PluginScout

Invizo Headless Mode — WordPress Security Plugin

by Invizo · WordPress.org page

v1.0.3 Tested up to WP 7.0.7 PHP 8.1+

Invizo Headless Mode has 20+ active installs on WordPress.org and 324 downloads all time. It was downloaded 78 times in the last 30 days. The last update was on July 1, 2026, tested up to WordPress 7.0.7.

Invizo Headless Mode at a glance

Active installs
20+
Total downloads
324
Downloads, last 30 days
78
30-day growth
–
downloads vs the previous 30 days

Is Invizo Headless Mode well maintained?

Support threads resolved
No open threads
nothing waiting on the WordPress.org forum
WordPress compatibility
Behind
tested up to WordPress 7.0.7, not yet with the current 7.1.3

Features

The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.

  • Disable WP frontend access by redirecting public WordPress routes to your frontend
  • Keep REST API, AJAX, cron, static assets, and WPGraphQL requests available
  • Add strict CORS headers for your frontend origin or origin allowlist
  • Generate signed draft preview links for headless WordPress preview workflows
  • Optional custom admin/login slug for hiding default login URLs
  • Return generic JSON errors for blocked /wp-admin/ and /wp-login.php requests
  • Customize the WordPress login page logo, colors, background image, and back-to-site link visibility
  • Disable XML-RPC, hide the WordPress version, and block common user enumeration routes
  • Disable RSS/Atom feeds, RSD, WLW manifest, oEmbed discovery, shortlinks, and related frontend discovery links
  • Rewrite generated post, page, custom post type, and term permalinks to the headless frontend URL
  • Redirect logout to the frontend and login to WordPress admin

Download and install history

148 downloads over the last 50 days. Snapshots taken daily from WordPress.org.

Downloads per day
Invizo Headless Mode downloads per day05101520Sep 5Sep 29Oct 24Downloads per day
Active installs
Invizo Headless Mode active installs05101520Sep 5Sep 29Oct 24Active installs
Rating out of 5
Invizo Headless Mode rating00.30.50.81Sep 5Sep 29Oct 24Rating out of 5
Reviews
Invizo Headless Mode review count00.30.50.81Sep 5Sep 29Oct 24Reviews

Details

Turn WordPress into a headless CMS backend with frontend redirects, CORS controls, draft previews, login branding, and security hardening.

The full description, screenshots and every review live on the WordPress.org page.

Rankings Invizo Headless Mode competes in

Tags

  • cors
  • headless
  • rest-api
  • security
  • wp-headless

More from Invizo

Version
1.0.3
Last updated
Jul 1, 2026
First published
Jul 1, 2026
Requires WordPress
6.4
Tested up to
7.0.7
Requires PHP
8.1
Pricing
Free on WordPress.org

Invizo Headless Mode FAQ

What does Invizo Headless Mode do?

According to its WordPress.org readme, Invizo Headless Mode offers Disable WP frontend access by redirecting public WordPress routes to your frontend, Keep REST API, AJAX, cron, static assets, and WPGraphQL requests available, Add strict CORS headers for your frontend origin or origin allowlist, Generate signed draft preview links for headless WordPress preview workflows and Optional custom admin/login slug for hiding default login URLs.

How many active installs does Invizo Headless Mode have?

WordPress.org reports 20+ active installs for Invizo Headless Mode as of October 24, 2026.

Is Invizo Headless Mode still maintained?

Yes. The last release was on July 1, 2026 and it is tested up to WordPress 7.0.7.

Is Invizo Headless Mode free?

Invizo Headless Mode is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.