Granular control over the WordPress features your site does not need.
Granular control over WordPress features that may not be needed, allowing you to disable them for improved performance and reduced attack surface.
| Option | What It Does |
|---|---|
| Disable Block Widgets | Use classic widgets instead of block-based widget editor |
| Separate Core Block Assets | Load only CSS/JS for blocks actually used on page (WP 6.5+) |
| Disable Emojis | Remove emoji detection script, styles, and TinyMCE plugin |
| Disable oEmbed | Remove embed discovery, scripts, and REST endpoints |
| Remove REST API Links | Remove REST and oEmbed discovery links from <head> |
| Remove Generator Meta | Hide WordPress version from source |
| Disable XML-RPC | Completely disable XML-RPC endpoint |
| Disable RSS Feeds | Redirect all feed requests to homepage (301) |
| Disable Gravatars | Prevent loading of Gravatar images |
| Remove Query Strings | Strip ?ver= from static assets for better caching |
| Limit Revisions | Cap stored post revisions at a number you choose |
| Disable Heartbeat | Disables Heartbeat on the front end. Admin stays on unless you also enable the admin option, so autosave and post locking keep working |
| Remove jQuery Migrate | Remove jQuery Migrate dependency |
| Optimization | Typical Savings |
|---|---|
| Disable Emojis | ~15KB (JS + CSS) |
| Disable oEmbed | ~10KB (JS) |
| Remove jQuery Migrate | ~10KB (JS) |
| Separate Block Assets | Varies (can be 50%+ CSS reduction) |
| Disable Dashicons | ~45KB (CSS, fonts) |