Kishan Jasani

<p>Coreline is a lightweight WordPress security and optimization plugin that provides essential hardening features for your WordPress installation. It follows clean code principles, PSR standards, and is designed to be testable, scalable, and maintainable.</p>
<h4>Features</h4>
<ul>
<li><strong>Emoji Script Removal</strong> – Removes WordPress emoji detection scripts to improve performance</li>
<li><strong>WordPress Version Hiding</strong> – Removes WordPress version numbers from HTML and RSS feeds for better security</li>
<li><strong>Custom Login URL</strong> – Changes wp-login.php to a custom URL (e.g., <code>/secure-login/</code>) to prevent automated brute-force attacks</li>
<li><strong>Hotlink Protection</strong> – Prevents other websites from hotlinking your images (works on both Apache and Nginx)</li>
<li><strong>Disable Pingbacks & Trackbacks</strong> – Disables XML-RPC pingbacks and trackbacks for improved security</li>
</ul>
<h4>Benefits</h4>
<ul>
<li>Lightweight and fast</li>
<li>No database queries overhead</li>
<li>Clean, PSR-compliant code</li>
<li>Fully tested and maintained</li>
<li>Compatible with all major themes and plugins</li>
</ul>
<h4>Developer Friendly</h4>
<p>Coreline is built with developers in mind:</p>
<ul>
<li>PSR-4 autoloading</li>
<li>WordPress Coding Standards compliant</li>
<li>PHPStan Level 8 verified</li>
<li>Fully filterable and extensible</li>
<li>Comprehensive inline documentation</li>
</ul>
<h3>Support</h3>
<p>For bug reports and feature requests, please visit <a href="https://github.com/kishanjasani/coreline/issues" rel="nofollow ugc">GitHub Issues</a></p>
<h3>License</h3>
<p>This plugin is licensed under the <a href="https://www.gnu.org/licenses/gpl-2.0.html" rel="nofollow ugc">GPLv2 or later</a>.</p>


Coreline

Essential hardening and cleanup for every WordPress site.

WordPress.org

<p>This plugin captures real user metrics about what elements are displayed on the page across a variety of device form factors (e.g. desktop, tablet, and phone) in order to apply loading optimizations which are not possible with WordPress’s current server-side heuristics.</p>
<p>This plugin is a framework dependency which does not provide optimization functionality on its own. For that, please install the <a href="https://wordpress.org/plugins/image-prioritizer/" rel="ugc">Image Prioritizer</a> and <a href="https://wordpress.org/plugins/embed-optimizer/" rel="ugc">Embed Optimizer</a> dependent plugins (among <a href="https://github.com/WordPress/performance/labels/%5BPlugin%5D%20Optimization%20Detective" rel="nofollow ugc">others</a> to come from the WordPress Core Performance team). There are currently <strong>no settings</strong> and no user interface for this plugin since it is designed to work without any configuration.</p>
<p>Your site must currently have the <strong>REST API accessible</strong> to unauthenticated frontend visitors since this is how real user metrics are collected about pages on your site; nevertheless, <a href="https://github.com/WordPress/performance/issues/1311" rel="nofollow ugc">exploration</a> is underway for providing alternative mechanisms for collecting the metrics. Also, please note that no metrics are currently collected from Safari since it does not yet support the <a href="https://developer.mozilla.org/en-US/docs/Web/API/LargestContentfulPaint" rel="nofollow ugc">Largest Contentful Paint</a> metric, but support for this <a href="https://web.dev/explore/learn-core-web-vitals" rel="nofollow ugc">Core Web Vitals</a> metric is coming this year <a href="https://webkit.org/blog/16458/announcing-interop-2025/#core-web-vitals" rel="nofollow ugc">via Interop 2025</a>.</p>
<p>Please refer to the <a href="https://github.com/WordPress/performance/blob/trunk/plugins/optimization-detective/docs/README.md" rel="nofollow ugc">full plugin documentation</a> for a <a href="https://github.com/WordPress/performance/blob/trunk/plugins/optimization-detective/docs/introduction.md" rel="nofollow ugc">technical introduction</a>, <a href="https://github.com/WordPress/performance/blob/trunk/plugins/optimization-detective/docs/hooks.md" rel="nofollow ugc">filter/action hooks</a>, and <a href="https://github.com/WordPress/performance/blob/trunk/plugins/optimization-detective/docs/extensions.md" rel="nofollow ugc">extensions</a> that show use cases and examples. You can also watch the talk from WordCamp Asia 2025: <a href="https://weston.ruter.net/2025/02/21/boosting-performance-with-optimization-detective/" rel="nofollow ugc">Boosting Performance with Optimization Detective</a>.</p>


Optimization Detective

Provides a framework for leveraging real user metrics to detect optimizations for improving page performance.

Coreline vs Optimization Detective