I Built & Open-Sourced 12 Lightweight WordPress/WooCommerce Plugins (<15KB) + 6 Browser-Based AI & PDF Tools

Most WordPress and WooCommerce site owners end up installing 20+ heavy plugins—or paying $49 to $99/year per plugin—just to handle basic performance optimization, WhatsApp ordering, Cash-on-Delivery (COD) fraud prevention, or JSON-LD SEO schema.

To solve this for my own client projects and the wider developer community, I engineered and open-sourced 12 ultra-lightweight (<15 KB each), zero-telemetry, GPLv2-licensed WordPress & WooCommerce plugins plus 6 client-side WebAssembly AI & PDF utilities.

🔗 Live WordPress Plugins Vault (.ZIP Downloads + Readme + PHP Source Viewer): 👉 https://kabeer.site/plugins.html

🪄 Live Browser-Based AI & PDF Studio Tools: 👉 https://kabeer.site/tools.html

Every.zip archive includes the main PHP plugin file (protected with ABSPATH guards, WordPress Settings API nonces, current_user_can('manage_options'), and strict sanitization), a standard readme.txt, index.php directory protection, and a clean uninstall.php.

Removes WordPress core bloat (Emoji scripts/styles, oEmbeds, wp_generator, RSD/WLW links), unloads 36 KB dashicons.min.css for logged-out visitors, strips?ver= query strings for better Cloudflare cache hit rates, disables XML-RPC, and injects a 65ms Instant Hover Link Prefetcher.

Adds a customizable site-wide floating WhatsApp button and hooks into woocommerce_after_add_to_cart_button to place a direct "Order via WhatsApp" button on WooCommerce product pages with the product title, price, and permalink pre-filled.

Built for Cash-on-Delivery (COD) e-commerce stores. Validates mobile phone digit length at checkout, blocks repeated fake digit strings (e.g., 00000000000 ), and enforces a configurable maximum COD cart total cap.

Uses your server's native PHP GD/Imagick engine via wp_upload_image_mime_transforms and big_image_size_threshold to automatically convert uploaded JPEG/PNG sub-sizes to WebP and scale down oversized 4000px+ photos with zero monthly credit limits.

Outputs clean Schema.org structured data ( Article, Product, WebPage, and Organization ) in wp_head without heavy metabox bloat.

Safely inject your Google AdSense Publisher ID ( ca-pub-... ), Meta Pixel, TikTok Pixel, GA4, and custom <head> / <footer> scripts without editing theme files.

Brute-force login limiter (locks out offending IPs for 15 minutes after 5 failed attempts using anonymized MD5 transients), disables XML-RPC DDoS vectors, blocks /?author=1 username enumeration scans, and sends X-Frame-Options: SAMEORIGIN & X-Content-Type-Options: nosniff headers.

Redirects "Add to Cart" directly to Checkout and removes unnecessary checkout fields (Company Name, Address Line 2, optional Postcode) to reduce cart abandonment.

Automatically parses <h2...> tags on singular posts to generate an SEO-friendly Table of Contents and estimated reading time badge.

Automatically converts target keywords across blog posts into internal or affiliate links using safe regex matching outside existing HTML tags.

One-click admin utility (protected with check_admin_referer ) to purge post revisions, auto-drafts, spam comments, and expired transients, while capping future revisions at 5 per post.

Adds a custom Agency Support widget to wp-admin, declutters default dashboard metaboxes, and customizes the admin footer branding for client handoffs.

Alongside the WordPress plugins, I also built 6 browser-based utilities powered by WebAssembly, HTML5 Canvas, pdf-lib, PDF.js, and Tesseract.js (100% client-side privacy—files never leave the browser):

You can inspect the readme.txt, step-by-step installation guide, and PHP source code for every plugin directly in your browser at https://kabeer.site/plugins.html, or test the AI/PDF tools at https://kabeer.site/tools.html.

Have a feature request or building a custom Laravel, React, or WooCommerce platform? Connect with me at kabeer.site or on WhatsApp ( +92 334 2978455 )!