Changelog

Automatic updates

Updates now arrive through your WordPress Updates screen — install once and future releases reach you like any other plugin update. No feature changes.

Three more locks, completing the set

WP Pro Admin now covers the whole promise: no new comments, no new plugins, no new versions, no new users, no remote write API, no code edits. All three new locks ship switched off.

• Registration Lockdown — no new accounts from the registration form, the REST API, or plugin code. The administrator guard is on by default; blocking plugin-created accounts is opt-in because it breaks WooCommerce checkout. Blocked administrator attempts are logged.
• Disable XML-RPC — closes xmlrpc.php, removes every method including pingback.ping and system.multicall, and strips the X-Pingback header and RSD link.
• Disable File Editing — removes the plugin and theme file editors by denying the capability, so it stays reversible from the settings screen.

A complete rewrite

Versions 1.x were a different product. WP Pro Admin is now a set of site locks, sharing nothing with 1.x but the name.

• Disable Comments — one switch, no settings. Rejects direct POSTs to wp-comments-post.php and REST comment creation, not just the form. Hides existing comments without writing to your database.
• Version Lock — pin any plugin to its installed version. Shows the pinned and latest versions, and flags a pending security release rather than hiding it.
• Installation Lockdown — freeze installs, uploads and updates, with an optional allowlist so a security plugin can stay current.
• Comment cleanup — optional, confirmed, batched deletion of spam and trashed comments. Order notes and product reviews are excluded unless you opt in.
• New settings screen — one panel per feature, saving over AJAX, toasts instead of dashboard notices.
• Guarantees enforced by tests: a disabled feature registers zero hooks, and nothing written outlives switching a feature off.