外掛標籤
開發者團隊
② 後台搜尋「Abhishek Site Cleanup Controls」→ 直接安裝（推薦）
原文外掛簡介
Abhishek Site Cleanup Controls gives developers and site owners fine-grained control over 35+ WordPress features that are often unnecessary. Each feature has a simple on/off toggle, organised into five logical groups inside Settings -> Site Cleanup Controls.
No features are enabled by default — activate only what you need.
Security
User Enumeration — Block ?author=N redirect attacks that expose usernames.
Author Archives — Return 404 for author archive pages.
XML-RPC + Pingback — Fully disable the XML-RPC endpoint and remove the X-Pingback header.
Plugin and Theme Editor — Set DISALLOW_FILE_EDIT to prevent in-admin file editing.
Application Passwords — Disable the Application Passwords feature.
REST API — Restrict REST API access to authenticated users only.
Right Click — Disable the browser context menu on the frontend.
Performance
Emojis — Remove all emoji scripts, styles, and DNS prefetch hints.
Embed Objects — Disable WordPress oEmbed and embed scripts.
Dashicons — Prevent Dashicons from loading for non-logged-in visitors.
Heartbeat — Deregister the Heartbeat API script.
Block Library CSS — Remove wp-block-library and global-styles stylesheets on the frontend.
Version Var (?ver=) — Strip ?ver= query strings from enqueued asset URLs.
PDF Thumbnails — Skip thumbnail generation for uploaded PDF files.
oEmbed — Remove oEmbed discovery links and disable autoembed.
Remote Block Patterns — Stop WordPress fetching patterns from api.wordpress.org.
Head Cleanup
Generator Meta Tag — Remove the WordPress version meta tag from head.
WLW Manifest — Remove the Windows Live Writer manifest link.
Really Simple Discovery (RSD) — Remove the RSD link tag.
Short Link — Remove the shortlink tag and HTTP header.
Adjacent Posts Links — Remove prev/next link tags from single post heads.
RSS Feeds — Redirect all feed URLs to the homepage.
Admin Cleanup
capital_P_dangit — Remove WordPress forced capitalisation filter.
Screen Options and Help Tabs — Hide Screen Options and Help dropdowns.
Howdy to Welcome — Replace “Howdy,” with “Welcome,” in the admin bar.
Navigation Items in Admin Bar — Remove WP logo, site name, updates, and comments.
Clean Dashboard — Remove all default dashboard widgets.
Privacy Tools — Hide Export/Erase Personal Data from the Tools menu.
Site Health Page — Hide Site Health from the Tools menu.
WP Login Logo and Favicon — Hide the WordPress logo on the login page.
Admin Email Verification Prompt — Disable the admin email confirm interstitial.
Empty Trash (1 week) — Shorten automatic trash-emptying from 30 days to 7 days.
Content
Comments — Disable comments sitewide.
Post Revisions — Disable revision storage.
Search — Redirect all search queries to the homepage.
WordPress Features
Thumbnails / Featured Images — Remove post thumbnail support.
Widgets — Disable all widgets and sidebars.
Navigation Menus — Remove nav menu theme support.
Tags — Unregister tags from posts.
Categories — Unregister categories from posts.
Post Formats — Remove post format theme support.
Custom Fields — Remove custom fields meta box from editor.
Excerpts — Remove excerpt support from posts and pages.
Trackbacks — Remove trackback support from posts.
Attachment Pages — Redirect attachment URLs to the file directly.
Automatic Updates — Disable automatic core, plugin, and theme updates.
Self Pings — Stop WordPress pinging your own site.
jQuery Migrate — Remove jQuery Migrate script on the frontend.
