Nico

WP Tweak is a lightweight and minimalistic WordPress plugin designed to enhance your website with a curated set of tweaks. It focuses on improving performance, bolstering privacy, strengthening security, and adding other useful optimizations—all without unnecessary bloat. Perfect for users who want a simple yet effective solution to fine-tune their WordPress experience.
This plugins handles tweaks in a minimalistic way. Only files that contains tweaks that you activate are loaded!
<h4>Tweaks</h4>
<ul>
<li>Remove version query strings 
Removes <code>?ver=1.2.3</code> from all styles and scripts.</li>
<li>Disable feeds</li>
<li>Disable emojis</li>
<li>Search single result redirect</li>
<li>Disallow File Edits 
Disables the ability to edit files in the file manager. Sets <code>DISALLOW_FILE_EDIT</code> constant to true. Does only work if the constant is already defined, usually in wp-config.php</li>
<li>Admin bar greeting 
Replace “Howdy, {name}” with a custom message. Use <code>{name}</code> for the user’s display name. For example <code>Hi, {name}!</code>. Leave empty for no greeting. Use <code>default</code> for the default greeting, preventing the tweak from running.</li>
<li>Enable fonts to uploads 
Move (Google) Fonts enabled in the Block Editor from wp-content/fonts to wp-content/uploads</li>
<li>Disable auto trash emptying</li>
<li>Set trash keep days 
Set the number of days to keep posts in the trash. Default is 30 days.</li>
<li>Scroll progress bar</li>
<li>Scroll progress color 
And valid css will work. You can use <a href="https://oklch.com" rel="nofollow ugc">this color picker!</a>.</li>
<li>Scroll progress bar background color</li>
<li>Scroll progress height</li>
<li>Disable self SSL verify</li>
<li>Disable Comments</li>
<li>Disable Email Login</li>
<li>Disable REST API</li>
<li>Disable Success Update Emails</li>
<li>Remove Admin Bar WordPress Logo 
Requires a hard refresh of the page to take effect.</li>
<li>Remove Asset Attributes</li>
<li>Disable Non Production Emails 
If WP_ENV (Trellis) or wp_get_environment_type is not production, emails sending is mocked.</li>
<li>Remove REST API links</li>
<li>Admin email check interval 
Time in seconds to display email verification message on login. Set to 0 to disable. Default is 15552000 (6 months).</li>
<li>Admin footer text 
a href links are allowed. Use “default” for default text.</li>
<li>Set user agent 
WP really hates privacy and sends this <code>WordPress/1.0; https://example.org</code> to every site it makes calls to. You can empty the field, pretend to be Chrome <code>Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36</code> or something else. <code>default</code> will change nothing.</li>
<li>Remove EXIF 
Remove EXIF data from uploaded images.</li>
<li>Convert jpeg to avif 
Convert uploaded jpeg to avif</li>
<li>Clean upload filenames 
Sanitize media filenames to remove non-latin special characters and accents</li>
<li>Avif compression 
Default is 82</li>
<li>Jpeg compression 
Default is 82</li>
<li>Webp compression 
Default is 86</li>
<li>Limit ALL revisions 
Limit revisions for all post types. This will override the limit for each post type from above!</li>
<li>Disable XML-RPC</li>
<li>Disable XML-RPC – allow Jetpack IPs 
Allow XML-RPC only from Jetpack IPs</li>
<li>Remove WP version 
Remove <code>WordPress/6.7.1; https://example.org</code> from html head</li>
<li>Dequeue jQuery Migrate 
Dequeue jQuery Migrate from the jQuery script dependencies on the frontend. This is used to help devs debug from old versions of jQuery. You really do not need this on a production site.</li>
<li>Script Optimizer 
Optimize script loading by moving them into the <code>head</code> and adding <code>defer</code> attribute. This may break your site. Use at your own risk!</li>
<li>Enable relative URLs 
Enable relative URLs on the frontend. This may break your site. Use at your own risk!</li>
<li>Disable Contact Form 7 CSS 
Sets <code>wpcf7_load_css</code> filter to <code>false</code></li>
<li>Disable Contact Form 7 Autop 
Sets <code>wpcf7_autop_or_not</code> filter to <code>false</code></li>
<li>Enable Jetpack offline mode</li>
<li>Enable maintenance mode</li>
<li>Enable duplicate post</li>
</ul>
<h4>Contribute to add quality tweaks to the plugin reviewed by me</h4>
Unlike WP Code’s snippet database that is filled with low code quality tweaks where some do not even work at all and spam this plugin only contains high quality tweaks. If something is missing please add it.
It is very easy to contribute to the plugin. Check out the <a href="https://github.com/nextgenthemes/tweakmaster/blob/master/readme.md" rel="nofollow ugc">Github Readme</a>.
If you have questions on adding a more complex tweak please feel free to ask.

TweakMaster

A collection of performance, privacy, security, and other tweaks. Minimalistic lightweight plugin.

Thoriq Firdaus

This plugin gives you the ability to manage core WordPress features like Comments, the Block Editor (Gutenberg), Emojis, XML-RPC, Feeds, Updates, Automatic Updates, Cron, Heartbeat, and more. If you don’t need certain features, you can easily toggle them off or customize their behavior.
It also includes additional utility features, like showing your site’s environment type in the admin bar, enabling maintenance or private mode, or using random URLs for media pages, which you can enable or disable as needed.
<h3>Features</h3>
This plugin organizes these settings into sections so you can quickly find and manage what you need:
<h4>General</h4>
Tweak key WordPress features to fit your needs:
<ul>
<li>Block Editor: Prefer the Classic Editor? Disable the Block Editor for all or specific post types.</li>
<li>Block-based Widgets: Turn off the “Block Widgets Editor”.</li>
<li>Comments: Disable comments and remove related elements in the admin area.</li>
<li>Revisions: Disable or limit the number of post revisions to save to improve performance.</li>
<li>Post Embed: Stop other sites from embedding your post content.</li>
<li>Self-ping: Prevent pingbacks to your own site.</li>
<li>Feeds: Disable RSS feeds if you don’t need them.</li>
</ul>
<h4>Admin</h4>
Customize your admin experience:
<ul>
<li>Dashboard Widgets: Remove unwanted or all dashboard widgets.</li>
<li>Footer Text: Get rid of the Thank you for creating with WordPress footer text.</li>
<li>Update Nags: Hide update notices for WordPress, plugins, and themes.</li>
<li>Admin Bar: Remove the admin bar on your site’s front end.</li>
<li>Howdy Text: Replace the Howdy greeting in the admin bar.</li>
<li>Environment Type: Display site’s environment type (e.g. Development, Staging, Production) in the admin bar.</li>
</ul>
<h4>Media</h4>
Adjust media-related settings:
<ul>
<li>Attachment Page: Disable attachment pages or re-enable them on WordPress 6.4+.</li>
<li>Attachment Slug: Use random URLs for media pages to avoid slug conflicts.</li>
<li>Infinite Scroll: Restore infinite scroll in the Media Library.</li>
<li>Big Image Size: Prevent WordPress to scale down big images.</li>
<li>Image Quality: Adjust the quality of uploaded images (JPEG only).</li>
</ul>
<h4>Site</h4>
Control access and assets on your site:
<ul>
<li>Search: Prevent use from using search on your site to find posts, pages, and other content.</li>
<li>Sitemap: Disable built-in XML sitemaps in WordPress.</li>
</ul>
Unload some of the assets that are not always necessary for your site:
<ul>
<li>Emojis: Improve performance by removing emoji scripts and styles.</li>
<li>Script Version: Remove version query strings from scripts and styles URLs.</li>
<li>jQuery Migrate: Disable jQuery Migrate if it’s not needed.</li>
</ul>
Clean-up some unused metadata from your site:
<ul>
<li>RSD Link: Remove the Really Simple Discovery (RSD) tag.</li>
<li>Generator Meta Tag: Remove the WordPress version meta tag.</li>
<li>Shortlink: Remove the shortlink meta tag.</li>
</ul>
<h4>Security</h4>
Improve your site’s security by disabling or limiting access to certain features:
<ul>
<li>File Edit: Disable the built-in file editor for themes and plugins.</li>
<li>XML-RPC: Disable the XML-RPC endpoint.</li>
<li>API Authentication: Require authentication for all REST API requests.</li>
</ul>
Manage passwords policy on the site:
<ul>
<li>Reset Password: Prevent users from resetting their passwords.</li>
<li>Application Passwords: Disable Application Passwords and remove related UI elements.</li>
</ul>
<h4>Advanced</h4>
For advanced users, you may configure these following features, but do it carefully:
<ul>
<li>Mailing: Prevent WordPress to send outgoing mail.</li>
<li>Updates: Enable or disable updates for WordPress, plugins, and themes.</li>
<li>Cron: Disable WP-Cron and use a real cron job.</li>
<li>Heartbeat: Adjust or disable the Heartbeat API to reduce resource usage.</li>
</ul>

Feature Flipper

Disable Comments, Gutenberg, Emojis, and other features you don't need in WordPress

TweakMaster vs Feature Flipper