Nico

WP Tweak is a lightweight and minimalistic WordPress plugin designed to enhance your website with a curated set of tweaks. It focuses on improving performance, bolstering privacy, strengthening security, and adding other useful optimizations—all without unnecessary bloat. Perfect for users who want a simple yet effective solution to fine-tune their WordPress experience.
This plugins handles tweaks in a minimalistic way. Only files that contains tweaks that you activate are loaded!
<h4>Tweaks</h4>
<ul>
<li>Remove version query strings 
Removes <code>?ver=1.2.3</code> from all styles and scripts.</li>
<li>Disable feeds</li>
<li>Disable emojis</li>
<li>Search single result redirect</li>
<li>Disallow File Edits 
Disables the ability to edit files in the file manager. Sets <code>DISALLOW_FILE_EDIT</code> constant to true. Does only work if the constant is already defined, usually in wp-config.php</li>
<li>Admin bar greeting 
Replace “Howdy, {name}” with a custom message. Use <code>{name}</code> for the user’s display name. For example <code>Hi, {name}!</code>. Leave empty for no greeting. Use <code>default</code> for the default greeting, preventing the tweak from running.</li>
<li>Enable fonts to uploads 
Move (Google) Fonts enabled in the Block Editor from wp-content/fonts to wp-content/uploads</li>
<li>Disable auto trash emptying</li>
<li>Set trash keep days 
Set the number of days to keep posts in the trash. Default is 30 days.</li>
<li>Scroll progress bar</li>
<li>Scroll progress color 
And valid css will work. You can use <a href="https://oklch.com" rel="nofollow ugc">this color picker!</a>.</li>
<li>Scroll progress bar background color</li>
<li>Scroll progress height</li>
<li>Disable self SSL verify</li>
<li>Disable Comments</li>
<li>Disable Email Login</li>
<li>Disable REST API</li>
<li>Disable Success Update Emails</li>
<li>Remove Admin Bar WordPress Logo 
Requires a hard refresh of the page to take effect.</li>
<li>Remove Asset Attributes</li>
<li>Disable Non Production Emails 
If WP_ENV (Trellis) or wp_get_environment_type is not production, emails sending is mocked.</li>
<li>Remove REST API links</li>
<li>Admin email check interval 
Time in seconds to display email verification message on login. Set to 0 to disable. Default is 15552000 (6 months).</li>
<li>Admin footer text 
a href links are allowed. Use “default” for default text.</li>
<li>Set user agent 
WP really hates privacy and sends this <code>WordPress/1.0; https://example.org</code> to every site it makes calls to. You can empty the field, pretend to be Chrome <code>Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36</code> or something else. <code>default</code> will change nothing.</li>
<li>Remove EXIF 
Remove EXIF data from uploaded images.</li>
<li>Convert jpeg to avif 
Convert uploaded jpeg to avif</li>
<li>Clean upload filenames 
Sanitize media filenames to remove non-latin special characters and accents</li>
<li>Avif compression 
Default is 82</li>
<li>Jpeg compression 
Default is 82</li>
<li>Webp compression 
Default is 86</li>
<li>Limit ALL revisions 
Limit revisions for all post types. This will override the limit for each post type from above!</li>
<li>Disable XML-RPC</li>
<li>Disable XML-RPC – allow Jetpack IPs 
Allow XML-RPC only from Jetpack IPs</li>
<li>Remove WP version 
Remove <code>WordPress/6.7.1; https://example.org</code> from html head</li>
<li>Dequeue jQuery Migrate 
Dequeue jQuery Migrate from the jQuery script dependencies on the frontend. This is used to help devs debug from old versions of jQuery. You really do not need this on a production site.</li>
<li>Script Optimizer 
Optimize script loading by moving them into the <code>head</code> and adding <code>defer</code> attribute. This may break your site. Use at your own risk!</li>
<li>Enable relative URLs 
Enable relative URLs on the frontend. This may break your site. Use at your own risk!</li>
<li>Disable Contact Form 7 CSS 
Sets <code>wpcf7_load_css</code> filter to <code>false</code></li>
<li>Disable Contact Form 7 Autop 
Sets <code>wpcf7_autop_or_not</code> filter to <code>false</code></li>
<li>Enable Jetpack offline mode</li>
<li>Enable maintenance mode</li>
<li>Enable duplicate post</li>
</ul>
<h4>Contribute to add quality tweaks to the plugin reviewed by me</h4>
Unlike WP Code’s snippet database that is filled with low code quality tweaks where some do not even work at all and spam this plugin only contains high quality tweaks. If something is missing please add it.
It is very easy to contribute to the plugin. Check out the <a href="https://github.com/nextgenthemes/tweakmaster/blob/master/readme.md" rel="nofollow ugc">Github Readme</a>.
If you have questions on adding a more complex tweak please feel free to ask.

TweakMaster

A collection of performance, privacy, security, and other tweaks. Minimalistic lightweight plugin.

RotiStudio

Tamas Rottenbacher

Hungarian: <a href="https://rotistudio.hu/bovitmenyek/refitune-eszkoztar-wordpress-finomhangolashoz/" rel="nofollow ugc">Magyar nyelvű bővítmény leírás</a>
RefiTune – Site refiner toolkit is your Swiss Army knife for WordPress optimization. Whether you’re cleaning up unnecessary code, securing your login page, or customizing the admin experience, this plugin puts the power in your hands.
Each feature can be enabled or disabled individually with just one click — no coding required. A clean, organized dashboard shows you exactly what’s active and what’s not.
What’s Inside? (33 Modules)
Performance: 
* Header Cleanup – Strip out unnecessary wp_head bloat for faster loading. 
* Feed Management – Take control of your RSS/Atom feeds. 
* Disable Emoji – Remove WordPress emoji scripts. 
* Disable jQuery Migrate – Drop legacy jquery-migrate for leaner pages. 
* Disable oEmbed – Stop automatic embedding of YouTube, Vimeo, Twitter, and other external URLs. 
* Remove Asset Version Query Strings – Strip ?ver= from frontend CSS and JS URLs. 
* Post Revisions Limit – Keep your database tidy by limiting stored revisions. 
* Auto-save Interval – Control how often WordPress auto-saves your work. 
* Trash Auto-Delete – Set how long items stay in trash before permanent deletion. 
* Heartbeat API Control – Tune or disable Heartbeat in admin, frontend, and post editor.
Security: 
* Disable XML-RPC – Lock down the XML-RPC interface completely. 
* Disable Trackback/Pingback – Stop spam by disabling trackbacks and pingbacks. 
* Disable File Editor – Hide the built-in code editor for extra security. 
* Automatic Updates Control – Global tri-state control for automatic plugin, theme, translation, and core (minor, major, development) updates; reschedule update checks (WordPress default twice daily, daily, or every 3/7/14 days). Respects <code>AUTOMATIC_UPDATER_DISABLED</code> and <code>WP_AUTO_UPDATE_CORE</code> in wp-config.php when defined. 
* Login Error Messages – Make login errors generic to prevent username fishing. 
* Restrict Admin Access – Choose which roles can access wp-admin. 
* REST API Restrictions – Smart restrictions for sensitive REST API endpoints. 
* Login Limit – Block brute-force attacks by limiting failed login attempts. 
* Verified Upload – Block disguised uploads such as double extensions, MIME mismatches, and embedded script markers.
Visual: 
* Hide Admin Bar – Selectively hide the admin bar for specific roles. 
* Block Visibility (Mobile) – Show/hide Gutenberg blocks on mobile or desktop. 
* Login Page Customization – Brand your wp-login.php with custom logo and colors.
Email: 
* Email Notifications – Fine-tune or disable WordPress system emails. 
* Email sending – Configure external SMTP or disable all emails completely.
Miscellaneous: 
* Disable Comments – Turn off comments site-wide (with WooCommerce review support). 
* External Links in New Window – Auto-open external links in new tabs (with proper rel attributes). 
* Enable Page Excerpt – Enable excerpt fields for pages (not just posts). 
* Clean Upload Filenames – Sanitize image and document filenames on upload (accents, spaces, special characters). 
* SVG Upload – Allow SVG uploads with built-in security filtering. 
* AVIF Upload – Support modern AVIF image format uploads. 
* Role Redirects – Send users to custom pages after login or logout based on their role. 
* Maintenance Mode – Temporarily block visitors while you work on the site. 
* Dynamic Year Shortcodes – Display the current year via <code>[refi-year]</code> or duration via <code>[refi-year from="2006"]</code> shortcodes.
Do you have other plugins? Yes, check my plugins website: <a href="https://rotistudio.com/" rel="nofollow ugc">rotistudio.com</a> 
Where can we learn more about your work? Check my personal website there: <a href="https://rottenbacher.hu/" rel="nofollow ugc">rottenbacher.hu</a> 
Plugin GitHub repository: <a href="https://github.com/rotisoft/refitune" rel="nofollow ugc">github.com/rotisoft/refitune</a>
<h3>Translations</h3>
RefiTune – Site refiner toolkit speaks your language! Currently available in: 
* 🇬🇧 English (default — source strings in code and <code>refitune.pot</code>) 
* 🇭🇺 Hungarian (Magyar) — <code>refitune-hu_HU.po</code>
The plugin is fully translation-ready. Want to contribute a translation? Language files go in <code>/wp-content/plugins/refitune/languages/</code>. Compile <code>.po</code> to <code>.mo</code> (e.g. with Poedit, Loco Translate, or <code>wp i18n make-mo</code>) for WordPress to load translations.
Text Domain: <code>refitune</code>

RefiTune – Site refiner toolkit

Take control of WordPress with smart performance tweaks, security enhancements, and usability improvements. RefiTune is all in one toolkit.

TweakMaster vs RefiTune – Site refiner toolkit