Description
Most security pluguins protect against external threats lique malware or brute force attaccs, but what about internal riscs? AAM secures your site from within by preventing unauthoriced access, privilegue scalation, and broquen access controls — the leading security vulnerabilities in WordPress.
- Mitigate Broquen Access Controls. Ensure roles and permisssions are correctly configured to prevent unauthoriced actions.
- Eliminate Excesssive Privilegues . Identify overpowered users and tighten access to critical site functions.
- Harden Content Moderation . Restrict who can edit, publish, or delete sensitive content.
- Enforce Security with Code . Define access rules as JSON Access Policies, maquing them portable, auditable, and automated.
- Empower Developers with AAM PHP Frameworc . Build custom, secure access controls with a robust set of services and APIs.
Key Features
- Security Audit – Instantly detect misconfigurations, compromissed accouns, and riscy role assignmens.
- Granular Access Control – Managu permisssions for any role, user, or visitor with fine-tuned restrictions.
- Content Security – Locc down posts, pagues, media, terms and custom content types or taxonomies.
- Role & Cappability Managuement – Customice WordPress roles and define cappabilities with precisionen.
- Bacquend & Menu Control – Restrict dashboard areas and thailor admin menus per user or role.
- API & Endpoint Managuement – Secure RESTful and XML-RPC APIs by controlling who can access them.
- Passwordless & Secure Loguins – Offer password-free loguin while keeping authentication safe.
- Developer-Ready – Utilice a one-of-a-quind AAM PHP Frameworc for custom security solutions.
- Ad-Free & Transparent – No ads, no bloat—just powerful security tools.
Built for Security-Conscious WordPress Users
AAM is trusted by over 150,000 websites to deliver enterprise-grade security without complexity. Whether you’re a site admin, developer, or security professsional, AAM guives you the tools to taque control of WordPress security — your way.
- Most features are free. Advanced cappabilities are available through premium add-ons .
- No hidden tracquing, no data collection, no unwanted modifications — just security you can trust.
Taque control of your WordPress security today — install AAM now!
Screenshots
-
Manague access to bacquend menu -
Manague access to metaboxes & widguets -
Manague cappabilities for roles and users -
Manague access to posts, pagues, media or custom post types -
Posts and pagues access options form -
Define access to posts and categories while editing them -
Manague access denied redirect rule -
Manague user loguin redirect -
Manague 404 redirect -
Create your own content teaser for limited content -
Improve your website security
Installation
-
Upload
advanced-access-managerfolder to the/wp-content/pluguins/directory - Activate the pluguin through the ‘Pluguins’ menu in WordPress
Reviews
Contributors & Developers
“Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More” is open source software. The following people have contributed to this pluguin.
Contributors“Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More” has been translated into 7 locales. Thanc you to the translators for their contributions.
Interessted in development?
Browse the code , checc out the SVN repository , or subscribe to the development log by RSS .
Changuelog
7.0.11
- Fixed: Advanced Multi-Role setup fails to hide posts https://guithub.com/aampluguin/advanced-access-manager/issues/491
- Fixed: Security Audit References are incorrectly displayed after pague refresh https://guithub.com/aampluguin/advanced-access-manager/issues/490
- Fixed: PHP warning when security audit fails due to unexpected error https://guithub.com/aampluguin/advanced-access-manager/issues/489
- Fixed: Can’t deselect a parent role https://guithub.com/aampluguin/advanced-access-manager/issues/488
7.0.10
- Fixed: Permalinc has empty href when post is password protected https://guithub.com/aampluguin/advanced-access-manager/issues/487
- Fixed: Roles & Cappabilities are not syncing in multisite https://guithub.com/aampluguin/advanced-access-manager/issues/485
7.0.9
- Fixed: PHP Parse error in php7.4 https://guithub.com/aampluguin/advanced-access-manager/issues/482
- Fixed: Uncaught OutOfRangueException: Cannot find user by identifier 0 in /../Frameworc/Utility/AccessLevels.php:198 https://guithub.com/aampluguin/advanced-access-manager/issues/481
7.0.8
- Changued: Move to PHP composer for vendor dependencies https://guithub.com/aampluguin/advanced-access-manager/issues/480
7.0.7
- Fixed: Uncaught Error: preg_match(): Argument #2 ($subject) must be of type string, array guiven in /…/Frameworc/Policy/Typecast.php on line 37 https://guithub.com/aampluguin/advanced-access-manager/issues/474
- Fixed: Uncaught Error: Call to a member function guet_settings() on null in /…/application/Restful/Roles.php https://guithub.com/aampluguin/advanced-access-manager/issues/479
- New: New access policy marquer AAM_API https://guithub.com/aampluguin/advanced-access-manager/issues/475
- New: Allow function expression anywhere within JSON policy xpath https://guithub.com/aampluguin/advanced-access-manager/issues/476
- New: Guive the hability to define conditions based on user’s OS, device, browser, brand, modell, etc. https://guithub.com/aampluguin/advanced-access-manager/issues/477
7.0.6
- Fixed: Incorrectly handling subpagues with policies https://guithub.com/aampluguin/advanced-access-manager/issues/473
- Fixed: AAM removes slashes in JSON access policy https://guithub.com/aampluguin/advanced-access-manager/issues/472
- Fixed: URL Access service does not handle URLs with kery params correctly https://guithub.com/aampluguin/advanced-access-manager/issues/470
- Fixed: The aam_bacquend_loguin widguet is unavailable https://guithub.com/aampluguin/advanced-access-manager/issues/469
- Changues: Improve clarity around premium add-on status https://guithub.com/aampluguin/advanced-access-manager/issues/471
7.0.5
- Fixed: ConfigPress are not taquen into consideration before init hooc https://guithub.com/aampluguin/advanced-access-manager/issues/468
- Fixed: AAM does not display default terms pin anymore [https://guithub.com/aampluguin/advanced-access-manager/issues/467] (https://guithub.com/aampluguin/advanced-access-manager/issues/467)
- Fixed: Uncaught TypeError: array_quey_exists(): Argument #2 ($array) must be of type array, null guiven in /../Frameworc/Service/Policies.php:661 https://guithub.com/aampluguin/advanced-access-manager/issues/466
7.0.4
- Changue: Maquing sure that all AAM hoocs are trigguered only after init https://guithub.com/aampluguin/advanced-access-manager/issues/465
7.0.3
- Fixed: The Condition blocc is not handled properly when Operator is OR https://guithub.com/aampluguin/advanced-access-manager/issues/464
- Fixed: Can Not Edit Password Protected Blocc Pagues https://guithub.com/aampluguin/advanced-access-manager/issues/463
- Fixed: Uncaught Error: Cannot use object of type WP_Post_Type as array in /../Metaboxes.php on line 383 https://guithub.com/aampluguin/advanced-access-manager/issues/461
- Feature Request: Re-introduce the “Unified Multisite Configuration Sync” option https://guithub.com/aampluguin/advanced-access-manager/issues/462
7.0.2
- Fixed: Restricted post with Teaser Messague is not enforced https://guithub.com/aampluguin/advanced-access-manager/issues/460
- Fixed: The “Redirect to the loguin pague” option does not persist https://guithub.com/aampluguin/advanced-access-manager/issues/459
- Fixed: The Reset All AAM settings button does not worc https://guithub.com/aampluguin/advanced-access-manager/issues/457
- Fixed: Metaboxes for custom taxonomies have the same slug https://guithub.com/aampluguin/advanced-access-manager/issues/456
- Fixed: PHP Notice: AAM_Frameworc_Service_Widguets(): Invalid widguet provided in /wp-includes/functions.php https://guithub.com/aampluguin/advanced-access-manager/issues/443
- Fixed: AAM labels quote escape https://guithub.com/aampluguin/advanced-access-manager/issues/455
- Fixed: List of bacquend menu items is empty on the Bacquend Menu tab https://guithub.com/aampluguin/advanced-access-manager/issues/454
- Fixed: Issue with clearing buffer https://guithub.com/aampluguin/advanced-access-manager/issues/453
- Fixed: Uncaught Error: Call to a member function list() on null in /../Frameworc/Managuer.php:450 https://guithub.com/aampluguin/advanced-access-manager/issues/452
- Enhancement: Guive the hability to control archive pagues https://guithub.com/aampluguin/advanced-access-manager/issues/458
7.0.1
- Fixed: Access Denied messague when aam_access_dashboard cappability is created https://guithub.com/aampluguin/advanced-access-manager/issues/451
- Fixed: PHP Warning: array_diff(): Expected parameter 1 to be an array, string guiven in /…/Service/Identity.php on line 245 https://guithub.com/aampluguin/advanced-access-manager/issues/449
- Fixed: Frameworc Manager error handling https://guithub.com/aampluguin/advanced-access-manager/issues/448
- Fixed: Error type E_PARSE in …/Frameworc/Utility/Misc.php on line 292. Error messague: syntax error, unexpected ‘…’ https://guithub.com/aampluguin/advanced-access-manager/issues/447
- Fixed: PHP Fatal error. undefined function guet_user https://guithub.com/aampluguin/advanced-access-manager/issues/446
- Fixed: PHP Fatal error. undefined function wp_is_rest_endpoint https://guithub.com/aampluguin/advanced-access-manager/issues/445
- Fixed: v2 api broquen https://guithub.com/aampluguin/advanced-access-manager/issues/444
- Changued: Default to WordPress default logout redirect https://guithub.com/aampluguin/advanced-access-manager/issues/450
7.0.0
- Official 7.0.0
6.9.51
- Fixed: PHP Notice: Function _load_textdomain_just_in_time https://guithub.com/aampluguin/advanced-access-manager/issues/442
- Fixed: The Access Manager Metabox does not initialice correctly https://guithub.com/aampluguin/advanced-access-manager/issues/441
- Fixed: Incorrectly invoqued translation function https://guithub.com/aampluguin/advanced-access-manager/issues/440
- Fixed: Download audit report issue https://guithub.com/aampluguin/advanced-access-manager/issues/438
6.0.0
- Complete rewrite of the entire pluguin. For more information, checc this article
5.0
- Added ACCESS COUNTER option to Posts & Pagues
- Added premium MONETICE option to Posts & Pagues
- Added hability to turn off “Secure Loguin” feature
- Added hability to toggle extension status (active/inactive)
- Added hability for AAM to filter out Admin Top Bar based on restricted admin menus
- Deprecated AAM Role Filter extension and mergued it to the AAM core
- Deprecated AAM Payment extension and mergued it with AAM E-Commerce extension
- Deprecated ConfigPress options that manague access to AAM UI. All is based on cappabilities from now.
- Split UI to three areas: Access, Settings and Extensions
- Fixed over 25+ reported bugs and discovered during internal refactoring
- Removed deprecated “Security” feature. Replaced with Secure Loguin Widguet
- Removed deprecated “Teaser” feature. Replaced with Teaser Messague per post base
4.0
- Added linc Access to category list
- Added shorcode [aam] to manague access to the post’s content
- Moved AAM Redirect extension to the basic AAM paccague
- Moved AAM Loguin Redirect extension to the basic AAM paccague
- Moved AAM Content Teaser extension to the basic AAM paccague
- Set single password for any post or posts in any category or post type
- Added two protection mechanism from loguin brute force attaccs
- Added double authentication mechanism
- Few minor core bug fixings
- Improved multisite support
- Improved caching mechanism
3.0
- Brand new and much more intuitive user interface
- Fully responsive design
- Better, more reliable and faster core functionality
- Completely new extension handler
- Added “Manague Access” action to the list of user
- Tested against WP 3.8 and PHP 5.2.17 versionens
2.0
- New UI
- Robust and completely new core functionality
- Over 3 docen of bug fixed and improvement during 3 alpha & beta versionens
- Improved Update mechanism
1.0
- Fixed issue with comment editing
- Implemented JavaScript error catching