About this plugin
Most sites need the same small changes: turn off XML-RPC, stop visitors from listing user names, drop the emoji script, switch off comments, raise the image size limit, show the discount on sale badges. Each one usually means another plugin or a copy-pasted snippet you have to trust.
Snipfire Tweaks puts 71 of them on one settings page (Settings > Snipfire Tweaks). Tick the ones you want and save. Every tweak is a small, fixed piece of code that ships with the plugin and is tested automatically with the current WordPress and WooCommerce.
You can read each one on the settings page before you switch it on. The plugin never runs code you type in.
Harden WordPress
author=1, the REST API users list, the users sitemap), one message for every failed login, turn off the theme and plugin file editors, hide the WordPress version, security headers, turn off application passwords.
Clean up the head and performance
Remove the emoji script and styles, the RSD and shortlink links, the REST API and oEmbed links, the extra feed links and jQuery Migrate on the public site. Keep 10 revisions per post, slow down the Heartbeat API, empty the trash after 7 days, no pingbacks to your own posts, Dashicons for logged-in users only.
Turn off what you don’t use
Comments everywhere (WooCommerce reviews keep working), the block editor, the block widgets screen, RSS feeds, site search, attachment pages, emails after successful automatic updates, the admin email check, the admin bar for subscribers and customers.
Admin, login, content and media
Your logo and link on the login page, your site name in the admin footer, no update notices for non-admins, a cleaner dashboard, IDs in the admin lists, subscribers land on the home page after login, duplicate posts and pages, SVG uploads for administrators, featured images in the RSS feed, links to other sites in a new tab, a back-to-top button, smooth scrolling, a larger image size limit, print-friendly pages, hiding the reCAPTCHA badge.
WooCommerce essentials
Only free shipping when an order qualifies, a minimum order amount, the discount on sale badges (-20%), your own add-to-cart text, straight to checkout, remove checkout fields and order notes, complete paid orders of virtual products, four related products in a row, remove the Reviews tab, no marketplace suggestions.
Greek e-shop
For shops in Greece: receipt or invoice at checkout (Απόδειξη / Τιμολόγιο) with company name, VAT number (ΑΦΜ, checked with its check digit), tax office (ΔΟΥ) and business activity, saved with the order and shown in the admin, emails and order page; Greek phone number and postcode checks; a cash on delivery fee (αντικαταβολή); greeklish addresses for new Greek posts, pages and terms, and greeklish names for uploaded files.
Privacy
Don’t store commenters’ IP addresses, don’t load avatars from Gravatar, Google Consent Mode defaults (everything denied until your cookie banner says otherwise).
Tweaks that need WooCommerce do nothing until WooCommerce is active, and say so on the settings page. Several WooCommerce tweaks are for the classic checkout and product templates; each one says so.
The tweaks come from the snippet library of Snipfire, a code snippets plugin by the same team.