Remove Dashboard Access · Version history
Remove Dashboard Access changelog and version history
- Latest version
- 1.3.1
- May 22, 2026 (5 months ago)
- Releases
- 14
- since 2011
- In the last year
- 2
- about one every 0 days
- Tested up to
- WordPress 7.0.8
- PHP 5.3 or later
Releases each year
- 20113 releases
- 20131 release
- 20142 releases
- 20151 release
- 20222 releases
- 20231 release
- 20242 releases
- 20262 releases
20262 releases
Remove Dashboard Access 1.3.1Latest
- This release adds the missing License headers that the wordpress.org plugin reviewer flagged during the 1.3.0 import. No functional change.
- Added the License: GPLv2 or later and License URI: https://www.gnu.org/licenses/gpl-2.0.html headers to readme.txt and normalized the plugin file’s License: header to the same canonical form. The plugin has always been GPLv2-licensed; the headers were just missing from the locations wordpress.org’s…
Remove Dashboard Access 1.3.0
- This release adds an Allowed URLs setting with wildcard support, groups the more advanced options under their own section, and fixes several long-standing admin-page-access and translation issues.
- Allowed URLs — A new textarea on the Dashboard Access settings page where you can paste any URLs that should skip the dashboard redirect, one per line. Useful for letting customers reach a specific admin page (like a payment confirmation or a TrustedLogin secret-share screen) without giving them th…
- Wildcards in Allowed URLs — Use * inside a query value to match a group of pages at once. For example, ?page=tl-* lets through tl-secrets, tl-config, and any other page slug that starts with tl-.
- Also block AJAX — A new checkbox in the Advanced section to extend the dashboard restriction to admin-ajax.php requests too. Most sites should leave this off; turn it on only if you know your AJAX endpoints rely on this plugin to keep them gated.
- Advanced section — The settings page now has two clear groups: the everyday Dashboard Access Controls at the top, and an Advanced section below for AJAX blocking and the Allowed URLs list. Easier to scan, less intimidating for new users.
- The settings page now validates the capability values you save. A typo, empty value, or unknown capability can no longer be saved and silently disable the dashboard restriction.
- The disallowed-user redirect uses WordPress’s safer wp_safe_redirect(). Your configured redirect URL still works, including external destinations — but accidental redirects to other hosts are now blocked.
- When you add an admin.php?page=… entry to the allow-list, the plugin now confirms the page is actually registered by another plugin before letting visitors through.
- admin-post.php is now reachable as the 1.2.2 release notes promised. It had been quietly blocked despite the documentation saying it should be exempt.
- Two-step admin flows on allow-listed pages — like Wordfence Login Security’s 2FA OTP step — no longer get rejected just because the request carries extra query parameters.
- Translations from translate.wordpress.org will now actually load on your site. The plugin’s text domain didn’t match the WordPress.org slug, so community-submitted translations (including zh_TW) were silently being dropped. Thanks to Alex Lion (阿力獅) (@alexclassroom) for surfacing this and contribut…
- A handful of strings that weren’t translatable before — most notably the screen-reader hint on the Login Message link — are now translatable.
- The uninstall script only runs when WordPress is actually uninstalling the plugin, not on stray requests to its file.
- Text domain renamed from remove_dashboard_access to remove-dashboard-access-for-non-admins to match the WordPress.org slug. If you maintain custom .po/.mo files in /languages/, rename them to use the new domain.
- New rda_strict_ajax filter mirrors the “Also block AJAX” setting for code-level control on a per-site basis.
- The existing rda_allowlist filter still works; entries now support * wildcards inside query values.
- New unit test suite using @wordpress/scripts + wp-env + PHPUnit. Run locally with npm test.
20242 releases
Remove Dashboard Access 1.2.1
- Fixed: Compatibility with WordPress 6.7 (there was a warning that translations were being loaded too soon)
- Tweak: Sanitized admin menu URL
Remove Dashboard Access 1.2
- Confirmed compatibility with WordPress 6.4.2
- New: Added a new filter, rda_allowlist, to configure pages that should be accessible to all users, regardless of their capabilities or roles (see FAQ for usage)
- Improved: Added a description that clarifies that the Login Message is only displayed on the WordPress “Log In” screen
- Improved: The User Profile Access text is now a proper label for the checkbox
- Fixed: Allow access to the Wordfence 2FA configuration page (#33)
- Fixed: Text domain not properly set for translations (thanks @fierevere)
- Tweak: Prevent directly accessing PHP files by checking for ABSPATH (#26)
- Tweak: Prevent browsing directories on poorly-configured servers by adding index.php files in plugin directories
20231 release
Remove Dashboard Access 1.1.5
20222 releases
Remove Dashboard Access 1.1.4
- Remove Dashboard Access is now being maintained by TrustedLogin! Remove Dashboard Access aligns with what we do at TrustedLogin: simply making WordPress more secure. Email any questions to support@trustedlogin.com.
- Fixed: Deactivating and activating the plugin will no longer overwrite plugin settings
- Fixed: Deprecated function screen_icon() warning
- Fixed: Issue when front-end editing of profiles when the $pagenow global is not defined (#24)
- Fixed: Potential Invalid argument supplied for foreach() PHP warning (#22)
Remove Dashboard Access 1.1.3
- Fixed a compatibility issue with bbPress and the media grid view.
20151 release
Remove Dashboard Access 1.1.2
- Bump tested-up-to to 4.1.0
- Miscellaneous readme changes.
20142 releases
Remove Dashboard Access 1.1.1
- Bug Fix:
- Move options back to Settings > Dashboard Access screen to resolve conflict with page_on_front UI.
Remove Dashboard Access 1.1
- Enhancements:
- Instantiate as a static instance for better modularity
- Move Dashboard Access Controls settings to Settings > Dashboard Access
- Add optional login message option
- Add better settings sanitization
- New Filter: rda_default_caps_for_role – Filter default roles for Admins, Editors, and Authors
- New Debug Mode
- Bug Fixes:
- Remove unnecessarily stringent URL mask on the redirect URL option
20131 release
Remove Dashboard Access 1.0
- Complete rewrite!
- New: Limit dashboard access for Admins only or by capability
- New: Allow/disallow edit-profile access
- New: Choose your own redirect URL
- New Filter: rda_default_access_cap – Change default access capability
- New Filter: rda_toolbar_nodes – Filter which back-end Toolbar nodes are hidden
- New Filter: rda_frontend_toolbar_nodes – Filter which front-end Toolbar nodes are hidden
20113 releases
Remove Dashboard Access 0.4
- Refined DOING_AJAX check for logged-out users, props @nacin and @BoiteAWeb
Remove Dashboard Access 0.3
- Changed cap to manage_options, replaced PHP_SELF with DOING_AJAX
Remove Dashboard Access 0.2
- Replaced preg_match with admin-ajax test. Added compatibility with rewritten dashboard URLs.
Questions about Remove Dashboard Access’s releases
What is the latest version of Remove Dashboard Access?
1.3.1, released on May 22, 2026 (5 months ago). It’s tested up to WordPress 7.0.8 and needs PHP 5.3 or later.
How often is Remove Dashboard Access updated?
2 releases in the last year, about one every 0 days. Its first release on WordPress.org dates from October 2011.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in Remove Dashboard Access’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.