto Regenerate Salt Keys.
* Auto-Publish Posts with Missed Schedule: Automatically publish scheduled posts
marked as "missed schedule" across all post types.
* Ban Emails: Ban the chosen emails.
* Blacklisted Usernames: Prevent creation of user accounts with predefined blacklisted
or common usernames.
* Block User Registration from Disposable Email: Block user registration from temporary
disposable email addresses.
* Browser Theme Color: Select a tag color to allow seamless theme customization
in all major browsers.
* Child theme generator: Generate a child theme directly from WordPress dashboard.
* Clean Profiles: Tidy up user profiles by removing sections you do not utilise.
* Clean Up Admin Bar.
* Code Snippets: Add custom code snippets without editing the theme’s **functions.
php**.
* Content Duplication: One-click duplication of pages, posts and custom post types
with taxonomy terms and post meta.
* Content Order: Custom ordering for hierarchical content types and those supporting
page attributes.
* Custom Admin CSS: Add custom CSS on all admin pages for all user roles.
* Custom Body Class: Add custom class(es) on the singular view of some or
all public post types.
* Custom Frontend CSS: Add custom CSS on all frontend pages for all user roles.
* Disable All Updates: Completely disable core, theme and plugin updates and auto-
updates. Will also disable update checks, notices and emails.
* Disable Block-Based Widgets Settings Screen: Restore classic widgets settings
screen for non-block themes.
* Disable Dashboard Widgets: Clean up and speed up dashboard by disabling widgets
that won’t load assets.
* Disable Feeds: Disable RSS, Atom, and RDF feeds and remove feed URL references
from `` section.
* Disable Gutenberg: Selectively disable Gutenberg block editor for specific or
all post types.
* Disable REST API: Disable REST API for non-authenticated users and remove URL
traces.
* Disable Really Simple Discovery (RSD) Code: Insert tracking pixels, analytics, meta
tags, and custom scripts.
* Last Login Column: Display last login date and time in users list table.
* Limit Login Attempts: Prevent brute force attacks by limiting failed login attempts
per IP.
* Local avatars: Replaces GRAVATAR management with media management.
* Lock Admin Email: Prevent admin email address modifications.
* Lock Site URL: Prevent site URL modifications.
* Log In/Out Menu: Add dynamic login/logout menu items.
* Mail Catcher: Capture all outgoing emails.
* Maintenance Mode: Display customizable maintenance page. Administrators can still
access the site.
* Manage ads.txt and app-ads.txt: Edit and validate ads.txt files.
* Manage robots.txt: Edit and validate robots.txt file.
* Media Cleaner: Sanitize file names and auto-generate metadata (title, caption,
alt text, description).
* Media Encoder: Automatically convert images to WebP (AVIF in PRO).
* Meta Debugger: Display all metadata for a post, user, term, or comment.
* Move Login URL: Change the default login URL to a custom URL of your choice.
* Multiple User Roles: Assign multiple roles per user, useful for e-commerce or
LMS plugins.
* Nav Menu Visibility: Apply visibility controls to menu items.
* Obfuscate Author Slugs: Hide user slugs in author URLs and REST API endpoints.
* Obfuscate Email Addresses: Protect emails from spam bots via [wpm_obfuscate]
shortcode.
* Open All External Links in New Tab: Open external links in new tab with security
attributes.
* Password Protection: Password-protect entire site from public and search engines.
Admins retain access.
* Plugin & Theme Rollback: Revert plugins/themes to previous WordPress.org versions.
* Post Per Page: Set posts per page for each post type.
* Prevent User Enumeration: Block user enumeration via ?author= and REST API.
* Protect Website Headers: Add security headers to protect against phishing and
data theft.
* Quick Add Post: Quick button to add new posts faster.
* Redirect 404 to Homepage: Redirect non-existent pages to homepage.
* Redirect After Login
* Redirect After Logout
* Revisions Control: Limit number of revisions saved per post type.
* Register Custom Content Types: Register custom post types and taxonomies.
* Search Replace in database
* SMTP Mailer: Configure sender name/email and external SMTP for reliable email
delivery.
* SVG Upload: Enable SVG file uploads.
* Temporary Login
* Wider Admin Menu
#### 30 Pro Modules
* 410 Manager
* Add Essentials Shortcodes
* Admin Menu Organizer
* Auto clean actionscheduler_actions: Clean actionscheduler_actions database table
from actions that have been completed | failed | cancelled.
* Better Password Hash
* CRON Manager: Manage cron events on your website.
* Change Database Prefix: Quickly change your WordPress database prefix to save
time and enhance security.
* Custom Login Design: Personalize your login page to match your brand.
* Disable Comments: Manage the visibility of comments on your public posts by selectively
disabling them for specific post types or across all posts.
* Disable Plugin For Debug: Temporarily disable specific plugins to troubleshoot
and debug issues on your WordPress site without uninstalling.
* Disable Woocommerce Logout Confirmation
* Disallow Access WP Sensible Files: Delete the wp-config-sample.php, block access
to readme.html, license.txt
* Disallow Countries IP
* Download medias as zip
* Force Send All Email To: Force all emails sent from your website to be sent to
a specific email address.
* Generate Alt Text With AI: Automatically generate alternative text using AI.
* Head Sorter: Automatically sorts and optimizes the of your website, making
sure important tags load first for better speed and SEO.
* Hook And Filter Debugger: Displaying the sequence of action and filter hooks
by their origin on a single page.
* Link Shortener: Shorten your links with a custom prefix. You can also track the
number of clicks on each link.
* Manage Admin Emails Notifications: Check the types of emails you no longer want
to receive as an administrator.
* Media Replacement
* My Account Menu Customizer: for WooCommerce My Account page.
* No Plugin Activation / Deactivation / Deletion: Prevents plugin activation, deactivation,
and deletion for enhanced security.
* Paste Image In Media: With this feature you can paste directly your picture in
WordPress media.
* Plugin Download: Download plugins from the plugins page in the WordPress admin
panel.
* Post Type Switcher
* Two Factor Authentication
* Updates Logs: Track and record the most recent login activity of site users,
then showcase the date and time in the users list table
* User Switching
* Vulnerabilities Scan
#### PRO Additionnals Features
* Move Login URL: Block access to /wp-admin with server side 403 error for non-
logged users.
* Maintenance Mode: Real countdown timer with automatic site activation. Bypass
link generation for access during maintenance. Exclude specific URLs from maintenance
mode.
* Media Encoder: Convert images to AVIF format (PHP ≥ 8.1). Free version limited
to WebP only.
* Mail Catcher: Unlimited email capture. Free version limited to 5 emails per day.
* Advanced Debug Mode: Live log streaming viewer with real-time monitoring. Daily
logs with date suffix. Custom log path with enhanced protection.
* Search Replace in database: several search/replace pairs, support for regular
expressions and a much more complete detailed overview of detected changes.
* SMTP Mailer: 19+ premium providers including Gmail, Outlook, SendGrid, AWS SES,
Brevo, Mailgun, Mailjet, Postmark, SparkPost, MailerSend, Resend, SendLayer,
SMTP.com, SMTP2GO, Elastic Email, Zoho Mail, SendPulse, Mandrill, and Pepipost.
Free version limited to PHP mail and generic SMTP.
⭐️ UPGRADE TO PRO VERSION: [WPMasterToolKit Pro](https://wpmastertoolkit.com) ⭐️
### Other plugin by Webdeclic
[Webdeclic](https://webdeclic.com) is a French web agency based in Paris. We are
specialized in the creation of websites and e-commerce sites. We are also the creator
of the following plugins:
* [QuickWebP](https://wordpress.org/plugins/quickwebp/)*
[Cookie Dough](https://wordpress.org/plugins/cookie-dough-compliance-and-consent-for-gdpr/)*
[Univeral Honey Pot](https://wordpress.org/plugins/universal-honey-pot/) * [Clean My WP](https://wordpress.org/plugins/clean-my-wp/)*
[Mentions Legales Par Webdeclic](https://wordpress.org/plugins/mentions-legales-par-webdeclic/)*
[Lexilink](https://wordpress.org/plugins/lexilink/) * [Show all plugins on WordPress.org](https://wordpress.org/plugins/search/webdeclic/)
## Screenshots
* [[
* Admin page
* [[
* Import / Export settings
* [[
* Move login submenu
* [[
* Code snippets
* [[
* [[
* [[
* [[
## Installation
1. Upload the plugin files to the `/wp-content/plugins/wp-mastertoolkit` directory,
or install the plugin through the WordPress plugins screen directly.
2. Activate the plugin through the ‘Plugins’ screen in WordPress
3. Use the WPMasterToolKit screen to configure the plugin
## FAQ
### What is WPMasterToolKit?
WPMasterToolKit is a comprehensive plugin that provides a wide range of features
designed to improve your WordPress. It includes tools to improve media management,
user interface, site security and much more.
### Will WPMasterToolKit slow down my website?
No, WPMasterToolKit is designed to be lightweight and efficient. This should not
negatively impact your website performance.
### Can WPMasterToolKit help with SEO?
Although WPMasterToolKit is not primarily an SEO plugin, it does include features
that can help your site’s SEO, such as the ability to open external links in a new
tab with the appropriate “rel” attributes.
### How often is WPMasterToolKit updated?
We regularly update WPMasterToolKit to introduce new features, fix bugs and ensure
compatibility with the latest versions of WordPress.
### How can I contribute to WPMasterToolKit?
Contributions are welcome! You can contribute by reporting bugs, suggesting features,
translating the plugin, or submitting code fixes.
### Is WPMasterToolKit similar to ASE ?
Yes, WPMasterToolKit is similar to Admin and Site Enhancements (ASE), WP Extended
and other all in one plugin.
### Can I replace my security plugin with WPMTK?
Yes, WPMTK includes many security features that can replace your existing security
plugin. WPMTK includes up to 90% of the features known from security plugins like
Wordfence, Sucuri, iThemes Security, SecuPress, etc.
### Can I replace plugins like Imagify or ShortPixel?
Yes, WPMTK includes a media encoder that can convert images to WebP and AVIF if
you have the PRO version. This very similar to the features of Imagify and ShortPixel,
the big difference is that WPMTK convert your images locally and not on the cloud.
So you don’t need to worry about your images being uploaded to a third party server.
### How can I report security bugs?
You can report security bugs through the Patchstack Vulnerability Disclosure Program.
The Patchstack team help validate, triage and handle any security vulnerabilities.
[Report a security vulnerability.](https://patchstack.com/database/wordpress/plugin/wpmastertoolkit/vdp)
### Does WPMasterToolKit work with WooCommerce?
Yes, WPMasterToolKit is fully compatible with WooCommerce. It includes specific
features like disabling WooCommerce logout confirmation, customizing the My Account
menu, and disabling cart fragments scripts to improve performance. Many WooCommerce
store owners use WPMTK to enhance their site security and optimize their admin dashboard.
### Can I disable Gutenberg editor with this plugin?
Yes, WPMasterToolKit allows you to selectively disable the Gutenberg block editor.
You can choose to disable it for specific post types or all relevant post types,
giving you full control over when to use the classic editor or the block editor.
### How do I set up SMTP email on WordPress with WPMasterToolKit?
WPMasterToolKit includes a comprehensive SMTP Mailer module that supports 19+ popular
email providers including Gmail (with OAuth 2.0), Outlook, SendGrid, AWS SES, Brevo(
formerly Sendinblue), Mailgun, Mailjet, and more. Simply enable the SMTP Mailer
module, select your provider, enter your credentials, and send a test email to verify
the configuration.
### Is WPMasterToolKit compatible with page builders like Elementor and Divi?
Yes, WPMasterToolKit is fully compatible with popular page builders including Elementor,
Divi, Beaver Builder, and others. The plugin doesn’t interfere with page builder
functionality and can actually enhance your workflow with features like content
duplication and custom body classes.
### Can I duplicate posts and pages with WPMasterToolKit?
Yes, the Content Duplication module enables one-click duplication of pages, posts,
and custom post types. When you duplicate content, the corresponding taxonomy terms
and post meta are also duplicated, making it perfect for creating similar content
quickly.
### Does this plugin help prevent brute force attacks?
Yes, WPMasterToolKit includes multiple security features to prevent brute force
attacks: Limit Login Attempts to restrict failed login attempts per IP address,
Move Login URL to hide your login page from automated bots, and Blacklisted Usernames
to prevent common usernames like “admin” from being created.
### Can I manage my WordPress database with this plugin?
Yes, WPMasterToolKit includes Adminer, a full-featured database management tool
that allows you to browse, edit, and manage your WordPress database directly from
your admin panel without needing phpMyAdmin.
### How do I disable XML-RPC in WordPress?
WPMasterToolKit provides a simple one-click solution to disable XML-RPC. Just enable
the “Disable XML-RPC” module in the plugin settings. This helps protect your site
from XML-RPC attacks and DDoS attempts that target this feature.
### Can I create a child theme with WPMasterToolKit?
Yes, the Child Theme Generator module allows you to create a child theme directly
from your WordPress dashboard in just a few clicks. You can even disable the module
after generating your child theme to save resources.
### Does WPMasterToolKit work with multisite installations?
Yes, WPMasterToolKit is compatible with WordPress multisite installations. You can
network activate it or activate it on individual sites within your multisite network.
### How do I disable WordPress REST API for non-authenticated users?
Enable the “Disable REST API” module in WPMasterToolKit. This will disable REST
API access for non-authenticated users and remove URL traces from the `` section,
HTTP headers, and WP RSD endpoint, improving your site’s security.
### Can I add custom code snippets without editing functions.php?
Yes, the Code Snippets module allows you to add custom PHP, CSS, and JavaScript
code snippets directly from your WordPress dashboard without editing your theme’s
functions.php file. This keeps your customizations safe even when you update your
theme.
### Can I convert images to WebP format automatically?
Yes, the Media Encoder module automatically converts uploaded images to WebP format(
or AVIF in the PRO version with PHP 8.1+). This significantly reduces image file
sizes and improves your site’s loading speed without sacrificing quality.
## Reviews
### [WOW- this is AMAZING- and it WORKS!](https://wordpress.org/support/topic/wow-this-is-amazing-and-it-works/)
[jeanedwa](https://profiles.wordpress.org/jeanedwa/) December 18, 2025 1 reply
A+Excellent plugin! Now that it’s been verified again, it is working beautifully.
I’ve replaced so many other plug-ins and actions… What a brilliant plug-in. I’d
highly recommend it..!
### [WPMT is a must have admin tool for WP](https://wordpress.org/support/topic/wpmt-is-a-must-have-admin-tool-for-wp/)
[Spencer](https://profiles.wordpress.org/pugboy/) October 20, 2025 1 reply
After thoroughly testing for a few months, I have rolled out WPMT to all of the
sites I build and manage for clients. It’s an indispensable tool for any WP developer
or designer, and is a must-have in my opinion. One of my favorite modules is the
media encoder that flawlessly converts images to WebP for the low price of zero!
Add WPMT to your toolkit!
### [Greatly simplifies plugin list](https://wordpress.org/support/topic/greatly-simplifies-plugin-list/)
[Robin Labadie](https://profiles.wordpress.org/robin-labadie/) August 29, 2025
1 reply
This plugin saves me custom config and 2 to 6 plugins depending on websites. I’m
using it more and more. It’s easy to use and efficient. I can only recommend! Thanks
for the work
### [Absolument parfait](https://wordpress.org/support/topic/absolument-parfait-3/)
[Benjamin Pongy AXOME](https://profiles.wordpress.org/redpik/) July 16, 2025 1
reply
Extension installée sur tous mes projets WP.La version gratuite couvre 99% de mes
besoins. Bravo Ludwig !
### [Au top !](https://wordpress.org/support/topic/au-top-67/)
[Aymeric Marquant](https://profiles.wordpress.org/aymericmqt/) July 16, 2025 1
reply
Plugin indispensable !
### [Top extension](https://wordpress.org/support/topic/top-extension-3/)
[jruiz15](https://profiles.wordpress.org/jruiz15/) April 16, 2025 1 reply
Très bon projet, simple et efficace en plus d’être très complet
[ Read all 26 reviews ](https://wordpress.org/support/plugin/wpmastertoolkit/reviews/)
## Contributors & Developers
“WPMasterToolKit (WPMTK) – All in one plugin” is open source software. The following
people have contributed to this plugin.
Contributors
* [ Ludwig You ](https://profiles.wordpress.org/ludwigyou/)
[Translate “WPMasterToolKit (WPMTK) – All in one plugin” into your language.](https://translate.wordpress.org/projects/wp-plugins/wpmastertoolkit)
### Interested in development?
[Browse the code](https://plugins.trac.wordpress.org/browser/wpmastertoolkit/),
check out the [SVN repository](https://plugins.svn.wordpress.org/wpmastertoolkit/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/wpmastertoolkit/)
by [RSS](https://plugins.trac.wordpress.org/log/wpmastertoolkit/?limit=100&mode=stop_on_copy&format=rss).
## Changelog
#### 2.19.0
Update: Pro Module: Add Essentials Shortcodes: Add `id-from-get` parameter support
for User, Post, and Term shortcodes to retrieve IDs from URL query parameters (e.
g. `id-from-get="post_id"`). When provided, `id-from-get` takes precedence over `
id`. Add this option to the shortcode generator in the dashboard.
Fix: CRITICAL–
Rewrite .htaccess write logic to use atomic temp-file + rename, preventing file
truncation on interrupted writes. Add mandatory timestamped backup before every
modification (last 5 kept), automatic restore on validation failure, and full logging
via WPMastertoolkit_Logs. Fix: CRITICAL – Rewrite wp-config.php write logic to use
atomic temp-file + rename, preventing file truncation on interrupted writes. Add
mandatory timestamped backup before every modification (last 5 kept), automatic
restore on validation failure. Fix `change_php_variable()` where `$pattern` was
undefined. Fix `add_constant()` ignoring `$var_export_skip` parameter. Replace all`
error_log()` calls with WPMastertoolkit_Logs.
#### 2.18.0
Update: Pro Module: Two-Factor Authentication: Add a global option to force Email
as default when no method is selected, show this option only when Email is active,
enforce backend fallback disabling when Email is off, and move default/method toggles
to the left for UI consistency.
#### 2.17.1
Fix: Module: Multiple User Roles: Ensure roles are correctly assigned and removed
for users, including administrators.
[See changelog for all versions.](https://wpmastertoolkit.com/en/changelog/)
## Meta
* Version **2.19.0**
* Last updated **2 weeks ago**
* Active installations **4,000+**
* WordPress version ** 6.0.0 or higher **
* Tested up to **6.9.4**
* PHP version ** 7.4 or higher **
* Language
* [English (US)](https://wordpress.org/plugins/wpmastertoolkit/)
* Tags
* [admin](https://pcd.wordpress.org/plugins/tags/admin/)[all in one plugin](https://pcd.wordpress.org/plugins/tags/all-in-one-plugin/)
[disable features](https://pcd.wordpress.org/plugins/tags/disable-features/)[Easy to use](https://pcd.wordpress.org/plugins/tags/easy-to-use/)
[security](https://pcd.wordpress.org/plugins/tags/security/)
* [Advanced View](https://pcd.wordpress.org/plugins/wpmastertoolkit/advanced/)
## Ratings
5 out of 5 stars.
* [ 26 5-star reviews ](https://wordpress.org/support/plugin/wpmastertoolkit/reviews/?filter=5)
* [ 0 4-star reviews ](https://wordpress.org/support/plugin/wpmastertoolkit/reviews/?filter=4)
* [ 0 3-star reviews ](https://wordpress.org/support/plugin/wpmastertoolkit/reviews/?filter=3)
* [ 0 2-star reviews ](https://wordpress.org/support/plugin/wpmastertoolkit/reviews/?filter=2)
* [ 0 1-star reviews ](https://wordpress.org/support/plugin/wpmastertoolkit/reviews/?filter=1)
[Add my review](https://wordpress.org/support/plugin/wpmastertoolkit/reviews/#new-post)
[See all reviews](https://wordpress.org/support/plugin/wpmastertoolkit/reviews/)
## Contributors
* [ Ludwig You ](https://profiles.wordpress.org/ludwigyou/)
## Support
Issues resolved in last two months:
1 out of 2
[View support forum](https://wordpress.org/support/plugin/wpmastertoolkit/)