keithlunt

A lightweight plugin that disables XML-RPC, restricts the REST API to logged-in users, and hides the WordPress version number

Janric Simple Security Hardening

A lightweight plugin to disable XML-RPC, restrict the REST API, and hide the WordPress version.

Shah Alom

Micro Solutions Bangladesh

Basic Optimization provides simple on/off controls for common WordPress cleanup and performance-related tweaks. It is intentionally small, dependency-free, and designed for site owners who want practical optimization controls without a large performance suite.
The plugin adds a Basic Optimization admin screen where administrators can enable or disable each feature independently. It also includes a child Email Notifications settings page for disabling selected WordPress core auto emails.
<h4>Features</h4>
<ul>
<li>Disable Emojis – Removes WordPress emoji scripts, styles, filters, and emoji DNS prefetch output.</li>
<li>Remove Shortlink – Removes the shortlink tag from the document head.</li>
<li>Remove CSS/JS Version – Removes the <code>ver</code> query argument from enqueued stylesheet and script URLs.</li>
<li>Remove RSD Links – Removes the Really Simple Discovery link from the document head.</li>
<li>Disable Embeds – Removes WordPress oEmbed discovery links and dequeues the default <code>wp-embed</code> frontend script.</li>
<li>Disable XML-RPC – Disables XML-RPC requests and removes the <code>X-Pingback</code> response header.</li>
<li>Remove WLW Manifest Link – Removes the Windows Live Writer manifest link from the document head.</li>
<li>Disable Self Pingback – Prevents self pingbacks when content links to the same site.</li>
<li>Hide WordPress Version – Removes the WordPress generator meta tag from the document head.</li>
<li>Disable Heartbeat – Deregisters the WordPress heartbeat script on the frontend.</li>
<li>Email Notifications – Adds dropdown controls to disable selected WordPress core auto emails, including new user registration, password changed, comment moderation, and automatically approved comment notifications.</li>
</ul>
<h4>Notes</h4>
Some features can affect integrations that rely on WordPress defaults. For example, disabling XML-RPC can affect external publishing clients and services that still depend on XML-RPC. Disabling auto emails can also affect administrator awareness of user and comment activity. Disable only the features that match your site requirements.

Basic Optimization

A lightweight WordPress optimization plugin for disabling selected default frontend and header outputs such as emojis, shortlinks, embeds, XML-RPC, se …

Janric Simple Security Hardening vs Basic Optimization