內容簡介
Product Twenty Site Defaults 外掛提供一個簡單的方式來設置和管理 WordPress 網站的預設配置，讓使用者能夠輕鬆選擇不同的預設選項，並監控未來的配置變更，確保網站設定的一致性和安全性。
【主要功能】
• 提供多種預設選項：Agency、Business、Blog、Development
• 審核並應用預設值，避免配置漂移
• 監控 WordPress 設定變更，並提供報告
• 自訂清理和存取政策，無需額外外掛
• 減少公共用戶枚舉路徑，增強安全性
外掛標籤
開發者團隊
② 後台搜尋「Product Twenty Site Defaults」→ 直接安裝（推薦）
原文外掛簡介
Site Defaults makes a repeated fresh-site setup visible and deliberate:
Choose an Agency, Business, Blog, or Development preset.
Preview every proposed value beside the site’s current value.
Apply the preset explicitly.
Review future configuration drift and restore or accept each change.
Customize cleanup and access policies without adding a second utility plugin.
The plugin does not add ads, telemetry, remote requests, or dashboard spam. It does not remove content or other plugins.
After a preset is applied, Site Defaults monitors its WordPress options. The plugin reports differences on its settings screen and in Site Health. When a setting needs review, a contextual Site Defaults notice appears throughout WordPress admin with a direct link to the configuration report. It is omitted from the Site Defaults page, where the full report is already visible.
Administrators remain in control: changes are never automatically reverted.
Cleanup policies can disable emoji assets, WordPress post embeds, XML-RPC, comments, author archives, attachment pages, public REST API user enumeration, and Application Passwords. They can also remove generator, shortlink, RSD, and WLW metadata and low-value dashboard widgets.
Integration-sensitive controls include clear cautions. The audited Agency, Business, and Blog presets disable XML-RPC while keeping Application Passwords available for modern REST API integrations and automation. Development leaves cleanup and access behavior at WordPress defaults.
User enumeration controls
Agency and Business reduce two common public user-enumeration paths: anonymous WordPress REST API user listing and public author archives, including the users sitemap.
Blog protects the REST API user listing while retaining author archives for publishing. Development leaves both behaviors at WordPress defaults.
These controls reduce common public user-enumeration paths; they do not guarantee that usernames or author identities cannot be discovered through published content, themes, plugins, feeds, caches, or other integrations.
The unified preset table shows every WordPress setting and cleanup behavior in one place. Choose a built-in preset, then use Customize this preset to make its Preset behavior column editable.
Unchanged values remain inherited from the selected preset. Applying the edited configuration saves it as Custom, records which preset it came from, and establishes the complete Custom configuration as the monitoring baseline.
