Kishan Jasani

<p>Coreline is a lightweight WordPress security and optimization plugin that provides essential hardening features for your WordPress installation. It follows clean code principles, PSR standards, and is designed to be testable, scalable, and maintainable.</p>
<h4>Features</h4>
<ul>
<li><strong>Emoji Script Removal</strong> – Removes WordPress emoji detection scripts to improve performance</li>
<li><strong>WordPress Version Hiding</strong> – Removes WordPress version numbers from HTML and RSS feeds for better security</li>
<li><strong>Custom Login URL</strong> – Changes wp-login.php to a custom URL (e.g., <code>/secure-login/</code>) to prevent automated brute-force attacks</li>
<li><strong>Hotlink Protection</strong> – Prevents other websites from hotlinking your images (works on both Apache and Nginx)</li>
<li><strong>Disable Pingbacks & Trackbacks</strong> – Disables XML-RPC pingbacks and trackbacks for improved security</li>
</ul>
<h4>Benefits</h4>
<ul>
<li>Lightweight and fast</li>
<li>No database queries overhead</li>
<li>Clean, PSR-compliant code</li>
<li>Fully tested and maintained</li>
<li>Compatible with all major themes and plugins</li>
</ul>
<h4>Developer Friendly</h4>
<p>Coreline is built with developers in mind:</p>
<ul>
<li>PSR-4 autoloading</li>
<li>WordPress Coding Standards compliant</li>
<li>PHPStan Level 8 verified</li>
<li>Fully filterable and extensible</li>
<li>Comprehensive inline documentation</li>
</ul>
<h3>Support</h3>
<p>For bug reports and feature requests, please visit <a href="https://github.com/kishanjasani/coreline/issues" rel="nofollow ugc">GitHub Issues</a></p>
<h3>License</h3>
<p>This plugin is licensed under the <a href="https://www.gnu.org/licenses/gpl-2.0.html" rel="nofollow ugc">GPLv2 or later</a>.</p>


Coreline

Essential hardening and cleanup for every WordPress site.

hosting.io

<p><strong>Featherweight makes your site faster by switching off the features you don’t use.</strong> Every disabled item is one less HTTP request, one less script, or one less query — adding up to lighter pages and better Core Web Vitals. Pick only what you need; nothing is forced on.</p>
<blockquote>
<p><strong>Formerly WP Disable.</strong> Same plugin, new name. Featherweight is part of the Folium Studio suite — your existing settings carry over untouched on update.</p>
</blockquote>
<h4>Reduce requests & strip front-end bloat</h4>
<ul>
<li>Disable emojis (removes the emoji detection script and styles)</li>
<li>Remove query strings from static assets (<code>?ver=...</code>) for cleaner caching</li>
<li>Disable oEmbeds (the auto-embed script that loads site-wide)</li>
<li>Disable Gravatars</li>
<li>Remove jQuery Migrate on the front end</li>
<li>Combine and asynchronously load Google Fonts and Font Awesome</li>
<li>Add DNS-prefetch hints for external hosts</li>
<li>Remove the password-strength-meter script where it isn’t needed</li>
<li>Drop Dashicons on the front end when the admin toolbar is hidden</li>
</ul>
<h4>Clean up the page header</h4>
<ul>
<li>Remove the generator tag, shortlink, RSD, Windows Live Writer, and REST API link tags</li>
</ul>
<h4>Comments & discussion</h4>
<ul>
<li>Disable comments everywhere, or selectively per post type</li>
<li>Close comments on older posts and paginate long threads</li>
<li>Strip links from comments</li>
<li>Disable pingbacks and trackbacks</li>
<li>Schedule automatic spam-comment cleanup</li>
</ul>
<h4>Admin & performance controls</h4>
<ul>
<li>Limit or disable post revisions and autosave</li>
<li>Control the WordPress Heartbeat (frequency and where it runs)</li>
<li>Disable the REST/XML feeds (RSS), XML-RPC, author archive pages, and admin notices</li>
</ul>
<h4>SEO helpers</h4>
<ul>
<li>Remove the Yoast SEO HTML comment from the head</li>
<li>Remove duplicate names in Yoast breadcrumbs</li>
</ul>
<h4>Optional WooCommerce optimisations</h4>
<p>When WooCommerce is active, you can stop its scripts and styles from loading on non-store pages, defer cart fragments, disable product reviews, and skip the password-strength meter on unrelated pages.</p>
<h4>Good to know</h4>
<ul>
<li>Disabling emojis does not affect normal emoticons — it only removes the extra emoji-detection script.</li>
<li>Removing query strings can interfere with some CDNs that key cache on them; leave it off if unsure.</li>
<li>Everything is optional and reversible — toggle a setting off and the behaviour returns.</li>
</ul>
<p><strong>Have an idea or found a bug?</strong> The plugin is developed in the open — see the <a href="https://github.com/FoliumStudio/featherweight" rel="nofollow ugc">public GitHub repo</a> to contribute or open an issue.</p>


Featherweight

Speed up WordPress by disabling unused features — emojis, embeds, query strings, XML-RPC, RSS and more — for fewer requests and faster pages.

Coreline vs Featherweight