About this plugin
SafeEdit gives non-technical clients a safe, restricted editing interface for your pages and posts. Clients can only edit text content and swap images inside zones you define — they cannot break layouts, delete sections, touch code, or reach the WordPress admin.
How it works
- You mark editable areas with data-safeedit="zone-name" attributes in your page HTML, or simply leave Auto-Content Detection on so the main content area becomes editable automatically.
- Your client logs in, opens any page, toggles SafeEdit ON, and edits text inline or swaps images through the WordPress Media Library.
- Changes are autosaved, and a backup snapshot is kept before each editing session so any change can be rolled back.
Key features
- Safe text editing — clients edit only within defined zones; the surrounding HTML structure is locked.
- Image swapping — swap any image zone through the WordPress Media Library.
- Auto-Content Detection — make the main content area editable with no template changes.
- Automatic backups — a snapshot is taken before each session, with one-click “Previous versions” rollback from the frontend.
- SafeEdit Client role — a custom role that can only view the site and edit zones. It cannot access wp-admin, create posts, or change settings.
- Per-page control — enable or disable SafeEdit for each page from a metabox.
- Per-client page permissions — choose which SafeEdit Client users can edit each page; unrestricted pages remain editable by every authorized client.
- Paste protection — pasted content is stripped to safe markup (no script or HTML injection).
- Block editor ready — on block editor (Gutenberg) pages, paragraphs, headings, list items, and images become editable automatically, and every save preserves block delimiters and attributes.
- Server-side sanitization — all content is sanitized with WordPress’s wp_kses before saving; off-site images and javascript: links are stripped.
- Rate limiting — save endpoints are rate limited to protect your server.
- No third-party calls — SafeEdit does not load fonts, scripts, or styles from external servers and does not phone home.
Custom client role
SafeEdit creates a “SafeEdit Client” role that can only view the frontend and edit SafeEdit zones. Clients are redirected away from wp-admin. They cannot create posts, change settings, install plugins, or do anything beyond editing the zones you allow.
Looking for more?
A separate premium version, SafeEdit Pro, adds Advanced Custom Fields (ACF) editing and WooCommerce product and price editing. All features included in this free plugin, including per-client page permissions, work without payment or a license key. The separately distributed Pro plugin is optional.
See the “Go Pro” tab in the plugin settings for details.
org username goldenlobster ). site/.