by Ludwig You 5 (28 reviews)

WPMasterToolKit (WPMTK) – All in one plugin

Name: WPMasterToolKit (WPMTK) – All in one plugin
Rating: 5.0 (28 reviews)
Author: Ludwig You

Modular WordPress toolkit for security, performance, SMTP, WebP images, code snippets, redirects, administration and more.

WPMasterToolKit (WPMTK) ranks #3,149 among WordPress.org plugins with 5,000+ active installations, is #279 of 5,058 in the Security category, a 5/5 rating from 28 reviews, and was last updated Sep 24, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1.4

v2.25.0 Current Version v2.25.0

Updated 1 month ago Last Update on 24 Sep, 2026

Refreshed 2 days ago Last Refreshed on

#279 of 5,058 in Security Top 5% by installs Downloads -38.5% this week

View on WordPress.org

Rank

#3,149

— No change

Active Installs

5K+

-5.7%

KW Avg Position

36.8

0.5 better

Downloads

78.5K

+10 today

Support Resolved

100%

— No change

Rating

100%

Review 5 out of 5

5 (28 reviews)

Next Milestone 6K

Total Progress 42.7%

5K+ 6K+

226

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 573 more installs to reach 6K+

Rank Changes

Current #3,149

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

5.0

28 reviews

Overall 100%

28 (100%)

0 (0%)

Support Threads Overview

Resolved

Unresolved

Total Threads

Resolved

Unresolved

100%

Resolution Rate

Security History

Source: WPVulnerability

5 known vulnerabilities on record · 5 in the last 24 months · checked 1 month ago

Jan 15, 2026

WPMasterToolKit (WPMTK) – All in one plugin [wpmastertoolkit] < 2.14.1

CVE-2026-24388 · Fixed in v2.14.1
Dec 11, 2025

WPMasterToolKit (WPMTK) – All in one plugin [wpmastertoolkit] < 2.13.1

CVE-2025-14166 · Fixed in v2.13.1
Apr 23, 2025

WPMasterToolKit (WPMTK) – All in one plugin [wpmastertoolkit] < 2.6.0

CVE-2025-3300 · Fixed in v2.6.0
Dec 30, 2024

WPMasterToolKit (WPMTK) – All in one plugin [wpmastertoolkit] < 1.14.0

CVE-2024-56249 · Fixed in v1.14.0
Dec 30, 2024

WPMasterToolKit (WPMTK) – All in one plugin [wpmastertoolkit] < 1.14.0

CVE-2024-56248 · Fixed in v1.14.0

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 2.25.0
Last Updated: Sep 24, 2026
Requires WP: 6.0+
Tested Up To: 7.1.4
PHP Version: 7.4 or higher
Author: Ludwig You

Support & Rating

Rating: ★ ★ ★ ★ ★ 5
Reviews: 28
Support Threads: 1
Resolved: 100%

Keywords

admin all in one plugin disable features Easy to use security

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,757

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

Akismet Anti-spam: Spam Protection

5M+ installs

Wordfence Security – Firewall, Malware Scan, and Login Security

5M+ installs

#11

Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention

View all Security-and-spam-protection plugins

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners and administrators who want to manage many site functions from one dashboard. It solves the need for separate plugins by bundling tools like content duplication, SMTP email, code snippets, and security hardening into a single all-in-one toolkit.

Content duplication for posts/pages
Content ordering for hierarchical types
SMTP Mailer configuration
Code Snippets without editing functions.php
Disable Gutenberg per post type
Child theme generator
SVG Upload support
Disable XML-RPC

Frequently Asked Questions

Common questions about WPMasterToolKit (WPMTK) – All in one plugin

WPMasterToolKit is a modular all-in-one WordPress plugin for site administration, security, performance, media, email delivery and development. It brings together 100+ tools in one dashboard, including code snippets, content duplication, SMTP, WebP conversion, login protection, redirects and database utilities.

Yes. The free version includes 98 modules for WordPress administration, security, performance, media management and development. WPMasterToolKit Pro adds 37 advanced modules and premium features such as two-factor authentication, vulnerability scanning, AVIF conversion, advanced SMTP providers, White Label and Pixel Tag Manager.

No. WPMasterToolKit is modular, so you can enable only the features you need. Disabled modules do not load their feature logic on your website. This also helps prevent conflicts caused by activating overlapping tools.

WPMasterToolKit is designed to load modules only when they are enabled. Actual performance depends on your hosting, theme, other plugins and the modules you select. Several tools can also help reduce frontend work, including Heartbeat Control, WebP image conversion and options to disable emojis, cart fragments, Dashicons or jQuery Migrate when they are not needed.

WPMasterToolKit is not a replacement for a dedicated WordPress SEO plugin, but it includes technical tools that can support SEO and website performance. These include WebP and AVIF image optimization, robots.txt management, redirect management, media metadata tools, local Google Fonts, external link attributes and control over the default WordPress sitemap.

It can replace multiple single-purpose plugins when its modules cover the features you use. Common examples include plugins for duplicate posts, SMTP email, code snippets, WebP conversion, login URL changes, login attempt limits, redirects, maintenance mode, SVG uploads and child theme generation. Test changes on a staging site and avoid running two plugins that provide the same feature.

WPMasterToolKit includes security hardening tools such as Limit Login Attempts, Move Login URL, strong password enforcement, user enumeration protection, XML-RPC control, security headers and file access restrictions. These features can replace several security tweaks, but they are not a guarantee against every threat and may not replace a dedicated firewall, malware scanner, backup service or security monitoring platform for high-risk websites.

Enable the Move Login URL module and choose a custom login path. The module changes access to the default WordPress login URL to reduce automated login traffic. WPMasterToolKit Pro can additionally block unauthenticated access to /wp-admin with a server-side 403 response.

Enable the Disable XML-RPC module from the WPMasterToolKit dashboard. Disabling XML-RPC can reduce exposure to attacks that target this legacy interface, but first confirm that your mobile app, remote publishing service or integration does not depend on it.

Yes. The Disable REST API module restricts REST API access for unauthenticated visitors and removes related discovery links. Because themes, plugins and external applications may rely on the REST API, test this setting before using it on a production website.