Description
Coreline is a lightweight WordPress security and optimization plugin that provides essential hardening features for your WordPress installation. It follows clean code principles, PSR standards, and is designed to be testable, scalable, and maintainable.
Features
- Emoji Script Removal – Removes WordPress emoji detection scripts to improve performance
- WordPress Version Hiding – Removes WordPress version numbers from HTML and RSS feeds for better security
- Custom Login URL – Changes wp-login.php to a custom URL (e.g.,
/secure-login/) to prevent automated brute-force attacks - Hotlink Protection – Prevents other websites from hotlinking your images (works on both Apache and Nginx)
- Disable Pingbacks & Trackbacks – Disables XML-RPC pingbacks and trackbacks for improved security
Benefits
- Lightweight and fast
- No database queries overhead
- Clean, PSR-compliant code
- Fully tested and maintained
- Compatible with all major themes and plugins
Developer Friendly
Coreline is built with developers in mind:
- PSR-4 autoloading
- WordPress Coding Standards compliant
- PHPStan Level 8 verified
- Fully filterable and extensible
- Comprehensive inline documentation
Support
For bug reports and feature requests, please visit GitHub Issues
License
This plugin is licensed under the GPLv2 or later.
Screenshots
Main settings page 
Custom login page with updated slug and logo
Installation
- Upload the
corelinefolder to the/wp-content/plugins/directory - Activate the plugin through the ‘Plugins’ menu in WordPress
- Go to Settings > Coreline to configure your options
FAQ
-
Does this plugin slow down my site?
-
No, Coreline is designed to be lightweight and actually improves performance by removing unnecessary WordPress features like emoji scripts.
-
What happens if I forget my custom login URL?
-
You can deactivate the plugin via FTP or access your database to retrieve the custom slug from the options table. We recommend bookmarking your custom login URL.
-
Is this plugin compatible with caching plugins?
-
Yes, Coreline is fully compatible with all major caching plugins including WP Rocket, W3 Total Cache, and WP Super Cache.
-
Does it work with multisite?
-
Yes, Coreline is compatible with WordPress multisite installations.
-
Can I use this on a production site?
-
Absolutely! Coreline follows WordPress VIP Go coding standards and is production-ready.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“Coreline” is open source software. The following people have contributed to this plugin.
Contributors
Translate “Coreline” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.0
- Fix: Update landing page url in blueprint.json
- Fix: Improve build process to exclude .wordpress-org folder from distribution
- Fix: Update translations
0.1.3
- New: Add WordPress Playground blueprint support
- New: Add WordPress.org assets (banners and icons)
- Fix: Improve build process to exclude .wordpress-org folder from distribution
0.1.2
- Fix deployment workflow and vendor folder inclusion
- Update GitHub Actions for proper releases
0.1.1
- Improve deployment process
0.1.0
- Initial release
- Emoji script removal
- WordPress version hiding
- Custom login URL
- Hotlink protection
- Pingback/Trackback disabling