Overview
Granular control over WordPress features that may not be needed, allowing you to disable them for improved performance and reduced attack surface.
Available Toggles
- Disable Block Widgets — Use classic widgets instead of block-based widget editor
- Separate Core Block Assets — Load only CSS/JS for blocks actually used on page (WP 6.5+)
- Disable Emojis — Remove emoji detection script, styles, and TinyMCE plugin
- Disable oEmbed — Remove embed discovery, scripts, and REST endpoints
- Remove REST API Links — Remove REST and oEmbed discovery links from
<head> - Remove Generator Meta — Hide WordPress version from source
- Disable XML-RPC — Completely disable XML-RPC endpoint
- Disable RSS Feeds — Redirect all feed requests to homepage (301)
- Disable Gravatars — Prevent loading of Gravatar images
- Remove Query Strings — Strip
?ver=from static assets for better caching - Limit Revisions — Cap post revisions at 10
- Disable Heartbeat — Completely disable Heartbeat API
- Remove jQuery Migrate — Remove jQuery Migrate dependency
Performance Impact
- Disable Emojis — ~15KB (JS + CSS)
- Disable oEmbed — ~10KB (JS)
- Remove jQuery Migrate — ~10KB (JS)
- Separate Block Assets — Varies (can be 50%+ CSS reduction)
- Disable Dashicons — ~45KB (CSS, fonts)