UAU Ready
Description
WP Extended Pro is a plugin that adds administrative modules to WordPress to manage dashboard columns, internal search, SMTP delivery, code snippets, security settings, and user controls in a centralized interface. It serves administrators, developers, and site managers who need to reduce separate plugins, organize recurring wp-admin tasks, and keep technical settings accessible without spreading functions across different screens.
Key Features of WP Extended Pro
- Administrative modules
Centralizes dashboard settings in configurable areas of WordPress. - Column management
Allows you to adjust the columns displayed in admin lists. - SMTP configuration
Routes WordPress emails through an authenticated SMTP server. - Code snippets
Organizes custom snippets without editing theme files. - Security settings
Combines controls to reduce common dashboard exposures.
Benefits of WP Extended Pro
- Fewer add-on plugins
Consolidates administrative routines that normally require separate extensions. - More organized dashboard
Makes it easier to find technical settings used day to day. - More predictable maintenance
Reduces direct changes to sensitive site files. - More operational control
Helps teams standardize recurring tasks in WordPress.
Who Is WP Extended Pro Intended For?
- WordPress site administrators who need to centralize technical dashboard settings.
- Developers who manage snippets, SMTP, columns, and recurring configurations.
- Agencies and teams responsible for maintaining multiple WordPress sites.
How to Download WP Extended Pro
WP Extended Pro is available for download here on Ultrapack. After downloading the .zip file, go to Plugins > Add New > Upload plugin, select the file, and activate it through the WordPress dashboard. After activation, configure the modules as needed for the site.
WP Extended Pro fits WordPress environments that need leaner administration without relying on multiple small extensions for routine tasks. By bringing together SMTP, snippets, search, columns, users, and security into a modular set, the plugin helps keep the dashboard more controlled and reduces configuration points scattered across the installation.
Frequently asked questions
Is WP Extended Pro GPL-licensed?
Yes. WP Extended Pro is distributed under the GPL (GNU General Public License). You may legally use, modify and redistribute it on as many sites as you want.
Can I use WP Extended Pro on multiple sites?
Yes. You can install WP Extended Pro on as many sites as you want. Only automatic updates through Ultrapack Auto Updater have a limit: from 3 to 80 sites, depending on the plan.
How much does WP Extended Pro cost at Ultrapack?
WP Extended Pro costs US$2.99 as a single purchase, and it is also included in the subscription plans starting at US$12/mo (VIP I).
Does WP Extended Pro include updates?
Yes. The current version of WP Extended Pro is 3.3.0, published at Ultrapack on Sep 10, 2026. Subscribers update straight from the WordPress dashboard with UAU (Ultrapack Auto Updater).
Is WP Extended Pro scanned before publication?
Yes. Every version of WP Extended Pro goes through a malware scan (ClamAV and YARA rules, at UltraHub) before it is published.
What are the requirements for the plugin WP Extended Pro?
Requires WordPress 5.6 or higher and PHP 8.1 or higher. Tested up to WordPress 7.1.
What changed in this version
Version 3.3.0 10 September 2026
- Added: Admin: Every module's settings now live under a single "WP Extended" screen, and moving between them no longer reloads the page.
- Added: Translations: Now ships in German, Spanish, French, Dutch, Brazilian Portuguese and European Portuguese.
- Added: Code Snippets: Added a Safe Mode switch to the editor, so you can turn every snippet off from the interface instead of by editing a URL.
- Improved: Limit Login Attempts: Added an option to trust a proxy header when detecting a visitor's IP address, for sites behind Cloudflare or a load balancer.
- Improved: Global: Updated module documentation links to our new documentation URLs.
- Improved: Menu Editor: A role granted a page now receives that page's capability only while WordPress is serving that page, not for the rest of the admin session. A delegated page that saves over the REST API or AJAX renders read-only.
- Improved: Global: Now requires a minimum of PHP 8.1.
- Fixed: Menu Editor: Fixed an issue where granting a role access to a page handed that role the page's capability everywhere in the admin, which could turn an Editor into a full administrator.
- Fixed: Menu Editor: Fixed an issue where role restrictions had no effect on plugin pages, and where a denied page could still be reached through its object-edit URL.
- Fixed: Menu Editor: Fixed an issue where saving without making a change reshuffled the admin menu.
- Fixed: Media Replace: Fixed an issue where an Author could delete another user's attachments through the REST endpoint.
- Fixed: Admin Columns: Fixed an issue where a custom meta column did not escape its value.
- Fixed: Rollback Manager: Fixed an issue where version lists were fetched over an insecure connection.
- Fixed: SVG Upload: Fixed an issue where the sanitiser could be bypassed by certain attributes and animation elements.
- Fixed: Code Snippets: Fixed an issue where a snippet description could inject PHP into the generated file.
- Fixed: Code Snippets: Fixed an issue where a snippet pasted with its own opening PHP tag could take the site down, and where updating, enabling and deleting failed on hosts that block PUT and DELETE requests.
- Fixed: Admin Customiser: Fixed an issue where colour settings were not escaped on the login page.
- Fixed: Limit Login Attempts: Fixed an issue where a spoofed IP address could bypass the lockout, or lock out every visitor behind a proxy.
- Fixed: Limit Login Attempts: Fixed an issue where diagnostic REST routes were registered in production builds.
- Fixed: Limit Login Attempts: Restored the unblock action, and fixed sorting and the status column.
- Fixed: Settings: Fixed an issue where imported settings were saved without being sanitised or validated.
- Fixed: Export Posts / Export Users / SMTP Email: Fixed an issue where CSV exports were not escaped against spreadsheet formula injection.
- Fixed: Export Posts / Export Users: Fixed an issue where meta field exports returned blank values [Pro].
- Fixed: User Switching: Fixed an issue where a favourited user's display name was not escaped in the admin bar.
- Fixed: Folder Manager: Fixed an issue where a bulk move to a folder did not check permissions for each post.
- Fixed: Folder Manager: Fixed an issue where a post duplicated from inside a folder was dropped out of it, and where sort links and status views kept the folder you had just left.
- Fixed: User Enumeration: Fixed an issue where author requests were not blocked.
- Fixed: Hide Author Slugs: Fixed an issue where author slugs were encrypted with a weak key.
- Fixed: Hide Author Slugs: Fixed an issue where the Users screen crashed with a type error.
- Fixed: Custom Login URL: Fixed an issue where the disabled-login message was not escaped and returned the wrong status code.
- Fixed: Notices: Fixed an issue where notices could be read without logging in, and dismissed by any subscriber.
- Fixed: Post ID Display: Fixed an issue where the module crashed when no post types were selected.
- Fixed: Hide Admin Notices: Fixed an issue where the module crashed when nothing was selected for update notifications, and where update notices were not suppressed.
- Fixed: Duplicate Posts & Pages: Fixed an issue where the module required Pro. It is free again, with its settings remaining Pro.
- Fixed: Duplicate Post: Fixed an issue where duplicating an untitled post with content deselected returned an error instead of a clear message, and where editor scripts loaded on the Widgets screen.
- Fixed: SMTP Email: Fixed an issue where a duplicate charset in the Content-Type header corrupted accented characters in some mail clients, and where the Download Logs button did nothing.
- Fixed: WP-CLI: Fixed an issue where enabling a module that was already enabled turned it off.
- Fixed: Post Type Switcher: Fixed an issue where every dropdown option was duplicated.
- Fixed: Post Type Order: Fixed an issue where duplicate ordering was not always detected.
- Fixed: Quick Add Post: Fixed an issue where the post-type restriction had no effect.
Version 3.2.7 21 June 2026
- Added: Public Preview Links (new Pro module): Generate publicly accessible preview links for draft, pending, scheduled, and private posts so reviewers can view unpublished content without logging in. Native block editor and classic editor integration, with expiring tokens, one-click copy, and revoke.
- Added: Custom User Avatar (new module): Upload a custom profile picture from the WordPress profile screen, with live preview and one-click revert to Gravatar. Applies site-wide.
- Added: Admin Customiser: New "Item Hover Background Colour" setting for admin bar items.
- Improved: Admin Customiser: Now defers to each user's WordPress admin colour scheme — custom colours only apply where explicitly set.
- Improved: Admin Customiser: Unified colour field labels across the Admin Bar and Sidebar tabs.
- Fixed: Duplicate Post: "Duplicate" button disappearing in the block editor or failing to identify the post in the classic editor.
- Fixed: Quick Add Post: "New" button vanishing from the block editor toolbar after editor changes.
- Fixed: Admin Customiser: Sidebar menu flashing the default colour on hover.
- Fixed: Maintenance Mode: Default body text mismatch between the settings screen and the live page.
Version 3.2.6 21 April 2026
- Added: SMTP Email: Third-party email provider integrations — Brevo, SendGrid, Postmark, SparkPost, Emailit, and ToSend as alternatives to raw SMTP credentials.
- Added: Maintenance Mode: One-click toggle from the admin bar for users with permission.
- Added: Maintenance Mode: Role-based toggle permissions — configure which roles can toggle maintenance mode from the admin bar [Pro].
- Improved: SMTP Email: Improved email logs with auto-refresh, status badges, and error tooltips on failed sends.
- Fixed: Debug Mode: Persistent admin notice remaining visible after disabling the module [Pro].
- Fixed: User Last Login: Last Login column not rendering values in the users list table.
- Fixed: Folder Manager: "Could not move to folder" error when changing folder assignment from the block editor sidebar.
- Fixed: Rollback Manager: Fatal error (ArgumentCountError) crashing the Themes screen on multisite due to incorrect theme_action_links filter signature.
- Fixed: SMTP Email: Download Logs button not triggering CSV export [Pro].
- Security: SMTP Email: Restricted email log CSV export to administrators [Pro].
Version 3.2.5 21 March 2026
- Security: Fixed privilege escalation vulnerability in Menu Editor module.
- Security: Restricted disk usage widget to administrators only.
- Security: Removed blanket capability grants on dashboard/profile requests.
Version 3.2.4 5 March 2026
- Added: Folder Manager: Folder panel support in media library popup/modal.
- Added: Folder Manager: Refresh functionality and internationalization support.
- Added: Duplicate Post: Element selection filters and per-duplication modal for choosing which elements to duplicate [Pro].
- Improved: Duplicate Post: Enhanced code structure and UI elements.
- Improved: Folder Manager: Styling and UX improvements.
- Fixed: Menu Editor: Replaced persistent capability changes with in-memory filtering to prevent database capability pollution.
- Fixed: Menu Editor: Virtual capabilities now correctly granted for role-based menu access.
- Fixed: Menu Editor: Per-user deny rules now respected in role-based capability grants.
- Fixed: SMTP Email: PHPMailer state not clearing between wp_mail calls causing recipient accumulation.
- Fixed: Disable XML-RPC: Refined XML-RPC request handling.
- Fixed: Disable Blog: Redirect conflict with SureCart and similar plugins.
- Fixed: Quick Add Post: Button insertion timing and selector updates.
Release notes published by the developer.
How to install
Automatic updates: this item is updated by the Ultrapack Auto Updater. With it installed, the new version shows up in your dashboard like any other WordPress update (how to set it up).
- Download the file
wpextended-pro.zip. - In the WordPress dashboard, go to Plugins > Add New > Upload Plugin.
- Select the file
wpextended-pro.zipand click Install Now. - Click Activate.
Requirements: Requires WordPress 5.6 or higher and PHP 8.1 or higher. Tested up to WordPress 7.1.
- This item is already activated. If any screen asks for a license, enter any code; any email works in the email field.
Stuck on a step? Open a ticket telling us which one you stopped at.
