Falcon - WordPress Optimizations & Tweaks
| 开发者 |
elightup
rilwis truongwp paracetamol27 |
|---|---|
| 更新时间 | 2026年7月12日 21:40 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0.1 |
| 版权: | GPLv2 or later |
详情介绍:
Falcon is a lightweight WordPress plugin that helps you speed up your site, harden security, clean up bloat, and fine-tune how WordPress works — without a heavy stack of separate tools.
Toggle only what you need from a clear settings UI. Export and import settings to reuse the same setup across sites.
Features
Performance
Make pages load faster and cut unnecessary front-end work.
- HTML page cache — serve static HTML and skip WordPress, themes, and plugins on cache hits
- Disable Heartbeat to reduce server load
- Remove
?ver=query strings from CSS/JS for better browser caching - Disable emoji scripts and styles
- Remove jQuery Migrate on the front end
- Load selected CSS files asynchronously to reduce render-blocking
- Limit login attempts (block an IP after 3 failed tries for 1 hour)
- Hide detailed login error messages
- Force login to view the site
- Disable the REST API for unauthenticated requests
- Disable XML-RPC
- Restrict upload file types (including WebP and AVIF when enabled)
- Comment spam protection with a simple honeypot
- Block common AI crawlers via
robots.txt - Use scheme-less asset URLs to avoid mixed content warnings
- Hide WordPress version
- Remove shortlink, REST API link, adjacent posts links, feed links, RSD link, and WLW manifest link
- Use the site icon on the login screen
- Hide update nags
- Remove default dashboard widgets
- Remove admin footer text and the WordPress admin bar logo
- Disable embeds
- Clean up menu item classes and IDs
- Remove Recent Comments widget CSS
- Clean revisions, auto drafts, trashed posts, spam/trashed comments, expired transients, orphaned meta, unused terms, and optimize tables
- Disable the block editor (Gutenberg) and use the classic editor
- Disable post revisions
- Disable texturize (smart quotes and auto formatting)
- Disable comments site-wide
- Remove the website field from the comment form
- Disable thumbnail generation
- Disable big image scaling
- Disable EXIF-based image rotation
- Limit front-end search to posts only
- Disable self pingbacks
- Maintenance mode (customize the message with
maintenance.phpin the active theme) - Block external HTTP requests
- Disable application passwords
- Disable auto-updates
- Disable WP-Cron (use a real server cron instead)
- Remove privacy tools from the admin menu
- Disable admin email verification prompts
- Disable update notification emails
- Disable new user emails to admins
- Disable password change/reset emails
- Change the default from name and email address
- Send WordPress email via SMTP
- Meta Box - A powerful WordPress plugin for creating custom post types and custom fields.
- Slim SEO - A fast, lightweight and full-featured SEO plugin for WordPress with minimal configuration.
- GretaThemes - Free and premium WordPress themes that clean, simple and just work.
- Auto Listings - A car sale and dealership plugin for WordPress.
安装:
Go to Dashboard | Plugins | Add New and search for Falcon. Then install and activate the plugin.
常见问题:
Where do I report security bugs found in this plugin?
Please report security bugs found in the source code of the Falcon – WordPress Optimizations & Tweaks plugin through the Patchstack Vulnerability Disclosure Program. The Patchstack team will assist you with verification, CVE assignment, and notify the developers of this plugin.
更新日志:
2.11.0 - 2026-07-12
Highlight
- Database cleanup: Clean revisions, drafts, trash, spam, expired transients, orphaned meta, unused terms, and optimize tables. (#26)
- Limit login attempts: Block an IP after 3 failed logins for 1 hour. (#25)
- Allow
.avifuploads when restricting file types. (#24) - Customize maintenance mode via
maintenance.phpin the active theme.
- Reorganize settings into grouped tabs with sub-tabs.
- Polish settings copy and option descriptions.
- Add a documentation link in the settings tabs bar.
- Fix cache clearing when an approved comment is inserted.
- Harden cache cleanup and request URI handling on PHP 8.
- Fix serving the same cache for URL with and without query string
- Clear cache only when a comment is approve
- Add new security module: Comment spam protection. Enable it under Security tab.
- Improve check for not caching search result pages
- Allow to upload WEBP images if enable restrict upload file types module
- Fix PHP warning when deleting cache dir
- Fix not creating cache dir after cleaning
- Cache module (HTML page cache): A lightweight yet powerful caching module to improve page load times and reduce server load by caching full HTML pages. Just enable it in the General tab and you're good to go.
- Recommended for standard blogs and brochure-style websites.
- Not recommended for highly dynamic or eCommerce sites.
- Settings export & import: Export your plugin settings to a file and import them on other sites to quickly reuse the same configuration.
- Remove admin bar item when disable comments
- Search posts only: exclude admin and rest API requests
- Do not enable "No Gutenberg" and "Search Posts Only" by default
- No Gutenberg: remove support for post types
- Fix not showing site icon in the login page
- Fix security for sending test email
- Disable XML-RPC methods
- Fix: activation error on ajax request
- Update fix word disable detailed login errors
- Add a link to the settings page in the plugin meta row
- Auto redirect to the settings page after activation
- Add options to change default email from name and address
- Add more AI bots to the block list
- Add SMTP configuration
- Add maintenance mode
- Add block AI bots option
- Add force login option
- Fix not loading email options
- Fix remove dashboard widgets not removing welcome panel
- Add options for no emails when a new user is registered and users reset their passwords
- Fix error when disabling all features. Closes #17.
- Update hook for disable core update email notification
- Fix removing update nag not working
- Add a new security tab with options to disable login errors and restrict upload file types
- Update the plugin style
- Add: Disable comments
- Add: Remove website field from comment form
- Add: Search only posts
- Add: Disable replacing text with formatted entities like smart quotes, dashes, ellipses, etc.
- Add: Disable scaling down big images
- Add: Disable automatic image rotation based on EXIF data
- Add: Disable thumbnail generation
- Remove classic theme styles for button blocks
- Remove Jetpack widget
- Add asynchronous load CSS
- Disable cron
- Disable auto updates
- Block external requests
- Fix missing current ancestor class for menu
- Cleanup nav menu item ID & classes
- Disable privacy tools
- Remove application passwords
- Add disable XML-RPC
- Add disable Gutenberg
- Add disable REST API
- Add a set of admin tweaks
- Organize features in tabs and update styling
- Update compatibility tag
- Fix missing vendor folder
- Remove jQuery Migrate in the WordPress admin as well
- Fix PHP warning when blocking self-pings
- Fix textdomain
- Fix auto-deployment
- Re-add settings page
- Update disble embeds module
- Update compatibility with the latest version of WordPress
- Fix not working with WP-CLI
- Remove settings page
- Do not use jQuery from Google CDN for better compatibility
- Remove support for loading CSS async
- Add option to use latest version of jQuery
- Add option to exclude static resources from removing query string
- Downgrade jQuery to 2.2.4 for better compatibility
- Fix: File name case-sensitive
- Fix: Load PHP file using absolute path.
- New: Load CSS asynchronously (and selectively).
- Fix: No error in the login page.
- Requires PHP 5.4
- Fix not loading file for media.
- Remove Jetpack devicex script.
- Requires PHP 5.3.
- Update jQuery to 2.2.4
- Use jQuery from Google CDN
- Sets scheme-less URLs for JS and CSS files, e.g. removes 'http:' and 'https:' from URLs.
- Initial release