WP EXtra — WordPress Security Plugin
WP EXtra – One Click Optimize
by COP · WordPress.org page · Website
WP EXtra has 6,000+ active installs on WordPress.org and 112,928 downloads all time. We have tracked it since September 4, 2026; download trends appear after 30 days of data. The last update was on August 28, 2026, tested up to WordPress 7.1.
WP EXtra at a glance
Is WP EXtra well maintained?
Features
The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.
- Disable XML-RPC & REST API: Block pingback spam, DDoS vectors, and lock down REST API endpoints for non-logged-in visitors
- Hide WordPress Version: Remove generator meta tags and version query strings from HTML source
- Block Author Enumeration: Stop bot scanners from discovering admin usernames via ?author=N and REST API user routes
- HTTP Security Headers: Send modern security headers (X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy)
- Disable File Editors: Lock theme and plugin code editors in the admin area (DISALLOW_FILE_EDIT)
- Disable Core Auto-Updates: Maintain full control over WordPress core version upgrades
- Block Outgoing HTTP Calls: Block external API calls to specific external domains to prevent timeouts
WP EXtra reviews and ratings
41 reviews on WordPress.org, with the most recent ones as their authors posted them.
41 reviews
- 5★
-
40
- 4★
-
0
- 3★
-
0
- 2★
-
0
- 1★
-
1
-
An expert developer who puts real passion into their work
I upgraded to the Pro version primarily because of the incredibly fast support and the developer's high level of expertise. I started with the free version and everything worked well. When I encountered a conflict with another plugin, the developer was very quick to assist. While the free version provided a great experience, I wanted to unlock the additional features, which led me to purchase the Pro version. The whole process was seamless, and I am extremely satisfied with both the product and the developer
Dương Thành Thái -
Better Than WPRocket
I chose this plugin because WPRocket was causing problems in WordPress. The free version of this one did the same thing without causing problems in WordPress, and it had many more features than just optimization. I have not had the chance to use the other features yet and would like to learn how. But for the moment the WPExtra plugin has solved a major problem for me.
eengnerd -
Sản phẩm tốt
hỗ trợ nhiệt tình
BHOST.VN -
Lỗi Fatal TypeError
Lỗi Fatal TypeError
nhanqua -
Plugin quá xịn xò, quá ngon
Plugin quá xịn xò, quá ngon Quá ngonMừ điểm
Nguyễn Xuân Bình Minh -
Best Admin menu organizer. But...
Select icon does not work, but the best menu organizer of them all!
Bluebunny
WP EXtra alternatives
Plugins that solve the same problem, ranked by how closely they overlap with WP EXtra.
-
Simply Static 30,000+ installs · 4.5 -
WP Hide & Security Enhancer 50,000+ installs · 4.4 -
FancyBox for WordPress 30,000+ installs · 4.6 -
Htaccess File Editor 40,000+ installs · 5.0 -
Perfect Images 60,000+ installs · 4.8
Details
Optimize your site instantly with one-click activation. WP Extra offers easy fixes and features for WordPress.
The full description, screenshots and every review live on the WordPress.org page.
Rankings WP EXtra competes in
Tags
- extra
- functions
- optimizations
- security
- tweaks
More from COP
-
UX Flat 1,000+ installs
- Version
- 8.7.1
- Last updated
- Aug 28, 2026
- First published
- Jan 18, 2019
- Requires WordPress
- 6.8
- Tested up to
- 7.1
- Requires PHP
- 8.0
- Pricing
- Free on WordPress.org
WP EXtra FAQ
What does WP EXtra do?
According to its WordPress.org readme, WP EXtra offers Disable XML-RPC & REST API: Block pingback spam, DDoS vectors, and lock down REST API endpoints for non-logged-in visitors, Hide WordPress Version: Remove generator meta tags and version query strings from HTML source, Block Author Enumeration: Stop bot scanners from discovering admin usernames via ?author=N and REST API user routes, HTTP Security Headers: Send modern security headers (X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy) and Disable File Editors: Lock theme and plugin code editors in the admin area (DISALLOW_FILE_EDIT).
How many active installs does WP EXtra have?
WordPress.org reports 6,000+ active installs for WP EXtra as of September 7, 2026.
Is WP EXtra still maintained?
Yes. The last release was on August 28, 2026 and it is tested up to WordPress 7.1.
Does WP EXtra have good support?
On the WordPress.org forum, 0 of 1 recent support threads for WP EXtra are marked resolved. That is the developer's free support; a paid version usually comes with its own channel.
Is WP EXtra free?
WP EXtra is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.