Make two-factor mandatory for all WordPress users (emailed-code floor, per-role exclusions) and lock the XML-RPC/REST API-login path to an allowlist. Optional must-use mode.
This must-use plugin loads all plugins inside subdirectories of the /mu-plugins directory.
Security Tools is a comprehensive Must-Use (MU) WordPress plugin designed to provide advanced security management, administrative control, and interface customization capabilities. The plugin operates invisibly, hidden from other administrators while maintaining full…
Must-Use version of the Disable Comments plugin for WordPress
This small WordPress plugin include all plugins in subdirectories from Must Use plugin folder
Loads regular plugins from the plugins directory as must-use plugins, enforcing their activity while maintaining the typical update flow.
The Systems Interface for the Digital Sovereign: High-performance container bedrock and must-use runtime.
WordPress must-use plugin that stops core updates from truncating long Arabic URLs.
Lightweight must-use WordPress plugin with a settings page. Hides WP version, enables & sanitizes SVG uploads, configures SMTP, supports common analytics/measurement codes, and is fully compatible with WordPress Multisite.
A WP must-use plugin to preserve your ACF Pro license info after migrating data via WP Migrate DB.
Security baseline for git-deployed WordPress fleets: automatic core patching now, hardening modules next. Drop-in must-use plugin.
A must-use WordPress plugin that turns off XML-RPC. No settings, no admin page: drop it in, and the XML-RPC surface is gone.