OpenWPClub's MU Plugins

MU (Must-Use) Plugins are a special type of WordPress plugin that:

• Always active - Cannot be deactivated from the WordPress admin
• Load automatically - No activation required
• Load early - Before regular plugins and themes
• No updates - Must be manually updated (no auto-updates)
• Single files only - Each plugin must be a single PHP file (no subdirectories)

⚠️ Important: Read Before Using

DO NOT blindly copy all these plugins to your site. Each plugin modifies WordPress behavior in specific ways. You should:

1. Understand what each plugin does before installing it
2. Only use plugins that solve problems you actually have
3. Test on a staging site first before deploying to production
4. Consider your specific use case - what works for one site may break another

Installation Instructions

Zero configuration required - the autoloader loads ALL PHP files from ALL subdirectories. Simply delete any plugins or folders you don't need.

How It Works

1. The autoloader scans all subdirectories
2. Loads every .php file it finds
3. No configuration needed

Don't want a plugin? Delete it. Don't want a category? Delete the folder.

Plugin Name	Description	Version	WP	PHP
404 Logger	Logs 404 errors to a file for security monitoring and broken link detection.	1.0.0	6.6+	7.4+
Add Footer Signature	Adds a developer signature comment to the website footer for attribution and contact purposes.	1.0.0	6.6+	7.4+
Admin Footer Info	Shows PHP version, MySQL version, WordPress version, and memory usage in the admin footer.	1.0.0	6.6+	7.4+
AVIF Support	Add AVIF image format support for uploads and display (next-generation image format, better compression than WebP)	1.0.0	N/A+	N/A+
Cleanup Old Revisions	Automatically removes old post revisions older than 30 days and limits revisions to 5 per post.	1.0.0	6.6+	7.4+
Cron Monitor	Records the timestamp of the last WordPress cron execution.	1.1.0	6.6+	7.4+
Custom Login Logo	Replaces the WordPress logo on the login page with your site logo, icon, or name. Links to your homepage instead of wordpress.org.	1.0.0	6.6+	7.4+
Disable Admin Email Confirmation	Disables the periodic admin email confirmation prompt that WordPress shows every 6 months.	1.0.0	6.6+	7.4+
Disable Admin New User Email	Prevents admin from receiving email notifications when new users register. Users still receive their welcome email.	1.0.0	6.6+	7.4+
Disable AI Crawlers	Blocks all known AI crawlers and bots from accessing your site content via robots.txt.	1.0.0	6.6+	7.4+
Disable Application Passwords	Disables the Application Passwords feature introduced in WP 5.6 to reduce attack surface for sites not using it.	1.0.0	6.6+	7.4+
Disable Autosave	Disables WordPress autosave functionality to improve performance and prevent unwanted draft saves.	1.0.0	6.6+	7.4+
Disable Block Library CSS	Removes Gutenberg block library CSS from frontend if not using blocks, reducing page weight.	1.0.0	6.6+	7.4+
Disable Block Notes	Disables the collaboration notes feature in the block editor introduced in WordPress 6.9.	1.0.0	6.9+	7.4+
Disable Command Palette	Disables the Command Palette (Ctrl+K / Cmd+K) feature in the WordPress admin.	1.0.0	6.3+	7.4+
Disable Comments Globally	Completely disables comments, trackbacks, and pingbacks across the entire site. Removes all comment-related functionality from admin.	1.0.0	6.6+	7.4+
Disable Dashicons Frontend	Remove Dashicons CSS from frontend for non-logged-in users to improve performance (saves ~40KB)	1.0.0	N/A+	N/A+
Disable Emoji Support	A utility plugin to disable emoji support.	1.0.0.	6.6+	7.4+
Disable File Editing	Prevents editing of theme/plugin files from admin	1.0.0	N/A+	N/A+
Disable FloC	A utility plugin to disable FLoC.	1.0.0.	6.6+	7.4+
Disable Heartbeat API	Disables or limits the Heartbeat API to reduce server load. Keeps it active only in the post editor where it's needed.	1.0.0	6.6+	7.4+
Disable oEmbed	Disables WordPress oEmbed functionality to reduce HTTP requests and improve performance. Use if you don't embed external content.	1.0.0	6.6+	7.4+
Disable Pingback	Disables pingback XML-RPC method to prevent IP disclosure attacks behind firewalls/proxies.	1.0.0	6.6+	7.4+
Disable Plugin Update Checks	Disables automatic plugin update checks to reduce server load. Useful for managed/frozen environments where updates are controlled manually.	1.0.0	6.6+	7.4+
Disable Post by Email	Disables WordPress post-by-email functionality to improve security and reduce attack surface.	1.0.0	6.6+	7.4+
Disable Unnecessary Link Headers	A utility plugin to disable Unnecessary Link Headers.	1.0.0.	6.6+	7.4+
Disable User Enumeration	Prevents user enumeration via author archives and REST API to protect usernames from discovery.	1.0.0	6.6+	7.4+
Disable User Registration	Completely disables user registration via wp-login.php, REST API, and all registration endpoints	1.0.0	N/A+	N/A+
Disable Welcome Panel	Removes the welcome panel from the WordPress dashboard for a cleaner admin experience.	1.0.0	6.6+	7.4+
Disable WP Version	Remove WordPress version	1.0.0.	6.6+	7.4+
Disable XML-RPC	A utility plugin to disable XML-RPC.	1.0.0.	6.6+	7.4+
Enable SVG Upload	Enables SVG file uploads with security sanitization to prevent XSS attacks. Adds media library preview support.	1.1.0	6.6+	7.4+
Environment Indicator	Displays a visual indicator in the admin bar showing the current environment (Development/Staging/Production) to prevent editing the wrong site.	1.0.0	6.6+	7.4+
Hosting Disallowed Plugins	Disallows plugins known to cause issues on managed hosting platforms. Based on popular hosting platforms.	1.1.0	6.6+	7.4+
Lazy Load Gravatars	Defers loading of Gravatar images until they're needed, reducing initial page load time and external HTTP requests.	1.0.0	6.6+	7.4+
Limit Login Attempts	Blocks IP addresses after 4 failed login attempts for 24 hours to prevent brute force attacks.	1.0.0	6.6+	7.4+
Limit Post Revisions	Limits the number of post revisions stored in the database to reduce bloat and improve performance.	1.0.0	6.6+	7.4+
Limit Upload Size by Role	Sets different maximum upload file size limits for different user roles to prevent large uploads from non-admin users.	1.0.0	6.6+	7.4+
OpenWP Club Core	Core functionality and branding for OpenWP Club managed WordPress sites.	1.0.0	6.6+	7.4+
Optimize WooCommerce Assets	Only loads WooCommerce scripts and styles on shop-related pages to improve site performance.	1.0.0	6.6+	7.4+
Remove Author Metabox	Removes the author meta box from post and page edit screens in WordPress admin.	1.0.0	6.6+	7.4+
Remove H1 Editor	Removes H1 heading option from both Classic Editor (TinyMCE) and Block Editor (Gutenberg) to improve SEO structure.	1.1.0	6.6+	7.4+
Remove jQuery Migrate	Removes jQuery Migrate script from WordPress to reduce page weight. Only use if your theme and plugins don't require legacy jQuery support.	1.0.0	6.6+	7.4+
Remove Plugin Bloat	Removes admin bar items and source code footprints from popular plugins like WP Rocket, Redis Cache, etc.	1.0.0	6.6+	7.4+
Remove WordPress Branding	Removes WordPress logo, admin footer text, and blocks access to WordPress about pages for white-label admin experience.	1.0.0	6.6+	7.4+
Remove WP Embed	Remove WordPress embed script from frontend to improve performance.	1.0.0	6.6+	7.4+
REST API Rate Limiting	Limits REST API requests per IP to prevent abuse. 60 requests/minute for guests, 200 for authenticated users.	1.1.0	6.6+	7.4+
Restrict REST API Blocks	Limits access to block-related REST API endpoints to authenticated users only.	1.0.0	6.6+	7.4+
Sanitize File Name	Automatically removes accents and special characters from uploaded file names for better compatibility.	1.0.0	6.6+	7.4+
Simple Maintenance Mode	Simple maintenance mode that shows a branded page. Toggle by creating/deleting .maintenance file in wp-content.	1.0.0	6.6+	7.4+
WooCommerce Store Manager Mode	Provides a simplified "Store Manager" view for WooCommerce users. Toggle between full WordPress admin and a decluttered, WooCommerce-focused interface via the admin bar.	1.1.0	6.6+	7.4+