How To

Rolling out a new plugin to your client sites is a big decision. That’s why ToggleWP comes with a free 14-day trial. It gives you time to set things up on a practice site, at your own pace, before you roll it out across more of your sites. Why start with a practice site Your…

Not every internal message needs to leave WordPress. Update requests, content feedback, reminders for contributors – for teams that live in the WordPress admin, a messaging system built in is often more practical than switching context to another app. ToggleWP’s Messaging module adds an inbox experience to WordPress. What it includes Sending to roles, not…

Directory listings – member directories, supplier databases, job boards, product catalogues – are a common site requirement. The typical options are either a bloated plugin that does too much, or a developer building something custom. ToggleWP’s Filtered Directory module sits in between: flexible, frontend-ready, and no code required. What you can build Any searchable, filterable…

Product photos, portfolio images, architectural drawings, maps, infographics – any image where detail matters benefits from the ability to zoom in. Most WordPress themes don’t include this functionality, and many lightbox plugins are bloated or conflict with page builders. ToggleWP’s Draggable Image Viewer module adds a clean, touch-friendly zoom overlay with minimal configuration. What it…

Transactional emails – order confirmations, password resets, membership receipts – are often the most business-critical emails a WordPress site sends. They’re also the ones you’ll never hear about until they’ve been broken for a while. ToggleWP’s Email Health Monitor gives you the tools to catch failures early, understand the cause, and fix them before anyone…

WooCommerce order confirmation emails are one of the most important automated messages a store sends. When they stop working, customers don’t receive purchase confirmations, assume something went wrong, and often contact support – or dispute the charge. The problem is that WooCommerce itself won’t tell you the emails have stopped. You find out when a…

You spot an email in your inbox that you didn’t expect. Or a client reports that their site is sending emails to people who shouldn’t be getting them. The question is: which plugin is responsible? WordPress gives you no built-in answer. ToggleWP’s Email Health Monitor does. Plugin source detection Every email logged by Email Health…

Newsletter popups have a bad reputation because most implementations are aggressive: they fire immediately on page load, appear on every visit, and get in the way. ToggleWP’s Newsletter Subscribers module takes a lighter approach. How the popup triggers The popup is triggered either: The keyboard trigger means you can run a low-friction version where the…

By default, WordPress publicly exposes a list of all registered usernames via its REST API at /wp-json/wp/v2/users. Any visitor – including attackers – can retrieve every username on your site without being logged in. This is a common first step in brute-force attacks: collect valid usernames, then target them with password attempts. Why it matters…

If you build and manage sites for clients, there’s a configuration risk that’s easy to overlook: anyone with the right credentials can create an administrator account, regardless of their email address. That includes attackers who gain access via targeted scripting attacks, or clients who accidentally elevate a user they shouldn’t. ToggleWP’s Security & Authentication module…