Admin Optimizer

Admin Optimizer is a modular all-in-one WordPress plugin built to improve performance, harden security, and streamline your admin workflow — without the bloat of installing a dozen separate plugins.

Whether you need to clean your database, manage redirects, inject custom code snippets, protect your login page, or build custom post types, Admin Optimizer covers it all in one place.

Key highlights:
– Improve site speed with database optimization and script management
– Strengthen security with 2FA, login protection, and attack blocking
– Manage URL redirects and monitor 404 errors from the dashboard
– Add custom CSS, JavaScript, HTML, and PHP code snippets without a child theme
– Build forms, custom post types, and Pro custom fields without extra plugins
– Send reliable transactional email via SMTP
– Access migration options through the Yipresser Migrator for Admin Optimizer

Instead of installing 10+ plugins, you can enable only the modules you need — all from a single, lightweight plugin.

Why Admin Optimizer?

• Replace multiple single-purpose plugins with one
• Modular system — activate only what you need, disable the rest
• Lightweight — no unnecessary scripts or styles loaded on your site
• Built with standard WordPress hooks (no core hacks)
• Beginner-friendly interface, developer-safe architecture

What can it replace?

Admin Optimizer can replace plugins like:

• Database cleaner and optimizer plugins
• Redirect manager and 301 redirect plugins
• Limit login attempts plugins
• XML sitemap plugins
• Custom post type and taxonomy plugins
• SMTP email plugins
• Security hardening plugins
• Form builder plugins
• Custom code / code snippets plugins
• Members/User roles editor plugins

…and more.

Modules:

See all modules >>

Performance

• Database Cleaner: Schedule automatic optimization and cleaning of the WordPress database to improve site speed. Pro adds options to manually clean individual DB tables, track unused options, and remove autoload bloat from the Options table.
• Heartbeat Control: Adjust the WordPress Heartbeat API interval to reduce server load and improve the editor experience.
• Disable Emojis: Remove all emoji-related styles and scripts from the site to reduce HTTP requests.
• Disable jQuery Migrate: Prevent the jQuery Migrate script from loading on the frontend for faster page loads.
• Disable 404 URL Redirect: Stop WordPress from redirecting requests to a similar-looking URL when a page is not found, preventing unintended content from being shown.
• Remove oEmbed links: Remove the “json+oembed” and “xml+oembed” discovery links from the site header, preventing other sites from embedding your content.

Security

• Block Failed Login: Limit failed login attempts and block brute-force attacks. Pro adds customisable lockout duration, a full lockout mode, and the ability to hide the login form during lockout.
• Two-Factor Authentication (2FA): Enable TOTP-based two-factor authentication for your users. Pro adds options to enforce 2FA for specific user roles, block logins without 2FA, and allow trusted device saving.
• Custom Login URL: Hide the wp-login.php URL and set a custom secret login URL to protect your login page from bots.
• Disable XML-RPC: Disable the XML-RPC protocol, which has no built-in encryption or authentication hardening and is a common attack vector.
• Hide WordPress Version: Remove the WP version tag from the site header to obscure your WordPress installation.
• Remove X-Pingback header: Remove the “X-Pingback” HTTP header to prevent pingback abuse.
• Remove X-Powered-By header: Remove the “X-Powered-By” HTTP header to hide PHP and server information from attackers.
• Remove REST API link: Remove REST API discovery links from the site header for non-authenticated users.
• Remove Really Simple Discovery (RSD) link: Remove the RSD link used by XML-RPC clients to discover your endpoint.
• Remove Shortlink: Remove the shortlink tag from the site header.

Read the full description on the official page →