You decide what changes on this site.
WP Pro Admin is a free WordPress plugin that locks down the things that change your site behind your back — and gives you the everyday content tools that should have been built in. Quiet, reversible, and out of your way.
free · GPL · works on WordPress 6.0+
Six locks. One promise.
Nothing appears on your site without you: no new comments, no new plugins, no new versions, no new users, no remote write API, no code edits.
Disable Comments
Comments are hidden, never deleted. Direct bot posts to
wp-comments-post.php are rejected too — the part most plugins skip.
Version Lock
Pin a plugin to its installed version and silence its update nag. Security releases are never suppressed silently.
Installation Lockdown
No plugin or theme installs, uploads or updates. Uses capabilities, not
DISALLOW_FILE_MODS, so you're never locked out of your own site.
Optional allowlist keeps your security plugin updating.
Registration Lockdown
Stop new user registrations, with a guard against sneaky administrator creation. Safe defaults: WooCommerce checkout and membership plugins keep working.
Disable XML-RPC
Closes the remote write API most sites never use and every bot probes.
Disable File Editing
No code edits from the dashboard.
The content tools WordPress forgot.
shipping in 2.2.0Duplicate
Copy any post, page or custom post type in one click.
Live Draft
Rewrite a published page without taking it offline; merge back into the same URL when ready.
Reorder
Drag-and-drop order for posts and taxonomy terms — applied to your front-end queries correctly.
Replace Media
Swap a file and keep its URL. Nothing breaks, nowhere.
More on the way
One screen. No reloads.
Everything lives on a single settings screen built to be fast and then forgotten.
-
Type to find any setting. The nav filters as you type — no hunting through tabs.
-
Switches save themselves. Flip one and it's saved over AJAX — a quiet toast, never a page reload.
-
Sub-settings appear when they matter. One panel per feature; options show up only once a lock is engaged.
-
Its assets load on its screen only. The rest of your admin never pays for it.
Questions, answered.
Will this delete my comments?
Not unless you ask it to. Turning Disable Comments on only hides them — a test asserts the comment rows are untouched after a full enable-and-disable cycle.
There is a separate cleanup button that does delete, and it deletes spam and trashed comments only unless you tick the box to include approved ones. It shows the exact count, asks you to confirm, and cannot be undone.
Can I turn it back off?
Yes, instantly. Every feature works through WordPress filters, so nothing was written to your database to undo. Disable the feature and your site is exactly as it was.
Is WP Pro Admin on wordpress.org?
Not yet — submission is planned. Until then, download it from this site and install the zip; the plugin updates itself through the normal WordPress Updates screen either way.