WP Performance & Security


This plugin provides settings to modify WordPress and improve performance and security.

General settings

  • Modify excerpt length, the “More” text, and allow excerpts on Pages
  • Change the “Read more” settings, so that the anchors to articles don’t jump
  • Modify custom post types so that they appear in search results and RSS feeds
  • Allow tags on pages and ensure all tags appear in search queries
  • Remove relational links
  • Remove the Windows Live Writer manifest link (wlwmanifest)
  • Remove the RSD link
  • Remove the shortlink
  • Allow SVG image uploads
  • Enable HTML5 support for forms, comment lists, images and captions.
  • Disable auto-formatting of content and/or excerpts
  • Disable emoji support and remove emoji styles and scripts


  • Enable GZIP on Apache
  • Disable WordPress pings from internal links
  • Remove the version query string on styles and scripts
  • Remove the JetPack plugin devicepx script


  • Remove the WordPress version string
  • Modify XMLRPC features – disable entirely and/or disable XMLRPC SSL testing
  • Comment modifications:
    • Disable comments
    • Disable comments on media files
    • Disable links in comments
    • Remove the ‘URL’ field from the comments form


  • Show statistics in the Admin section
  • Change the WordPress greeting, even for non US English installs
  • Remove the ‘Open Sans’ Google webfont from Admin
  • Remove dashboard widgets
  • Remove menu items
  • Include the “All Settings” menu item


  • Change the login page logo
  • Change the login page logo URL
  • Change the login page logo URL title
  • Disable detailed login errors

In development…
We’re working to add the following features to the plugin:

  • Scheduled trash cleanup
  • .htaccess modification for security and compression
  • Ability to load image via plugin for the login page logo

If you have further suggestions, please contact us via the plugin support page.

If you find this plugin it useful to manage your WordPress settings, please review the plugin.

Developed by James Robinson.


  1. Unzip the plugin and copy the wp-performance-security folder to the /wp-content/plugins/ directory
  2. Activate the plugin through the ‘Plugins’ menu in WordPress


Installation Instructions
  1. Unzip the plugin and copy the wp-performance-security folder to the /wp-content/plugins/ directory
  2. Activate the plugin through the ‘Plugins’ menu in WordPress

Contributors & Developers

“WP Performance & Security” is open source software. The following people have contributed to this plugin.




  • Added new feature to remove inline the styles and scripts that make up emoji support, which was added in WP 4.2


  • Fixed a range of alerts that appear in debug mode


  • Fixed issue where plugin might conflict with WP Super Cache


  • Minor changes to plugin settings in WP


Minor code changes

  • JS only loaded on plugin page
  • Changed default settings, all plugin options set to the WordPress defaults


  • Updated plugin to allow for internationalization
  • Added icon


  • Added support for adding Google Analytics tracking code
  • Added a toggle to remove the admin bar from front-facing pages
  • Added a setting to enforce and set the minimum number of characters required in a comment


  • Initial launch