Title: CodingCush Tweaks Author: codingcush Published: November 10, 2026 Last modified: November 10, 2026 --- Search plugins ![](https://ps.w.org/codingcush-tweaks/assets/banner-772x250.png?rev=3793775) ![](https://ps.w.org/codingcush-tweaks/assets/icon-256x256.png?rev=3793775) # CodingCush Tweaks By [codingcush](https://profiles.wordpress.org/codingcush/) [Download](https://downloads.wordpress.org/plugin/codingcush-tweaks.1.0.0.zip) * [Details](https://wordpress.org/plugins/codingcush-tweaks/#description) * [Reviews](https://wordpress.org/plugins/codingcush-tweaks/#reviews) * [Installation](https://wordpress.org/plugins/codingcush-tweaks/#installation) * [Development](https://wordpress.org/plugins/codingcush-tweaks/#developers) [Support](https://wordpress.org/support/plugin/codingcush-tweaks/) ## Description CodingCush Tweaks collects the fixes most WordPress sites end up needing and puts them behind clean on/off switches. Every tweak is a separate class that is only loaded when it is switched on, so the plugin costs nothing for the things you do not use. Each tweak can be switched on or off from **Settings Tweaks**. Nothing changes on your site until you turn a tweak on. #### Security * **Disable XML-RPC** – switch off the XML-RPC API, the X-Pingback header and the RSD link * **Require login for the REST API** – visitors get a 401 from `/wp-json/` * **Hide the WordPress version** – generator tag, feed version and `?ver=` on core assets * **Disable the file editor** – no theme or plugin code editing from the admin * **Stop user enumeration** – blocks `?author=1` scans and the public users endpoint * **Generic login errors** – never confirm whether a username exists #### Performance * **Heartbeat control** – slow the interval, or disable it on the dashboard, outside the editor, or everywhere * **Disable emoji scripts** * **Disable oEmbed** (wp-embed script and discovery links) * **Limit post revisions** – keep only the last N * **Disable self-pingbacks** * **Remove Dashicons for visitors** * **Disable RSS feeds** #### Media & Uploads * **Change the maximum upload size** – with your real server limits shown next to it * **Allow SVG uploads** – for administrators and editors only, every file sanitised on upload * **Allow extra file types** – add `extension mime/type` pairs; executables, scripts, web documents (HTML, CSS, SVG, XML) and other risky types are always refused * **Keep original image size** – turn off the 2560px big-image scaling #### Admin & Editor * **Disable comments everywhere** * **Use the classic editor for selected post types** * **Stop automatic update emails** * **Hide the admin bar for non-admins** * **Clean up the dashboard** * **Remove head clutter** – wlwmanifest, shortlink, REST link, adjacent-post links #### Built to stay out of your way * One autoloaded option, no extra database tables * No admin notices, no upsells, no tracking, no external requests * Settings page CSS and JS load on that page only * Export and import your setup as JSON to reuse it on other sites * Clean uninstall: removes its single option and nothing else #### Made by CodingCush Tutorials, project walkthroughs and more plugins at [codingcush.com](https://codingcush.com/). ## Screenshots [⌊Security tweaks with a single switch each⌉⌊Security tweaks with a single switch each⌉[ Security tweaks with a single switch each [⌊Heartbeat control with per-screen options⌉⌊Heartbeat control with per-screen options⌉[ Heartbeat control with per-screen options [⌊Media & Uploads: upload limit with the real server limits shown, sanitised SVG, extra file types⌉⌊Media & Uploads: upload limit with the real server limits shown, sanitised SVG, extra file types⌉[ Media & Uploads: upload limit with the real server limits shown, sanitised SVG, extra file types [⌊Tools: export, import and a list of what is active⌉⌊Tools: export, import and a list of what is active⌉[ Tools: export, import and a list of what is active ## Installation 1. Upload the `codingcush-tweaks` folder to `/wp-content/plugins/`, or install it from Plugins Add New. 2. Activate the plugin. 3. Go to **Settings Tweaks**, switch on what you need, and save. ## FAQ ### Does this slow my site down? No. A tweak that is switched off is never loaded. The plugin reads one autoloaded option and registers only the hooks for enabled tweaks. ### I enabled “Require login for the REST API” and my contact form stopped working. Some form plugins, block themes and page builders call the REST API for visitors. Switch that tweak off, or keep it off on sites that depend on those plugins. ### The upload limit did not increase. WordPress can only enforce a limit up to what PHP allows (`upload_max_filesize` and `post_max_size`). The settings page shows your server’s current values. Raising them needs a change in `php.ini`, `.htaccess` or `.user.ini`, or a request to your host. ### Is allowing SVG uploads safe? The tweak only allows SVG for users who can already post unfiltered HTML (administrators and editors), and every file is sanitised on upload: scripts, event handlers, external references, `foreignObject` and `use` elements are removed. Do not enable it on sites where you do not trust every editor. ### Can I move my settings to another site? Yes. Settings Tweaks Tools has Export and Import. ### Where do I report a bug or ask for a tweak? Use the support forum here on WordPress.org, or open an issue on GitHub. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “CodingCush Tweaks” is open source software. The following people have contributed to this plugin. Contributors * [ codingcush ](https://profiles.wordpress.org/codingcush/) [Translate “CodingCush Tweaks” into your language.](https://translate.wordpress.org/projects/wp-plugins/codingcush-tweaks) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/codingcush-tweaks/), check out the [SVN repository](https://plugins.svn.wordpress.org/codingcush-tweaks/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/codingcush-tweaks/) by [RSS](https://plugins.trac.wordpress.org/log/codingcush-tweaks/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.0 * First release with 23 tweaks across Security, Performance, Media & Uploads and Admin & Editor. ## Meta * Version **1.0.0** * Last updated **2 days ago** * Active installations **Fewer than 10** * WordPress version ** 6.0 or higher ** * Tested up to **7.1.4** * PHP version ** 7.4 or higher ** * Tags * [disable comments](https://wordpress.org/plugins/tags/disable-comments/)[disable emojis](https://wordpress.org/plugins/tags/disable-emojis/) [disable xml-rpc](https://wordpress.org/plugins/tags/disable-xml-rpc/)[heartbeat control](https://wordpress.org/plugins/tags/heartbeat-control/) [upload limit](https://wordpress.org/plugins/tags/upload-limit/) * [Advanced View](https://wordpress.org/plugins/codingcush-tweaks/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/codingcush-tweaks/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/codingcush-tweaks/reviews/) ## Contributors * [ codingcush ](https://profiles.wordpress.org/codingcush/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/codingcush-tweaks/)