Target Media Toolkit – free WordPress plugin
Free WordPress plugin with 14 modules: coming soon page, login protection, WebP images, sitemap, redirects, contact buttons, popups, cookie notice, seasonal effects and site monitoring. Switch on only what you need.
Most new WordPress sites end up with a long list of small plugins for small jobs. Target Media Toolkit does fourteen of them in one light package, and you switch on only the modules you need. Modules that are off load no code on your site.
Everything is free: no Pro version, no locked features and no ads across your dashboard. We built the plugin from tools we have used on client sites for years.
New in version 1.2.0
- Login protection: limits wrong passwords per IP, blocks repeat attackers for longer, turns off XML-RPC and keeps a log with one-click unblock.
- Redirects & 404: a log of missing pages with one-click redirects, 301/302/307/410, wildcards and hit counts.
- Duplicate: copy posts, pages and other content as drafts, one at a time or in bulk.
- Contact buttons: call, WhatsApp, Viber, Telegram and email, a sticky bar on phones and working hours.
- Seasonal effects: Christmas, New Year, Easter, Halloween and Valentine’s Day animations with Orthodox and Western calendars and editable dates for every holiday.
- Popups settings are now split into tabs (Age, Announcement, Coupon, Newsletter) with an On/Off badge on each.
- The contact button moves above the cookie notice while the notice is open.
All 14 modules
Under Construction / Coming Soon
- 10 ready-made templates: Minimal, Midnight, Aurora, Split, Corporate, Bold, Countdown, Photo, Construction and Pastel
- Countdown with automatic launch when the timer ends
- Progress bar, contact details and social media links
- Correct SEO: maintenance mode sends HTTP 503, so Google keeps your rankings
- Secret preview link for clients, allowed IP addresses and public pages
- No fonts or scripts from other servers
Custom login URL
Moves wp-login.php to an address only you know and stops most automated password attacks. The new address is emailed to the site admin, and there is an emergency switch.
Login protection
New in 1.2.0. Blocks an IP address for 20 minutes after too many wrong passwords (5 by default), and for 24 hours if it keeps trying. Turns off XML-RPC, the back door most password-guessing bots use. Log of failed logins and blocks, one-click unblock, an allow-list for your office and an email when an attack gets a long block. Works behind Cloudflare.
Temporary login
Send a client or collaborator a passwordless login link that expires on its own, from 1 hour to 30 days. Administrator rights can never be granted. Extend, revoke or delete a link with one click, and expired users are removed automatically. Clients with a link see the real site even while Under Construction is on.
WebP images
Converts PNG (and optionally JPEG) uploads to WebP. Keeps transparency, fixes rotation and keeps the original when WebP would be larger. Runs on your server, with no external service.
Social share
Pick the image, title and description that Facebook, LinkedIn, X, WhatsApp and Viber show for every post and page. Without a choice it uses the featured image, then a default image for the whole site. Adds OpenGraph and X card tags and pauses itself when an SEO plugin already adds them.
XML sitemap
A fast, cached sitemap.xml with pages, posts, products and images, ready for Google Search Console and Bing. Pauses itself when Yoast, Rank Math or another SEO plugin is active.
Redirects & 404
New in 1.2.0. Logs every address that shows “page not found”, with hit counts and where visitors came from. Click “Redirect”, enter the new address, done: 301, 302, 307 or 410. Wildcards such as /blog/* → /news/* move a whole section at once, and a counter shows how often each redirect is used. Hacker-bot probes (.php, .env, wp-admin) are ignored, so the list stays useful.
Site monitor
Checks the database, disk space, SSL certificate, PHP version, updates and errors every hour and emails you when something is wrong. It also has an address for outside services such as UptimeRobot, so you know when the whole server is down.
Duplicate
New in 1.2.0. A “Duplicate” link next to every post, page and other content type, in the admin bar and in Bulk actions. The copy keeps text, featured image, categories, tags, custom fields and page builder layouts, and is saved as a draft.
Contact buttons
New in 1.2.0. Call, WhatsApp, Viber, Telegram and email buttons. On phones a sticky bar at the bottom of the screen, on computers a round button that opens a small contact card. Choose your colour, left or right corner, a first WhatsApp message and pages without buttons. Outside working hours show an offline note, hide only the Call button or hide everything.
Cookie notice
A clean notice with an Accept button (and an optional Decline button) and a link to your privacy policy, as a bottom bar or corner box, dark or light. Remembers each visitor’s choice and works with page caching. It is a simple notice: it does not block analytics or advertising scripts by itself.
Popups
- Age verification (e.g. 18+), announcement, discount coupon with a Copy button and end date, and newsletter sign-up with a required consent checkbox
- Subscribers are stored in your WordPress database and exported as CSV, with no outside service
- Show after a few seconds, after scrolling or when the visitor is about to leave, with page, device and frequency rules
- New in 1.2.0: settings are split into tabs with an On/Off badge on each
Seasonal effects
New in 1.2.0. Snow and twinkling lights for Christmas, fireworks and confetti for New Year, painted eggs for Easter, bats and autumn leaves for Halloween and hearts for Valentine’s Day. Switches itself on and off by the calendar, with Orthodox or Western dates for Christmas and Easter, and you can change the dates of every holiday, e.g. keep the fireworks until 7 January. Optional greeting ribbon; everything is drawn in code and does not slow your site down.
Installation
- In WordPress go to Plugins → Add New and search for “Target Media Toolkit”.
- Click Install, then Activate.
- Open the new Target Media menu and switch on the modules you want.
- Each module has its own settings page.
Version history
- 1.2.0 – Login protection, Redirects & 404, Duplicate, Contact buttons and Seasonal effects; popup settings in tabs.
- 1.1.0 – Temporary login, Social share, Cookie notice and Popups.
- 1.0.0 – First release: Under Construction (10 templates), custom login URL, WebP images, XML sitemap and site monitor.
Frequently asked questions
Is the plugin really free?
Yes. No Pro version, no locked features, no ads.
I changed the login address and forgot it. How do I get in?
Add define( 'TMEDIA_DISABLE_LOGIN_URL', true ); to wp-config.php, or rename the plugin folder over FTP. The address was also emailed to the site admin.
Does the WebP module change images I already uploaded?
No. It only converts new uploads.
Does the plugin send data anywhere?
No, unless you enter an UptimeRobot API key in Site Monitor to see uptime statistics inside WordPress.
Tell us what you need.
We reply the same or the next working day, in Serbian, English, German or Russian.