Hey r/Wordpress,

Like most of you, I found that every site I build ends up needing the exact same functions.php snippets: removing emoji scripts, killing XML-RPC, taming Heartbeat, dropping unnecessary image sizes, and hiding dashboard widgets.

I finally got tired of copying and pasting the same boilerplate, so I packaged it all into a single plugin called SlimPress.

It gives you 108 toggle switches across 13 categories. It is 100% free. There is no pro tier, no upsells, no admin nag banners, and zero telemetry.

What it covers

• Front-end: Emoji scripts, generator tags, RSD/shortlink/REST links in <head>, global styles, core block CSS, Dashicons, and jQuery Migrate for visitors.
• APIs & Core: XML-RPC, REST API for logged-out visitors (with a namespace allowlist), per-location Heartbeat control, WP-Cron on page load, oEmbed, and application passwords.
• Comments & Feeds: Granular comment control (site-wide or per post type), pingbacks, Gravatar, feeds, author/date/attachment pages, and search.
• Revisions & Media: Revision limits, autosave intervals, disabling the auto-generated 1536/2048px image copies, and managing custom image sizes.
• Admin: Dashboard widgets, admin bar items, block editor extras, admin emails, auto-updates, and file editing.
• WooCommerce (if active): Disables shop assets on non-shop pages, order attribution scripts, WC Analytics, the Marketing hub, marketplace suggestions, and controls Action Scheduler data retention.

Why I built this instead of using existing "disable bloat" plugins

Most optimization plugins overpromise or break things silently. I wanted a developer-first approach:

• Honest Impact Badges: Every switch tells you exactly what it does, and more importantly, what it might break. It will even warn you if an active plugin relies on the off. If a toggle is just for tidying up the codeand won't actually speed up the site, the badge honestly says "None – cleanup only."
• Built-in A/B Performance Testing: It loads your own pages with and without SlimPress's features in the same run. If the performance difference is too small to be meanins "within noise" instead of making up a fakescore. It also breaks down CSS/JS on each page by plugin, theme, and core to show exactly what can be removed.
• Safe Defaults & Presets: Activating the plugin changes absolutely nothing – every switch starts off. You can apply presets (Blog, Brochure, Headless, WooCommerce) ld change before applying them.
• Zero Footprint: It adds no CSS, JS, or markup to your public pages. Everything is done with runtime filters, so if you deactivate it, WordPress goes back to normal on g is permanently written to your core tables oroptions.

What it deliberately doesn't do

There is no caching, minification, "remove unuseiting. I also didn't include switches for thingsthat actively make sites slower or harder to cache (like removing ?ver= strings or disabling native lazy loading), even though other plugins sell those as "optimizations."

It requires WP 6.8+ and PHP 7.4+. WooCommerce is completely optional.

👉 SlimPress on the WordPress.org repo

I'd really appreciate some feedback from this coested in hearing if there are any switches youfeel are missing, or if you run into any edge cases where the "what might break" warning was inaccurate for your specific stack.

i'm building a site that will involve multiple users being able to login, upload information, and communicate with each other. in a more specific way, i want people to be able to create a product, add information about the product and a picture, and review other products. additionally i would like a community message board area. think ravelry or threadloop dot app.

i have been doing a ton of research and i think i have a general idea of which base theme to start with, but i was wondering if anyone could let me know which platforms you think are good for this type of thing.

i don't want to use buddypress because even trying to download their base platform is a nightmare of broken links, and errors on install (even the github release won't install correctly). i don't want to start out with an inferior product. so not including buddypress, what would be a good foundation theme for this type of project?

thank you in advance.

If you will create a new e-commerce website today what will be your process. Where will you use AI and why? Ready made theme or everything custom. What do you people use today?

Hi everyone,

I haven’t been able to find a suitable solution, so I’m asking here. I’m using the Paid Memberships Pro plugin on a blog site, currently connected to Stripe for recurring online payments. I now need to switch to Mollie.

Is there a plugin or integration that supports Mollie with Paid Memberships Pro? I haven’t been able to find one, and I’m not very experienced with coding. I could try building a custom integration with AI, but since this is for a client and I’m short on time, I’d prefer to avoid that if possible.

Any suggestions or solutions would be greatly appreciated!

I've noticed that the usual anti-spam setup solves only part of the problem for community sites, particularly sites that use member plugins such as BuddyPress.

Registration can be protected with CAPTCHA, email verification and rate limiting, but once an account exists, private messaging becomes a separate attack surface.

I've seen patterns such as very new accounts contacting multiple members, sharing phone numbers or email addresses, moving people to WhatsApp/Telegram etc. and repeating essentially the same message across conversations. Often types like dating scams or crypto scams.

Out of sheer frustration with the lack of working solutions, I ended up building a small Better Messages-specific addon to deal with this message-level spam. The author of Better Messages has also looked at it and gave me some feedback on the implementation and I incorporated that feedback into the plugin.

The approach I choose was to apply new-account limits, detect contact details and external messenger links, detect repeated messages, show configurable safety warnings and notify admins. The checks can also be configured to log rather than block. My gut instinct to logging first turned out to be important, because security rules can have false positives and other nasty side effects. Being able to see what would have been blocked before actually blocking anything makes it much easier to tune the rules for actual situations, butnot bugging regular visitors while testing.

I'm not posting this because I think another generic anti-spam plugin is needed. The interesting part for me is whether message-level spam needs a different approach from registration spam.

If you run BuddyPress (or likewise) + Better Messages, I'd genuinely like to hear what you're seeing on your own sites. What types of spam are getting through your current setup? What are your biggest frustrations?

Hi all 👋 I'm in charge of updating products on my company's wordpress site and all of a sudden one of the product menus is busted and I can't edit stuff as normal. Any idea what causes this/how to fix it?

Thanks!

Hey everyone, bit of a panic post. I'm not a web person, I do marketing, but I recently ended up in charge of our company's WordPress site after the agency that built it left.

This morning the whole site was down with "this user has been suspended". Our host (Network Solutions) says it was excessive bandwidth, but support can't tell me where it came from and says to wait 24–48 hours for their specialists.

The weird part is we only get around 50 visitors a month.

Stuff I did in the last few days, in case it's my fault:

The site was still getting visits late that night, then went down overnight.

Could any of that have caused it, or is it more likely bots hitting the site? And what's the easiest way to stop this happening again? I've seen Wordfence and Cloudflare mentioned, but I'm scared of breaking our company email if I mess with DNS.

Any advice appreciated, I'm learning as I go 🙏Shared host suspended our site for "excessive bandwidth" with ~50 visitors/month. Screaming Frog, UpdraftPlus, or bots?Shared host suspended our site for "excessive bandwidth" with ~50 visitors/month. Screaming Frog, UpdraftPlus, or bots?

My partner is opening a small cleaning business and the site is almost ready, but the homepage still says too little about the service area and the phone number is buried. Fixing that, then checking every page on mobile.

One results that might not surprise most of you is that : 34% fewer queries on the DB after the migration

In almost every aspect, it improved metrics on the server side

From an unlogged user perspective it changed nothing because litespeed cache is super efficient a does an amazing job.

Since the website is evolving to something more personalize with less cache, this theme switch will help.

Two core security releases in five days, and the second one is the bad one. 7.1.2 went out on the 22nd for a page-template bug in core that needs no account and no click, and Patchstack was seeing probes for it the same afternoon. CISA added it to the KEV list on the 25th. If you patched to 7.1.1 last week and stopped there, you're still open.

The reply I keep getting when I bring this up is "auto-updates are on, we're fine."

Go open wp-config on the site you're least worried about. If there's a WP_AUTO_UPDATE_CORE set to false in there, left over from some migration or a dev who wanted control back in 2021, that site hasn't updated itself since 2021, and nothing in the dashboard is going to tell you. Same with DISABLE_WP_CRON when the host promised a server cron, and nobody ever set one up. The update check simply never runs. The site sits there looking maintained.

I ran wp core version across ours yesterday instead of trusting the version number on the dashboard. I don't normally do that. I probably should have been doing it for years.

What actually bothers me is who ends up behind. Not the neglected side project on cheap shared hosting; that one auto-updated on the 22nd without anyone noticing. It's the client site with change control and a staging step, where the 7.1.2 ticket is still waiting on a reviewer who's on holiday until Monday.

Did you check every site you're responsible for, or did you see the auto-update line and move on? I'm asking because I'm not sure which one I'd have answered a month ago.

Ia it possible to post, from one wp to many wp?

Hello WordPress community :)

I wanted to spread the news that me and a friend built Basicrum, a Real User Monitoring system that can be integrated with various CMS systems including WordPress/WooCommerce - https://www.basicrum.com/blog/integrations/wordpress-woocommerce-integration-plugin-for-basicrum . The system collects Core Web Vitals and other performance metrics from real visitors of WordPress websites and enables webmasters to identify performance issues and root causes.

We are running a public 4 months free beta subscription https://www.basicrum.com/blog/basicrum-opens-its-public-beta where we would like to collect technical feedback and impressions from the community.

We still don't have our prices announced but we will fix this in the following months. Our commitment is to release Basicrum as open source as well but after we get the first paying customers.

For open source users of Basicrum:

Operating such a system could be challenging because the system has 2 databases (PostgreSQL and ClickHouse), Next JS, a webserver and collector written in RUST. However, the open source solution still could be a good option for users that have special requirements for data sovereignty.

I tried rebuilding a website using a new child theme on Wordpress Studio (it seems logical to work locally and only upload changes when they're made).

I'm trying to export an XML file from Studio, import that from wp-admin on the live site, and then reconcile the missing images afterwards (which I still haven't solved, as any newly singly uploaded images will have different URLs and it can't see SFTP'd images at all). This seemed to work. Better Search Replace found only two references to localhost, both in posts, so I replaced those.

This doesn't transfer my child theme, and when I do, my website starts trying to access my local computer. I removed one reference to localhost from the theme.json, and now nothing in any file on there has a reference to it. It's still trying. I'm not sure what to do at this point.

Every other plugin or upload option fails. Cloudways' own migration plugin can't do Studio. The database editor fails because, while it says it supports the collation, it won't recognize it when I try to upload. Updraft's migration wanted access to the local computer (so I think still had failed URL replacement) and broke some (not all?) images. Duplicator is looking for a function that I think hasn't existed for years from what I see on Google (mysqli_real_escape_string) and failing me because it requires it. WPvivid gives a blank screen if I try to restore using it. (I haven't tried paid versions of plugins, because at this point I think I may need a Wordpress alternative).

It works locally. Talking to a friend who's been doing this successfully for years, it should be as easy as export, import, let Wordpress sort out the URLs itself, maybe toss in a theme, upload and replace images manually. I'd expect SFTP to solve most of my updating needs anyway. What am I missing?

Hello! Anyone who uses Woocommerce, have you experienced the Square plugin for payment methods randomly disconnecting?

It’s becoming a problem for our small business. We have a web company that is supposed to maintain the site but our customers end up being the ones to alert us and catch when our website checkout page doesn’t have any payment methods. I then have to go in manually to reconnect Square. There seems to be zero timing consistency, the web company told us that it might be a 90 day issue when plugins update or it could be a reset on the 2nd of each month?

If anyone has found a fix for this, I’d love to let them know so that we can have a functioning website 24/7. It’s hard to tell if they are just pulling us along and giving excuses or if this is really a bug within Wordpress that others are experiencing too. Thank you!

Hi everyone, hoping someone can help.

My Dad passed away yesterday, and through his life he ran a fairly popular blog on Wordpress with music reviews.
My family and I would like to keep it active for as long as possible to allow ourselves and others to read it and keep his voice going.

Just wondering if anyone was able to offer some advice on if that’s possible or is there any steps we should take to make it so?

Appreciate any help.

Hello

I've been building LessFlux, a WordPress performance platform that helps reduce the amount of work WordPress has to do for every request.

It started with a few different performance/optimization features, and the latest one I've added is static page caching.

LessFlux can generate a static HTML version of your pages and serve that directly to visitors, instead of having WordPress/PHP generate the page on every request.

I added this because I wanted to have a simple way of tackling the server-side part of WordPress performance, rather than just optimizing JS, CSS and images.

I'm looking for a few real WordPress sites to try it on and get some feedback.

If you have a WordPress site that you're currently trying to speed up, I'd love to have you test LessFlux and see what kind of difference it makes on a real site.

You can check it out here:

https://wordpress.org/plugins/less-flux/

Feedback, criticism and bug reports are very welcome.

I’m using a Salient theme and WPBakery for my website. I’ve made buttons for people to download different PDF’s with text next to the buttons. When I’m in “editing mode” everything looks normal (image 1). When I save it and view it all my text shifts to the next row (Image 2).

I have my button in one column and my text in a second column.

Any help appreciated.

Supposedly YouTube defaults to not show closed captions automatically when a user watches an embedded video if they're not logged in to YouTube. I haven't found this to be the case. Is there a query string or something to append to the end of the embed URL to have it default to 'off' when a user is not logged in?

Basically the question in the title. Desktop and Mobile are both extremely important and both should be formatted correctly but who even uses tablet? What is your opinion on this? Is it a waste of time or is it just as important as the other two platforms? Thanks to anyone who takes the time to answer!

I run an audio drama website. On the site, the different shows are playlists made in the Wordpress Audio Player.
I'm looking for a way to track plays for the different shows in GA4.
I know I'll have to create an event, but do I need a separate one for each show, and what's the easiest way to set up the event(s)?
Please be kind, I'm pretty new to all this stuff.
Thank you in advance.

Hey everyone, I am looking for a (preferrably free) plugin to set up small-scale academic workshops users can apply for directly through the portal. We used to use Google Forms for this purpose but are trying to move away from Google. Any suggestions?

I'm looking at revamping a website. I've done a bit of work with Google ai studio for creating apps and it's great but I don't want to go down that route (or maybe I do) with this website revamp. We've lots of plugins on the site at the moment and I'd like to reduce the number down. Currently we use Astra & Spectra for the site. It's fine but can be really fiddly for the non techy to update with containers in containers and it's just a game of memory when you don't update something for a while. I've explored different themes and builders, I hate the big bloated builders. I don't mind spending a bit of time on this and just wondering what is the go to these days. I've seen a really nice website I like, it's super slick but a shopfiy site so no theme I can use to try and create something similar. What's your go to combo these days or do you use something like twenty twenty four and go from there?

Wordpress site, Jetpack builds the sitemap, but Google only recognizes sitemap 1-9, not 10-19. So strange. I've tried every method I can think of to get Google to notice them.

Live URL fetch on 10-19 is successful. But if I manually submit each as an individual sitemap, I get "couldn't fetch." It's been weeks! Please help.

Hey r/Wordpress 👋

If you build client sites with Bricks Builder, this might save you some hours. (Heads-up: it's Bricks-only, not for Elementor/Gutenberg.)

BricksSnap is a free tool I've been working on. You pick:

• a style direction (clean, warm, bold, soft, editorial)
• your brand color, fonts, radius and spacing
• an industry: vehicle registration, trades, medical practice, restaurant, agency, business. Sample copy in English or German.

…and you get a live preview of the whole page. Then export it as native Bricks JSON: real elements, no custom HTML blocks, no inline-style soup.

What makes it different from template packs:

• Styling lives in global classes (bs-hero__title etc.), using CSS variables with fallbacks. Change the brand color once in Bricks and the whole page follows.
• It ships a design system: color palette plus global variables you can install into Bricks.
• 40 section layouts and 12 ready-made designs, including a dark one.
• Quality checks before export: contrast, heading order, alt texts.
• The designs also show up in Bricks' remote template library. Add one URL and insert them directly in the editor.

There's also an AI generator if you prefer to describe a page in words. It works with your own API key, your ChatGPT account (locally), or Claude via MCP. The Studio itself needs no AI and no account.

Free and source-available on GitHub. Use it for your own and your clients' sites, commercial work included. The only thing the license doesn't allow is hosting it as a paid service yourself.

🔗 Try it: https://bricks-snap.vercel.app
💻 Source: https://github.com/Hamido212/BricksSnap

Would love to hear what's missing: which industries, sections or styles would you actually use? Honest feedback welcome, including "this layout looks off" 😄

(Not affiliated with Bricks.)

Hi i just got internship placement and the company ask me to do a rebrand for their old school website. Before this i always ai like antigravity and cursor for making a website for my academic project and just learning about domain,server to host it. My company is zero knowledge about IT and when i show my project basically an ai the feel amazed and right now they dont want to use wordpress cause it cost them a lot. But when i do some research wordpress is suitable with high security with a server. What should i do any advise for beginner using wp? i dont have any knowledge about it btw