Title: Polanger Admin Suite – Control & Customize WordPress Admin Author: Polanger Published: 27 de enero de 2026 Last modified: 22 de julio de 2026 --- Buscar plugins ![](https://ps.w.org/polanger-admin-menu-manager/assets/banner-772x250.jpg?rev=3520334) ![](https://ps.w.org/polanger-admin-menu-manager/assets/icon-128x128.jpg?rev=3447804) # Polanger Admin Suite – Control & Customize WordPress Admin Por [Polanger](https://profiles.wordpress.org/polangersoft/) [Descargar](https://downloads.wordpress.org/plugin/polanger-admin-menu-manager.1.5.8.zip) * [Detalles](https://ve.wordpress.org/plugins/polanger-admin-menu-manager/#description) * [Valoraciones](https://ve.wordpress.org/plugins/polanger-admin-menu-manager/#reviews) * [Instalación](https://ve.wordpress.org/plugins/polanger-admin-menu-manager/#installation) * [Desarrollo](https://ve.wordpress.org/plugins/polanger-admin-menu-manager/#developers) [Soporte](https://wordpress.org/support/plugin/polanger-admin-menu-manager/) ## Descripción **Polanger – Admin Suite** is a powerful, all-in-one solution to fully control and optimize your WordPress admin experience. Instead of installing multiple plugins for menu management, login security, dashboard cleanup, and activity tracking – Polanger brings everything together in one clean, modern interface. Whether you’re a developer, agency, or site owner, Polanger helps you create a cleaner, safer, and more controlled WordPress admin panel. * [Live Demo](https://polanger.com/polanger-admin-suite/wp-admin) #### Features * Modular admin suite: enable only the tools you need and keep wp-admin lightweight. * Menu Manager with hiding, renaming, reordering, custom icons, custom menu items, URL blocking, and Shield protection indicators. * Admin Bar, Login Page, Dashboard Center, Activity Log, and admin notice controls from one interface. * Login hardening with custom login URL, reCAPTCHA, Two-Factor Authentication, recovery keys, trusted devices, and brute-force protection. * Frontend Content Visibility for role-based access control on posts, pages, and supported custom post types. * Design System with theme presets, PG Aurora, smart contrast correction, scoped styling, typography, and live preview controls. * Comment Security Layer and Firewall addons for comment abuse, request scoring, bot probes, XML-RPC exposure, REST pressure, rate limiting, and lightweight event logging. * WooCommerce Security for store login, registration, lost password, reCAPTCHA, 2FA, and customer authentication rate limiting. * Polanger Shield for admin page blocking, element hiding, contextual notes, Demo Lock, Global Demo Mode, and safer client/admin demo workflows. * Maintenance Center for coming soon, maintenance, deployment, preview access, branded public messages, countdowns, and role-based bypass rules. #### Why Polanger Admin Suite? * **All-in-One Admin Control** – Replace multiple plugins with one powerful solution * **Clean & Organized Dashboard** – Remove clutter and simplify your workflow * **Enhanced Security** – Protect login and track activity * **Modern UI** – Fast, intuitive, and easy to use * **Built for Agencies & Teams** – Perfect for multi-user environments #### Core Features ### Admin Menu Manager * Hide any admin menu or submenu item * Role-based visibility control * Rename menu items and submenus * Change icons with 200+ Dashicons * Drag & drop menu reordering * Block direct URL access to hidden pages * Visual indicators for hidden and modified items * Custom admin menu builder (create your own menus) ### Admin Bar Customization * Replace or remove WordPress logo * Hide unwanted admin bar items * Add custom links with icons * Manage frontend and backend admin bar * Auto-detect plugin and theme items ### Login Security & Customization * Custom login URL (hide wp-login.php) * Google reCAPTCHA v2 & v3 support * Custom login page design (logo, colors, background) * Brute force protection * Secure login flow enhancements ### Two-Factor Authentication (2FA) * Email-based verification codes * Role-based enforcement * Recovery keys for backup access * Configurable expiration times * Super admin protection ### Activity Log * Track logins, plugin changes, content updates, and more * Filter by user, action, and date * Export logs (CSV) * Email alerts for critical actions * GDPR/KVKK compliant logging ### Dashboard Control * Hide default WordPress widgets * Hide third-party plugin widgets * Control admin notices * Create custom dashboard widgets * Per-user dashboard visibility ### Multisite Control * Network-wide default settings for multisite installations * Site-level override controls for supported modules * Lock system for Menu Manager, Admin Bar, Login Security, Activity Log, and Dashboard Center * Network-aware addon activation support * Developer-friendly effective settings filter architecture ### Access Control * Restrict plugin access to specific users * Read-only mode support * Prevent unauthorized access * Super admin safety protection ### Design System * Token-based admin theming system for consistent and scalable customization * Customize colors across admin UI (sidebar, admin bar, background, text, surfaces) * Sidebar background, text color, and menu item styling * Admin bar background, text color, submenu background, and submenu text color * Built-in presets (e.g. Dark, Minimal, Default) with one-click application * Automatic CSS generation with cache-friendly performance * Smart contrast correction for readable text on both dark and light surfaces * Typography controls including font family and basic shape settings * Scoped styling to avoid conflicts with WordPress core and plugins * Extensible architecture for future themes, layouts, and design packs ### Frontend Content Visibility * Per-content frontend access control for posts, pages, and supported custom post types * Visibility modes for public, logged-in users only, selected roles only, or hidden- from-selected-roles workflows * Multiple denied behaviors including login redirect, 404, access denied message, and custom redirect * Theme-friendly replacement mode or dedicated access denied page for stricter template control * Optional hiding from archives, search results, public REST responses, and WordPress XML sitemaps * Rich-text access denied messages with TinyMCE, HTML, and shortcode support ### Authenticator App (TOTP) * Google Authenticator and Microsoft Authenticator support * Time-based One-Time Password (TOTP) verification * Multi-user architecture with per-user enrollment * Mandatory enrollment flow for users in required roles * Profile page 2FA management (Users Profile) * Admin visibility: enrollment status only, no secret access * Safe secret rotation with pending secret system * Old authenticator remains active until new setup is verified * Secure secret storage with AES-256-CBC encryption * Manual secret entry with provisioning URI support * One-time recovery keys (10 keys per user, auto-regenerated on rotation) * Email fallback option when authenticator is unavailable * Brute-force protection with configurable lockout * Replay attack prevention with time-slice tracking * Seamless integration with core 2FA settings (roles, lockout, expiry) ### reCAPTCHA Protection * Centralized Google reCAPTCHA key management (v2 and v3) * All reCAPTCHA configuration consolidated in one dedicated addon * Login form protection * Registration form protection * Lost password form protection * Comment form protection (works with Comment Security addon) * Configurable v3 score threshold * Badge position customization for v3 * Automatic script loading only when needed ### Firewall * WordPress-aware request firewall for common bot probes, login abuse, XML-RPC exposure, and anonymous REST pressure * Monitor Only, Balanced, and Strict modes for safe testing, recommended daily protection, or more aggressive attack response * Detects suspicious requests for exposed files, backup archives, shell files, phpMyAdmin/Adminer paths, traversal probes, unsafe HTTP methods, and oversized URLs or query strings * Native WordPress login, registration, and lost password rate limiting with identity and IP-based counters * XML-RPC hardening for authenticated methods, multicall abuse, and optional pingback disabling * Anonymous REST API rate limiting, anonymous write blocking, and anonymous user listing protection * Request scoring engine for combined suspicious signals such as unsafe methods, bad user agents, sensitive paths, injection probes, long URLs, and long query strings * Security response headers, numeric author enumeration protection, and WordPress Application Password guard controls * IP allowlist and denylist controls with CIDR support * Temporary IP cooldowns for repeated probe traffic * Recent event logging without turning the addon into a heavy full request logger * Built-in Firewall Diagnostics for safe internal self-tests of request scoring, rate limits, REST/XML-RPC behavior, IP/CIDR matching, cooldown logic, and security header settings * Diagnostics simulate decisions inside WordPress and do not send malicious traffic, attack your site, or test hosting/CDN WAF rules * Preset profiles apply automatically while respecting user-customized settings, with advanced tuning kept optional ### WooCommerce Security * Adds WooCommerce-specific reCAPTCHA locations for customer login, registration, and lost password forms * Extends the existing Polanger 2FA flow into WooCommerce customer login while preserving My Account and checkout return paths * Adds customer authentication rate limiting for login failures, account registrations, and lost password requests * Includes Light, Balanced, and Strict protection profiles so store owners can choose safe limits without tuning every number manually * Requires WooCommerce and uses dependency-aware loading so the addon does not run in incomplete store environments * Reuses Polanger’s existing reCAPTCHA and 2FA systems instead of creating a disconnected WooCommerce security stack ### Polanger Shield * Blocks selected wp-admin pages for selected users with optional direct URL blocking * Hides selected admin interface areas from the real screen using the floating Shield tool * Adds contextual notes to admin elements so teams can document workflows directly inside wp-admin * Demo Lock keeps selected admin screens visible while preventing save, publish, AJAX, REST, and destructive changes for demo users * Global Demo Mode turns wp-admin into a controlled read-only demo environment for eligible administrator accounts * Safe Mode gives authorized managers a temporary recovery path when reviewing or troubleshooting Shield rules * Menu Manager integration shows when a menu or submenu item is already protected by Shield, helping avoid duplicate restrictions #### Addon Architecture Polanger Admin Suite includes a modular addon system designed for scalability and clarity. ### Core Addons * Admin Bar * Dashboard Center * Admin Activity Log * Custom Admin Menu Builder * Multisite Control * Design System * Comment Security Layer * Authenticator (TOTP) * reCAPTCHA * Firewall * Maintenance Center * WooCommerce Security – WooCommerce customer login, registration, lost password, reCAPTCHA, 2FA, and rate limiting integration * Polanger Shield – admin page blocking, element hiding, contextual notes, Demo Lock, Global Demo Mode, and Menu Manager protection indicators ### 3rd Party Addons * Reserved for future ecosystem integrations * Addons are managed from the built-in **Addons** tab * Core addons and external addons are separated for easier management #### Built for Real-World Use Polanger is designed for: * Agencies managing client websites * Developers who need full admin control * Teams working with multiple user roles * Site owners who want a cleaner dashboard #### Lightweight & Secure * Built with WordPress coding standards * Nonce verification for all actions * Capability checks for all operations * Sanitized inputs and secure database queries * Optimized for performance #### Available Languages Polanger Admin Suite currently includes translations for: * English (default) * Turkish (tr_TR) * Arabic (ar) * Russian (ru_RU) * Chinese – Simplified (zh_CN) * Spanish (es_ES) * German (de_DE) More information: * [Live Demo](https://polanger.com/polanger-admin-suite/wp-admin) * [Documentation](https://polanger.com/documentation/polanger-admin-suite/docs/) * [Developer](https://polanger.com/documentation/polanger-admin-suite/developer/) ## Instalación 1. Upload the plugin to `/wp-content/plugins/` 2. Activate it from the Plugins menu 3. Access via **Settings -> Polanger Admin** ## Preguntas frecuentes ### Does this replace multiple plugins? Yes. Polanger combines menu management, login security, dashboard control, and activity logging in one plugin. ### Can I control user access? Yes. You can restrict menu visibility and plugin access per user or role. ### Is it safe to use on client sites? Absolutely. Polanger is built with security and multi-user environments in mind. ### Will it slow down my site? No. The plugin is optimized to remain lightweight and efficient. ## Reseñas ![](https://secure.gravatar.com/avatar/3bc8fed11614e9fcff75003050fe2f80b046178d258a5085cd96c2a6cc30a64e? s=60&d=retro&r=g) ### 󠀁[Finally found it](https://wordpress.org/support/topic/finally-found-it-9/)󠁿 [borkatta](https://profiles.wordpress.org/borkatta/) 1 de mayo de 2026 Finaly found a plugin that has all the admin settings in one place:) [ Leer la 1 reseña ](https://wordpress.org/support/plugin/polanger-admin-menu-manager/reviews/) ## Colaboradores y desarrolladores «Polanger Admin Suite – Control & Customize WordPress Admin» es un software de código abierto. Las siguientes personas han colaborado con este plugin. Colaboradores * [ Polanger ](https://profiles.wordpress.org/polangersoft/) [Traduce «Polanger Admin Suite – Control & Customize WordPress Admin» a tu idioma.](https://translate.wordpress.org/projects/wp-plugins/polanger-admin-menu-manager) ### ¿Interesado en el desarrollo? [Revisa el código](https://plugins.trac.wordpress.org/browser/polanger-admin-menu-manager/), echa un vistazo al [repositorio SVN](https://plugins.svn.wordpress.org/polanger-admin-menu-manager/) o suscríbete al [registro de desarrollo](https://plugins.trac.wordpress.org/log/polanger-admin-menu-manager/) por [RSS](https://plugins.trac.wordpress.org/log/polanger-admin-menu-manager/?limit=100&mode=stop_on_copy&format=rss). ## Registro de cambios #### 1.5.8 * Fixed: WooCommerce Security settings tab registration now loads reliably when WooCommerce becomes available later in the WordPress plugin bootstrap order * Fixed: Design System PG Aurora active tab and nested navigation contrast now keeps selected settings tabs, addon subtabs, and gradient surfaces readable * Improved: Polanger Shield admin page restrictions now block targeted users more consistently and surface Shield-controlled menu protections inside Menu Manager * Improved: Firewall request scoring has been refined for more accurate suspicious request detection while preserving safer preset behavior #### 1.5.7 * New: Design System now includes the PG Aurora admin theme preset with a modern light dashboard style, gradient menu states, improved sidebar icon handling, refined submenu hierarchy, and polished classic WordPress admin screen compatibility * Improved: Firewall request protection was refined with safer preset behavior, compatibility-aware REST handling, and clearer optional tuning boundaries for production sites * Improved: Strict REST protection now preserves WooCommerce Store API compatibility automatically when WooCommerce is active, preventing cart, checkout, and account flows from being blocked by anonymous REST write hardening * Improved: Menu Manager mobile layout now uses responsive card-based rows with cleaner visibility controls, submenu expansion, custom name fields, and cache- safe admin UI stylesheet loading * Fixed: Design System preset application now updates saved theme tokens reliably, reflects changes immediately on the settings page, and includes an inline fallback so generated admin theme CSS cannot silently fail on stricter live hosting setups #### 1.5.6 * New: Firewall addon adds Monitor Only, Balanced, and Strict WordPress-aware request protection for common bot probes, native auth rate limits, XML-RPC hardening, REST pressure, anonymous user enumeration, IP rules, temporary cooldowns, and lightweight event logging while respecting custom administrator overrides * Improved: Firewall defaults, Monitor Only behavior, REST compatibility, CIDR validation, proxy IP detection, and event logging safety were refined to reduce false positives and lockout risk * Fixed: Plugin update notifications remain visible on the Plugins screen when admin notice hiding is enabled * Improved: The Shield dashboard displays the Global Demo Mode summary only while demo protection is active * New: Menu Manager identifies menu and submenu items already protected by active Shield page rules and shows affected users and direct URL protection details without duplicating restrictions * Fixed: Shield user ID handling now safely normalizes administrator records returned as objects, preventing PHP warnings in protected admin and menu integration checks * Improved: Maintenance Center preview and content editing were refined with admin- safe preview rendering, stronger preview button contrast, and richer text color controls in visual editors #### 1.5.5 * Improved: Admin Suite interface refined with cleaner layouts, smoother navigation, and more consistent settings screens * Improved: Better compatibility across login security, frontend visibility, dashboard controls, and modular addon workflows * Improved: Module loading optimized to keep the WordPress admin experience faster and lighter when only selected features are enabled * Improved: Responsive behavior polished across key Admin Suite screens for a more comfortable tablet and mobile admin experience * Fixed: Minor visual and settings synchronization issues reported in selected admin screens #### 1.5.4 * Improved: Frontend Content Visibility editing was streamlined with a clearer access-rule workflow, making role-based hiding easier to understand on posts, pages, and supported custom post types while preserving compatibility with older saved rules * Improved: Frontend Content Visibility now serves a dedicated Polanger protected 404 screen when denied behavior is set to 404, avoiding broken or inconsistent theme-level 404 layouts * Improved: Login Security redirect handling and protected-route interception were hardened for unauthorized access attempts to custom login and admin entry points * Improved: The built-in protected 404 experience was refined with cleaner messaging, a simplified layout, and WordPress 6.4+ compatibility hardening for deprecated emoji style output #### 1.5.3 * New: Frontend Content Visibility core module for posts, pages, and supported custom post types with role-based audience control, denied behavior routing, and discovery hiding for archives, REST API, and XML sitemaps * Improved: Admin design system and user interface components enhanced for a better user experience. * Improved: Mobile and responsive layouts optimized across various plugin screens. * Improved: Enhanced security measures and hardening implemented for the Two-Factor Authentication (2FA) module. * Improved: Translation catalogs and compiled language packs were refreshed for the current release across bundled locales #### 1.5.2 * Improved: Menu Manager now captures late-registered and dynamically reordered top-level admin menus more reliably, fixing cases where some third-party plugin menus did not appear in the manager list * Improved: Menu Manager list ordering now better mirrors the effective live WordPress sidebar order for plugins that reposition themselves through custom menu filters * Improved: Design System was expanded into a richer WCAG-aware admin theming engine with semantic color tokens, advanced typography controls, and a live preview playground * Improved: Design System presets were redesigned into curated professional themes, with stronger compatibility across admin menus, admin bar states, metaboxes, tables, widgets, and classic editor screens * Improved: Design System Midnight compatibility was hardened for third-party admin UI, including low-contrast text recovery and dark dropdown/menu readability fixes that only activate for the Midnight preset * Improved: Mobile admin usability refinements across settings layouts and action controls for better spacing, responsiveness, and alignment on smaller screens #### 1.5.1 * Fixed: Resolved an issue where reCAPTCHA could fail to appear on the custom login page under certain configurations * Improved: Better integration and compatibility between Authenticator App (TOTP) and reCAPTCHA verification flows * Improved: Comment Guard reCAPTCHA integration is now more stable and reliable across comment submission scenarios * Fixed: Resolved login page logo cropping issues on responsive and custom layout configurations * Improved: On mobile devices, the login page language selector is now displayed inside a compact drawer for a cleaner layout * New: Added option to completely disable the language switcher on the login page #### 1.5.0 * New: Authenticator App (TOTP) addon – Google/Microsoft Authenticator support with multi-user architecture, mandatory enrollment flow for required roles, profile page 2FA management, safe secret rotation (pending secret system prevents lockouts), AES-256-CBC encryption, recovery keys with auto-regeneration on rotation, trusted device memory, email fallback, and brute-force protection * New: reCAPTCHA addon – centralized Google reCAPTCHA v2/v3 key management; all reCAPTCHA configuration consolidated from multiple locations into one dedicated addon for login, registration, lost password, and comment forms * Improved: Design System – added Sidebar Background, Sidebar Text Color, Admin Bar Background, Admin Bar Text Color, Admin Bar Submenu Background, and Admin Bar Submenu Text Color customization options * Improved: Design System color compatibility – enhanced contrast handling and readability corrections across admin UI components * Improved: Menu Manager – resolved conflict issues with certain third-party plugins and themes * Improved: Mobile responsiveness – comprehensive layout and interaction improvements across all admin screens for better tablet and smartphone usability * Improved: 2FA settings form – resolved nested form submission issue for reliable Save Settings functionality #### 1.4.3 * New: Comment Security Layer addon – multi-layer comment protection with honeypot trap, HMAC-signed timing tokens, per-IP flood control (per-minute and per-hour windows), keyword and URL blocklists, behavior scoring engine with configurable thresholds, and silent action modes (spam queue, trash, or silent drop) * Improved: Login page design – refined mobile layout with corrected form card proportions, improved spacing around inputs and buttons on small screens, and more consistent hover and focus state rendering across breakpoints * Improved: Login page background rendering – smoother gradient transitions and better full-coverage rendering for background images on narrow viewports; improved visual layering between background and form card * Improved: Admin panel mobile responsiveness – layout and spacing adjustments across Settings, Addons, and Activity Log screens; better usability on tablet and mobile viewports with more appropriate touch target sizing * Improved: Sub-tab settings saves – partial save operations now only process and re-validate the submitted field group instead of the full settings object, reducing redundant sanitization passes on every tab change * Improved: Addon list layout – card grid now wraps and spaces more cleanly on narrow viewports; improved readability of addon status indicators on mobile #### 1.4.2 * New: Multisite Control addon – manage network-wide defaults, lock policies, and site-level overrides from a single system * New: Design System addon – token-based admin theming with presets, generated CSS, and extensible architecture * New: Network-aware settings engine with effective settings merging across supported modules * New: Network lock support for core modules (Menu Manager, Admin Bar, Login Security, Activity Log, Dashboard Center) * New: Site-level override indicators and network-managed notices for clearer control visibility * New: Developer hook `polanger_admin_theme_assets` for extending admin UI styling without modifying core files * Improved: 2FA system stability and security - Enhanced verification flow with stronger session and user validation - Secure resend flow with nonce protection and stricter token handling - Improved trusted device and IP resolution (proxy-aware validation) - Login flow now respects «Remember Me» preference - Safer email handling with runtime checks and fallback protection - Automatic reset of invalid email verification states - Prevents enabling 2FA when email delivery is not properly configured * Improved: Design System readability and contrast handling - Automatic contrast correction for dark/light surfaces - Improved text visibility across admin UI components (postbox, notices, tables, forms) - More consistent styling across WordPress admin elements * Improved: Addon system architecture - Better addon activation flow with optional network-wide activation - Expanded developer documentation with hooks, filters, and theming examples - Improved extensibility for future addon-based features * Improved: General stability, security, and internal optimizations #### 1.4.1 * Improved: Activity Log export flow (CSV/JSON) output handling on Settings page for more consistent downloads * Improved: Settings export callback visibility and `admin_init` lifecycle compatibility * Improved: Activity Log query hardening with validated table-name usage and allowlisted` ORDER BY` handling * Improved: 2FA verification comparison updated with timing-safe hash validation(` hash_equals`) * Improved: Activity Log IP resolution now prefers `REMOTE_ADDR` and supports trusted- proxy based forwarded-header parsing * Improved: Settings input validation for `allowed_users` with strict array-type guards before normalization #### 1.4.0 * Major update: Polanger expanded into a full Admin Suite with optional addons managed from one interface * New: Full Admin Suite experience (menu, login, security, dashboard, activity log) * New: Custom Admin Menu Builder * New: Role-based access control improvements * Improved: UI/UX across all modules * Improved: Performance and stability * Improved: Security layers and validation * Fixed: Minor bugs and edge cases #### 1.3.1 * Fixed: Prevented foreach warning when settings are missing * Improved: Stability improvements for fresh installs ## Meta * Version **1.5.8** * Last updated **hace 2 días** * Active installations **30+** * WordPress version ** 4.7 o superior ** * Tested up to **6.9.5** * PHP version ** 7.0 o superior ** * Language * [English (US)](https://wordpress.org/plugins/polanger-admin-menu-manager/) * Tags * [admin bar](https://ve.wordpress.org/plugins/tags/admin-bar/)[admin dashboard](https://ve.wordpress.org/plugins/tags/admin-dashboard/) [admin menu](https://ve.wordpress.org/plugins/tags/admin-menu/)[login security](https://ve.wordpress.org/plugins/tags/login-security/) [menu manager](https://ve.wordpress.org/plugins/tags/menu-manager/) * [Vista avanzada](https://ve.wordpress.org/plugins/polanger-admin-menu-manager/advanced/) ## Valoraciones 5 out of 5 stars. * [ 1 5-star review ](https://wordpress.org/support/plugin/polanger-admin-menu-manager/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/polanger-admin-menu-manager/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/polanger-admin-menu-manager/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/polanger-admin-menu-manager/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/polanger-admin-menu-manager/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/polanger-admin-menu-manager/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/polanger-admin-menu-manager/reviews/) ## Colaboradores * [ Polanger ](https://profiles.wordpress.org/polangersoft/) ## Soporte ¿Tienes algo que decir? ¿Necesitas ayuda? [Ver el foro de soporte](https://wordpress.org/support/plugin/polanger-admin-menu-manager/)