Utility modules
Ultivo Toolkit bundles seventeen small, independent site utilities under Ultivo Toolkit → Enhancements: the kind of thing you'd otherwise reach for a separate single-purpose plugin for. All of them are off by default; enabling a module is a single toggle, and only enabled modules load their code, so disabled ones add no overhead.
The Enhancements screen groups them under Content, Media, Site and Security, and every module carries a one-line description next to its toggle.
Cleanup#
Removes common front-end clutter: emoji detection scripts, XML-RPC, the WordPress version number in <head>, and oEmbed discovery links. Each cleanup is its own checkbox.
Disable comments#
Turns off comments site-wide: comment forms, existing comments, the Comments admin menu and the admin bar item.
Classic editor#
Replaces the block editor with the classic editor, for all post types or a selected subset. Can also remove the content editor entirely for post types built purely from fields.
Duplicate posts#
Adds a "Duplicate" row action to posts, pages and custom post types, copying content, fields and taxonomies into a new draft.
Content ordering#
Adds a dedicated Order page with drag-and-drop ordering for posts, pages, custom post types and taxonomy terms.
Admin columns#
Show, hide and reorder the admin columns for posts, pages and custom post types, so a list screen shows the fields that matter for that content type.
SVG support#
Allows administrators to upload SVG files, sanitizing each one on upload by stripping scripts, event handler attributes and javascript: references.
AVIF support#
Adds AVIF upload support for the cases where WordPress or the server does not recognize the file type on its own.
Maintenance mode#
Shows visitors a clean maintenance page (with a customizable title and message) while logged-in editors keep full access to the site.
Login branding#
Puts your own logo and accent color on the WordPress login screen, and points the logo link at your site instead of WordPress.org.
Hide login#
Moves the login screen to a custom slug and returns a 404 for wp-login.php and wp-admin to anonymous visitors, instead of redirecting them.
Limit login attempts#
Blocks further login attempts for 20 minutes after 5 failed attempts from the same IP address.
Disable components#
Turns off the parts of WordPress a site often does not use: REST API access for visitors, XML-RPC, oEmbed discovery and RSS feeds. Each one is its own toggle.
Revisions & Heartbeat#
Limits how many post revisions WordPress stores and tunes the heartbeat API, the background request the admin fires while an editor screen is open.
Redirects#
Adds a dedicated Redirects page for managing 301 redirects, and lists the 404 URLs that were hit recently so you can redirect the ones that matter.
SMTP#
Sends site mail through an SMTP server instead of the server's default mail function, configured on a dedicated SMTP page.
Admin Menu Organizer#
Reorders the WordPress admin menu per role, and lets you hide items globally, rename them, change their icon, and set per-item role visibility.