{"id":399896,"date":"2026-11-10T06:53:31","date_gmt":"2026-11-10T06:53:31","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/codingcush-tweaks\/"},"modified":"2026-11-10T06:52:56","modified_gmt":"2026-11-10T06:52:56","slug":"codingcush-tweaks","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/codingcush-tweaks\/","author":23600299,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.0","stable_tag":"1.0.0","tested":"7.1.4","requires":"6.0","requires_php":"7.4","requires_plugins":null,"header_name":"CodingCush Tweaks","header_author":"CodingCush","header_description":"20+ one-click fixes in one light plugin: disable XML-RPC, control Heartbeat, raise the upload limit, limit revisions, allow extra file types, disable comments, emojis, embeds and more.","last_updated":"2026-11-10 06:52:56","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/codingcush.com\/plugins\/codingcush-tweaks\/","header_author_uri":"https:\/\/codingcush.com\/","rating":0,"author_block_rating":0,"active_installs":0,"downloads":106,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.0":{"tag":"1.0.0","author":"codingcush","date":"2026-11-10 06:52:56","revision":3793775}},"upgrade_notice":{"1.0.0":"<p>First release.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3793775,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3793775,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3793775,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3793775,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3793775,"resolution":"1","location":"assets","locale":"","width":1366,"height":900},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3793775,"resolution":"2","location":"assets","locale":"","width":1366,"height":900},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3793775,"resolution":"3","location":"assets","locale":"","width":1366,"height":900},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3793775,"resolution":"4","location":"assets","locale":"","width":1366,"height":900}},"screenshots":{"1":"Security tweaks with a single switch each","2":"Heartbeat control with per-screen options","3":"Media &amp; Uploads: upload limit with the real server limits shown, sanitised SVG, extra file types","4":"Tools: export, import and a list of what is active"}},"plugin_section":[],"plugin_tags":[14833,89891,42034,147306,34867],"plugin_category":[],"plugin_contributors":[291760],"plugin_business_model":[],"class_list":["post-399896","plugin","type-plugin","status-publish","hentry","plugin_tags-disable-comments","plugin_tags-disable-emojis","plugin_tags-disable-xml-rpc","plugin_tags-heartbeat-control","plugin_tags-upload-limit","plugin_contributors-codingcush","plugin_committers-codingcush"],"banners":{"banner":"https:\/\/ps.w.org\/codingcush-tweaks\/assets\/banner-772x250.png?rev=3793775","banner_2x":"https:\/\/ps.w.org\/codingcush-tweaks\/assets\/banner-1544x500.png?rev=3793775","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/codingcush-tweaks\/assets\/icon-128x128.png?rev=3793775","icon_2x":"https:\/\/ps.w.org\/codingcush-tweaks\/assets\/icon-256x256.png?rev=3793775","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/codingcush-tweaks\/assets\/screenshot-1.png?rev=3793775","caption":"Security tweaks with a single switch each"},{"src":"https:\/\/ps.w.org\/codingcush-tweaks\/assets\/screenshot-2.png?rev=3793775","caption":"Heartbeat control with per-screen options"},{"src":"https:\/\/ps.w.org\/codingcush-tweaks\/assets\/screenshot-3.png?rev=3793775","caption":"Media &amp; Uploads: upload limit with the real server limits shown, sanitised SVG, extra file types"},{"src":"https:\/\/ps.w.org\/codingcush-tweaks\/assets\/screenshot-4.png?rev=3793775","caption":"Tools: export, import and a list of what is active"}],"raw_content":"<!--section=description-->\n<p>CodingCush Tweaks collects the fixes most WordPress sites end up needing and puts them behind clean on\/off switches. Every tweak is a separate class that is only loaded when it is switched on, so the plugin costs nothing for the things you do not use.<\/p>\n\n<p>Each tweak can be switched on or off from <strong>Settings \u2192 Tweaks<\/strong>. Nothing changes on your site until you turn a tweak on.<\/p>\n\n<h4>Security<\/h4>\n\n<ul>\n<li><strong>Disable XML-RPC<\/strong> \u2013 switch off the XML-RPC API, the X-Pingback header and the RSD link<\/li>\n<li><strong>Require login for the REST API<\/strong> \u2013 visitors get a 401 from <code>\/wp-json\/<\/code><\/li>\n<li><strong>Hide the WordPress version<\/strong> \u2013 generator tag, feed version and <code>?ver=<\/code> on core assets<\/li>\n<li><strong>Disable the file editor<\/strong> \u2013 no theme or plugin code editing from the admin<\/li>\n<li><strong>Stop user enumeration<\/strong> \u2013 blocks <code>?author=1<\/code> scans and the public users endpoint<\/li>\n<li><strong>Generic login errors<\/strong> \u2013 never confirm whether a username exists<\/li>\n<\/ul>\n\n<h4>Performance<\/h4>\n\n<ul>\n<li><strong>Heartbeat control<\/strong> \u2013 slow the interval, or disable it on the dashboard, outside the editor, or everywhere<\/li>\n<li><strong>Disable emoji scripts<\/strong><\/li>\n<li><strong>Disable oEmbed<\/strong> (wp-embed script and discovery links)<\/li>\n<li><strong>Limit post revisions<\/strong> \u2013 keep only the last N<\/li>\n<li><strong>Disable self-pingbacks<\/strong><\/li>\n<li><strong>Remove Dashicons for visitors<\/strong><\/li>\n<li><strong>Disable RSS feeds<\/strong><\/li>\n<\/ul>\n\n<h4>Media &amp; Uploads<\/h4>\n\n<ul>\n<li><strong>Change the maximum upload size<\/strong> \u2013 with your real server limits shown next to it<\/li>\n<li><strong>Allow SVG uploads<\/strong> \u2013 for administrators and editors only, every file sanitised on upload<\/li>\n<li><strong>Allow extra file types<\/strong> \u2013 add <code>extension mime\/type<\/code> pairs; executables, scripts, web documents (HTML, CSS, SVG, XML) and other risky types are always refused<\/li>\n<li><strong>Keep original image size<\/strong> \u2013 turn off the 2560px big-image scaling<\/li>\n<\/ul>\n\n<h4>Admin &amp; Editor<\/h4>\n\n<ul>\n<li><strong>Disable comments everywhere<\/strong><\/li>\n<li><strong>Use the classic editor for selected post types<\/strong><\/li>\n<li><strong>Stop automatic update emails<\/strong><\/li>\n<li><strong>Hide the admin bar for non-admins<\/strong><\/li>\n<li><strong>Clean up the dashboard<\/strong><\/li>\n<li><strong>Remove head clutter<\/strong> \u2013 wlwmanifest, shortlink, REST link, adjacent-post links<\/li>\n<\/ul>\n\n<h4>Built to stay out of your way<\/h4>\n\n<ul>\n<li>One autoloaded option, no extra database tables<\/li>\n<li>No admin notices, no upsells, no tracking, no external requests<\/li>\n<li>Settings page CSS and JS load on that page only<\/li>\n<li>Export and import your setup as JSON to reuse it on other sites<\/li>\n<li>Clean uninstall: removes its single option and nothing else<\/li>\n<\/ul>\n\n<h4>Made by CodingCush<\/h4>\n\n<p>Tutorials, project walkthroughs and more plugins at <a href=\"https:\/\/codingcush.com\/\">codingcush.com<\/a>.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Upload the <code>codingcush-tweaks<\/code> folder to <code>\/wp-content\/plugins\/<\/code>, or install it from Plugins \u2192 Add New.<\/li>\n<li>Activate the plugin.<\/li>\n<li>Go to <strong>Settings \u2192 Tweaks<\/strong>, switch on what you need, and save.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"does%20this%20slow%20my%20site%20down%3F\"><h3>Does this slow my site down?<\/h3><\/dt>\n<dd><p>No. A tweak that is switched off is never loaded. The plugin reads one autoloaded option and registers only the hooks for enabled tweaks.<\/p><\/dd>\n<dt id=\"i%20enabled%20%22require%20login%20for%20the%20rest%20api%22%20and%20my%20contact%20form%20stopped%20working.\"><h3>I enabled \"Require login for the REST API\" and my contact form stopped working.<\/h3><\/dt>\n<dd><p>Some form plugins, block themes and page builders call the REST API for visitors. Switch that tweak off, or keep it off on sites that depend on those plugins.<\/p><\/dd>\n<dt id=\"the%20upload%20limit%20did%20not%20increase.\"><h3>The upload limit did not increase.<\/h3><\/dt>\n<dd><p>WordPress can only enforce a limit up to what PHP allows (<code>upload_max_filesize<\/code> and <code>post_max_size<\/code>). The settings page shows your server's current values. Raising them needs a change in <code>php.ini<\/code>, <code>.htaccess<\/code> or <code>.user.ini<\/code>, or a request to your host.<\/p><\/dd>\n<dt id=\"is%20allowing%20svg%20uploads%20safe%3F\"><h3>Is allowing SVG uploads safe?<\/h3><\/dt>\n<dd><p>The tweak only allows SVG for users who can already post unfiltered HTML (administrators and editors), and every file is sanitised on upload: scripts, event handlers, external references, <code>foreignObject<\/code> and <code>use<\/code> elements are removed. Do not enable it on sites where you do not trust every editor.<\/p><\/dd>\n<dt id=\"can%20i%20move%20my%20settings%20to%20another%20site%3F\"><h3>Can I move my settings to another site?<\/h3><\/dt>\n<dd><p>Yes. Settings \u2192 Tweaks \u2192 Tools has Export and Import.<\/p><\/dd>\n<dt id=\"where%20do%20i%20report%20a%20bug%20or%20ask%20for%20a%20tweak%3F\"><h3>Where do I report a bug or ask for a tweak?<\/h3><\/dt>\n<dd><p>Use the support forum here on WordPress.org, or open an issue on GitHub.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>First release with 23 tweaks across Security, Performance, Media &amp; Uploads and Admin &amp; Editor.<\/li>\n<\/ul>","raw_excerpt":"20+ one-click fixes in one light plugin: disable XML-RPC, control Heartbeat, raise the upload limit, limit revisions, allow extra file types and more.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/399896","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=399896"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/codingcush"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=399896"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=399896"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=399896"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=399896"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=399896"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=399896"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}