v1.3.1

1.3.1 — 2026-08-26

Added

• Divi: Google Maps fix. New optional toggle that shims the deprecated
  google.maps.event.addDomListener used by Divi's Map modules, so maps keep
  working without the deprecation error. Off by default, in the Divi tab.

v1.3.0

1.3.0 — 2026-08-26

Added

• XML-RPC hardening. Optionally keep XML-RPC on but remove its most-abused
  methods — pingbacks and system.multicall — along with the X-Pingback
  header. A finer alternative to disabling XML-RPC entirely.
• Permissions-Policy header. Optionally send a restrictive Permissions-Policy
  that disables camera, microphone and geolocation across the whole site.
• Custom admin footer. Replace the "Thank you for creating with WordPress"
  text at the bottom of the admin with your own (basic HTML and links allowed),
  or leave it blank.

Removed

• The generic login error message option, now handled by AMW Simple Login.

Notes

• All options remain off by default: updating changes nothing until you enable
  them.

v1.2.0

[1.2.0] - 2026-08-21

Added

• Generic login errors: optionally replace the login failure message with a neutral one, so it no longer reveals whether the username or the password was wrong.
• HSTS header: optionally send Strict-Transport-Security (one year, including subdomains). Only sent over HTTPS; enable only on sites fully served over HTTPS.
• Option to disable the periodic admin email verification screen.
• Option to disable remote block patterns, so WordPress stops fetching patterns from the wp.org directory.
• Auto-empty trash: choose how many days trashed items are kept before being permanently deleted (uses EMPTY_TRASH_DAYS; 0 disables the trash).
• Delete expired transients: a one-click tool to clear expired transient rows from the options table.
• All new options are disabled by default.

v1.1.0

1.1.0 — 2026-08-17

Added

• Import / export settings. Download the whole configuration as a JSON
  file and load it on another site. Imported values are validated against the
  known options before being saved.
• Reset to defaults. Turn every option off in one click.
• Keep settings on uninstall. Optionally preserve your configuration when
  the plugin is deleted, ready for a future reinstall.
• Elementor tab (shown only when Elementor is active) with two options:
  disable Elementor usage tracking, and disable its default colors and fonts so
  the theme controls styling.
• Detected-frameworks badge and an active-optimizations counter in the
  settings header, for a quick overview at a glance.

Changed

• The Divi tab now appears only when Divi is active (the Divi/Extra theme or
  the Divi Builder plugin), matching how the WooCommerce tab already behaved.
  Framework toggles are preserved when their tab is hidden, so they are never
  wiped by saving from another tab.

Notes

• Everything remains off by default: updating changes nothing until you
  enable it.

v1.0.0

AMW Toolbox 1.0.0

Initial stable release of AMW Toolbox, a lightweight WordPress toolbox for administration cleanup, security hardening, performance optimization and third-party integration management.

What's included

• WordPress administration cleanup and customization.
• Comment, trackback and pingback controls.
• Security and hardening options.
• Performance and frontend cleanup options.
• Divi-specific optimization.
• WooCommerce cleanup and optimization.
• Centralized configuration under Settings → AMW Toolbox.
• Spanish translation support.
• GitHub-based automatic update support.
• Complete uninstall and multisite cleanup support.

Important

All options are disabled by default. Enable only the features required for each website and test configuration changes before using them on production sites.

Some options can affect WordPress, theme or plugin functionality, particularly those related to Heartbeat, jQuery Migrate, Gutenberg assets, revisions and WooCommerce styles.

Full documentation: See the [README](https://github.com/alvaromarquezweb/amw-toolbox#readme).