Luis Celadita

This plugin is fully compatible with Autoptimize and any cache plugin (Cache Enabler or Wp Super Cache by example)
Some of the tweaks that this plugin automatically applies securely are the following:
<h4>SET HTTP SECURITY HEADERS</h4>
<ul>
<li>X-Frame-Options: SAMEORIGIN</li>
<li>X-XSS-Protection: 1;mode=block</li>
<li>Referrer-Policy: no-referrer-when-downgrade</li>
<li>X-Content-Type-Options: nosniff</li>
<li>Strict-Transport-Security: max-age=15552000</li>
<li>Content-Security-Policy</li>
</ul>
<h4>REMOVE THIS</h4>
<ul>
<li>Remove Really Simple Discovery link from header</li>
<li>Remove wlwmanifest.xml (Windows Live Writer) from header</li>
<li>Remove Shortlink URL from header</li>
<li>Remove WordPress Generator Version from header</li>
<li>Remove s.w.org DNS Prefetch</li>
<li>Remove generator name from RSS Feeds</li>
<li>Remove Capital P Dangit filter</li>
<li>Remove WordPress and WooCommerce meta generator tags</li>
<li>Remove Jquery_migrate</li>
<li>Remove Dashicons in admin bar (only for non logged users)</li>
<li>Remove Post oEmbed</li>
</ul>
<h4>AND MORE AUTO SETTINGS</h4>
<ul>
<li>Change Control Heartbeat API interval (60 seconds)</li>
<li>Disable the XML-RPC interface</li>
<li>Disable PDF thumbnails preview</li>
<li>Disable Self Pingbacks</li>
<li>Limit Post Revisions to 1</li>
<li>Add IDs to posts, pages, and categories</li>
</ul>
Just activate the plugin and test your site’s speed in your favourite tool (GTMetrix, Pingdom Tools, Securityheaders.com, etc.)

AutoTweaks

WP Classic Setup: Removes WP version, dashicons, oEmbed, Jquery Migrate, XMLRPC. Set Http security headers, heartbeat to 60s, Post revisions to 1, etc

Ayuda WordPress

Fernando Tellado

WPO Tweaks is the most complete performance optimization plugin for WordPress. It combines the best WPO (Web Performance Optimization) practices in a single easy-to-use tool. No configuration needed: activate and enjoy a faster WordPress.
By default, WordPress loads several functions, services and scripts that are not mandatory and usually slow down your installation and consume hosting resources. For years I have been testing tweaks to save hosting resources and improve WordPress performance and loading times. After thousands of tests, this plugin includes my best speed and performance optimizations with a single click.
With this plugin you can safely disable those annoying services, unnecessary codes and scripts to save resources and hosting costs, and speed up WordPress to get better results in tools like Google PageSpeed, Pingdom Tools, GTMetrix, WebPageTest and others.
New version 2.1.x with modular architecture and enhanced reliability!
<h3>NEW FEATURES V2.1.x</h3>
Modular Architecture: 
* Complete Code Refactoring: Plugin rebuilt with modular architecture for better maintainability and performance 
* Separated Components: Each optimization is now in its own module for easier debugging and updates 
* Enhanced Reliability: Improved error handling and better compatibility across different hosting environments
File Management System: 
* Automatic Backups: Creates secure backups of wp-config.php and .htaccess before modifications 
* Safe Restoration: Automatic restoration of original files on plugin deactivation 
* Intelligent Installation: Detects and resolves conflicts with existing configurations
Image Optimizations: 
* Missing Image Dimensions: Automatically detects and adds width/height attributes to images and picture elements without dimensions, improving Cumulative Layout Shift (CLS) scores 
* Picture Element Support: First plugin to automatically add dimensions to elements (more comprehensive than most optimization plugins) 
* Enhanced Lazy Loading: Improved lazy loading system with better Gravatar support
Configuration Management: 
* wp-config.php Optimization: Direct wp-config.php modifications for guaranteed trash retention settings (7 days) 
* Conflict Resolution: Automatically removes conflicting existing configurations 
* Clean Deactivation: Complete cleanup of all modifications when plugin is deactivated
User Experience: 
* Activation Notice: Informative welcome message showing all applied optimizations 
* Admin Dashboard: Clean interface with optimization summary 
* Developer Friendly: Enhanced filter system for advanced customization
<h3>INCLUDED OPTIMIZATIONS</h3>
Classic Optimizations (since v1.0): 
* Browser cache rules in .htaccess 
* GZIP compression in .htaccess 
* Remove Dashicons in admin bar (non-logged users only) 
* Remove Emojis styles and scripts 
* Disable REST API (completely disabled) 
* Control Heartbeat API interval (60s instead of 15s) 
* Remove Query Strings from static resources 
* Defer JavaScript parsing 
* Remove Query Strings from Gravatar 
* Remove Really Simple Discovery link from header 
* Remove wlwmanifest.xml (Windows Live Writer) from header 
* Remove URL Shortlink from header 
* Remove WordPress Generator version from header 
* Remove DNS Prefetch from s.w.org 
* Remove unnecessary links from header 
* Remove RSS feeds generator name 
* Remove Capital P Dangit filter 
* Disable PDF thumbnails previews 
* Disable internal Self Pingbacks
Advanced Optimizations (since v2.0): 
* Automatic Critical CSS with smart cache 
* Deferred CSS Loading for non-critical styles 
* Automatic preconnect for Google Fonts, Analytics, etc. 
* Smart DNS Prefetch for external resources including Gravatar 
* Native Lazy Loading with decoding=async 
* Automatic transients cleanup for expired entries 
* Database query optimization 
* jQuery Migrate removal when not needed 
* Critical resources preloading (theme CSS, fonts) 
* Enhanced security headers 
* Administrative dashboard cleanup 
* Smart revisions and trash management
New in v2.1.0: 
* Missing Image Dimensions – Automatically adds width/height attributes to improve CLS scores 
* Enhanced File Management – Secure backup and restoration system 
* Modular Code Architecture – Better performance and maintainability 
* Improved wp-config.php Handling – Direct configuration management for better reliability
<h3>HOW TO VERIFY OPTIMIZATIONS ARE WORKING</h3>
You can check each optimization individually to ensure WPO Tweaks is working correctly:
Missing Image Dimensions: Inspect images in your browser (F12 > Elements). Images should have <code>width="X"</code> and <code>height="Y"</code> attributes even if they weren’t originally coded with dimensions.
Critical CSS: View page source (Ctrl+U) and look for <code><style id="ayudawp-wpotweaks-critical-css"></code> in the head section containing basic CSS rules.
Deferred CSS: In source code, look for <code><link></code> tags with <code>rel="preload" as="style"</code> instead of <code>rel="stylesheet"</code>, followed by <code><noscript></code> fallbacks.
Google Fonts Optimization: Google Fonts URLs should include <code>&display=swap</code> parameter.
Preconnect: Look for <code><link rel="preconnect"></code> tags in the head pointing to fonts.googleapis.com, fonts.gstatic.com, etc.
DNS Prefetch: Check for <code><link rel="dns-prefetch"></code> tags pointing to external domains like gravatar.com, stats.wp.com.
Lazy Loading: Inspect images (F12) – they should have <code>loading="lazy"</code> and <code>decoding="async"</code> attributes.
Resource Preload: Look for <code><link rel="preload"></code> tags for your theme’s CSS and critical fonts.
Version Removal: Source code should NOT contain <code><meta name="generator" content="WordPress X.X"></code> or <code>?ver=</code> in script/style URLs.
Dashicons Removal: When logged out, source code should NOT include <code>dashicons.min.css</code>. When logged in, it should appear.
Emojis Removal: Source code should NOT contain <code>wp-emoji-release.min.js</code> or emoji-related styles.
Header Cleanup: Source code should NOT contain <code><link rel="EditURI"></code>, <code><link rel="wlwmanifest"></code>, or <code><link rel="shortlink"></code>.
JavaScript Defer: Most <code><script></code> tags (except jQuery) should include the <code>defer</code> attribute.
GZIP Compression: Test at <a href="https://www.giftofspeed.com/gzip-test/" rel="nofollow ugc">giftofspeed.com/gzip-test</a> – should show “GZIP is enabled”.
Cache Headers: Check your <code>.htaccess</code> file for a section marked “BEGIN WPO Tweaks by Fernando Tellado” with expiration rules.
Heartbeat Control: In WordPress Dashboard, open browser dev tools (F12) > Network tab. AJAX requests to <code>admin-ajax.php</code> with <code>action=heartbeat</code> should occur every 60 seconds instead of 15.
Use tools like Google PageSpeed, GTMetrix, Pingdom Tools, and WebPageTest to measure overall performance improvements. Always test twice to account for caching effects.
<h3>COMPATIBILITY AND EXTENSIBILITY</h3>
The plugin includes multiple filters for developers: 
* <code>ayudawp_wpotweaks_critical_css</code> – Customize critical CSS 
* <code>ayudawp_wpotweaks_preconnect_hints</code> – Add custom preconnect 
* <code>ayudawp_wpotweaks_dns_prefetch_domains</code> – Customize DNS prefetch domains 
* <code>ayudawp_wpotweaks_critical_fonts</code> – Define critical fonts for preload 
* <code>ayudawp_wpotweaks_keep_xmlrpc</code> – Keep XML-RPC if needed 
* <code>ayudawp_wpotweaks_keep_feeds</code> – Control feeds removal
Compatible with: 
* Jetpack (keeps XML-RPC automatically) 
* All well-coded themes 
* Cache plugins (W3 Total Cache, WP Rocket, etc.) 
* WordPress Multisite 
* Page Builders (Divi, Elementor, Beaver Builder, Gutenberg)
<h3>INSTALLATION AND USE</h3>
No options. Just activate the plugin and test your site speed in your favorite tool (GTMetrix, Pingdom Tools, Google PageSpeed, etc.)
The plugin is completely automatic and applies optimizations safely without breaking functionality.
<h3>MEASURING RESULTS</h3>
Recommended tools: 
* <a href="https://pagespeed.web.dev/" rel="nofollow ugc">Google PageSpeed Insights</a> 
* <a href="https://gtmetrix.com/" rel="nofollow ugc">GTMetrix</a> 
* <a href="https://www.webpagetest.org/" rel="nofollow ugc">WebPageTest</a>
Best measurement practices: 
* Run at least 2 tests (first one may not show cache) 
* Always use the same tool for comparison 
* Measure performance over time, not just once 
* Remember that no tool can replace human perception
<h3>Support</h3>
<h4>Need help or have suggestions?</h4>
<ul>
<li><a href="https://servicios.ayudawp.com/" rel="nofollow ugc">Official website</a></li>
<li><a href="https://wordpress.org/support/plugin/wpo-tweaks/" rel="ugc">WordPress support forum</a></li>
<li><a href="https://www.youtube.com/AyudaWordPressES" rel="nofollow ugc">YouTube channel</a></li>
<li><a href="https://ayudawp.com/" rel="nofollow ugc">Documentation and tutorials</a></li>
</ul>
Love the plugin? Please leave us a 5-star review and help spread the word!
<h3>About AyudaWP</h3>
We are specialists in WordPress security, SEO, and performance optimization plugins. We create tools that solve real problems for WordPress site owners while maintaining the highest coding standards and accessibility requirements.

WPO Tweaks & Performance Optimizations

Advanced performance optimizations for WordPress. Improves speed, reduces server resources and optimizes PageSpeed.

AutoTweaks vs WPO Tweaks & Performance Optimizations