cd /news/ai-tools/i-built-open-sourced-12-lightweight-… · home › topics › ai-tools › article
[ARTICLE · art-163024] src=dev.to ↗ pub= topic=ai-tools verified=true sentiment=↑ positive

I Built & Open-Sourced 12 Lightweight WordPress/WooCommerce Plugins (<15KB) + 6 Browser-Based AI & PDF Tools

A developer open-sourced 12 WordPress and WooCommerce plugins, each under 15 KB, covering performance optimization, WhatsApp ordering, Cash-on-Delivery fraud prevention, WebP image conversion, JSON-LD schema, and login hardening, alongside 6 client-side WebAssembly AI and PDF tools. The plugins use the WordPress Settings API with nonces and capability checks, ship with uninstall scripts, and carry no telemetry, while the browser tools rely on pdf-lib, PDF.js, Tesseract.js, and @imgly/background-removal so files never leave the browser.

by read3 min views3 publishedNov 3, 2026

Most WordPress and WooCommerce site owners end up installing 20+ heavy plugins—or paying $49 to $99/year per plugin—just to handle basic performance optimization, WhatsApp ordering, Cash-on-Delivery (COD) fraud prevention, or JSON-LD SEO schema.

Worse, many "free" plugins inject bloated JavaScript frameworks, admin upsell banners, and external telemetry that slow down wp-admin and hurt Core Web Vitals (LCP, INP, CLS).

To solve this for my own client projects and the wider developer community, I engineered and open-sourced 12 ultra-lightweight (<15 KB each), zero-telemetry, GPLv2-licensed WordPress & WooCommerce plugins plus 6 client-side WebAssembly AI & PDF utilities.

🔗 Live WordPress Plugins Vault (.ZIP Downloads + Readme + PHP Source Viewer):

👉 https://kabeer.site/plugins.html 🪄 Live Browser-Based AI & PDF Studio Tools:

👉 https://kabeer.site/tools.html Every .zip archive includes the main PHP plugin file (protected with ABSPATH guards, WordPress Settings API nonces, current_user_can('manage_options'), and strict sanitization), a standard readme.txt, index.php directory protection, and a clean uninstall.php.

Removes WordPress core bloat (Emoji scripts/styles, oEmbeds, wp_generator, RSD/WLW links), unloads 36 KB dashicons.min.css for logged-out visitors, strips ?ver= query strings for better Cloudflare cache hit rates, disables XML-RPC, and injects a 65ms Instant Hover Link Prefetcher.

Adds a customizable site-wide floating WhatsApp button and hooks into woocommerce_after_add_to_cart_button to place a direct "Order via WhatsApp" button on WooCommerce product pages with the product title, price, and permalink pre-filled.

Built for Cash-on-Delivery (COD) e-commerce stores. Validates mobile phone digit length at checkout, blocks repeated fake digit strings (e.g., 00000000000), and enforces a configurable maximum COD cart total cap.

Uses your server's native PHP GD/Imagick engine via wp_upload_image_mime_transforms and big_image_size_threshold to automatically convert uploaded JPEG/PNG sub-sizes to WebP and scale down oversized 4000px+ photos with zero monthly credit limits.

Outputs clean Schema.org structured data (Article, Product, WebPage, and Organization) in wp_head without heavy metabox bloat.

Safely inject your Google AdSense Publisher ID (ca-pub-...), Meta Pixel, TikTok Pixel, GA4, and custom <head> / <footer> scripts without editing theme files.

Brute-force login limiter (locks out offending IPs for 15 minutes after 5 failed attempts using anonymized MD5 transients), disables XML-RPC DDoS vectors, blocks /?author=1 username enumeration scans, and sends X-Frame-Options: SAMEORIGIN & X-Content-Type-Options: nosniff headers.

Redirects "Add to Cart" directly to Checkout and removes unnecessary checkout fields (Company Name, Address Line 2, optional Postcode) to reduce cart abandonment.

Automatically parses <h2...> tags on singular posts to generate an SEO-friendly Table of Contents and estimated reading time badge.

Automatically converts target keywords across blog posts into internal or affiliate links using safe regex matching outside existing HTML tags.

One-click admin utility (protected with check_admin_referer) to purge post revisions, auto-drafts, spam comments, and expired transients, while capping future revisions at 5 per post.

Adds a custom Agency Support widget to wp-admin, declutters default dashboard metaboxes, and customizes the admin footer branding for client handoffs.

kabeer.site/tools.html) Alongside the WordPress plugins, I also built 6 browser-based utilities powered by WebAssembly, HTML5 Canvas, pdf-lib, PDF.js, and Tesseract.js (100% client-side privacy—files never leave the browser):

@imgly/background-removal WASM + Smart Edge Cutout + Transparent PNG, Passport Blue & Pure White backdrops)Tesseract.js Neural OCR)<20KB, <50KB, <100KB) You can inspect the readme.txt, step-by-step installation guide, and PHP source code for every plugin directly in your browser at https://kabeer.site/plugins.html, or test the AI/PDF tools at https://kabeer.site/tools.html.

Have a feature request or building a custom Laravel, React, or WooCommerce platform? Connect with me at kabeer.site or on WhatsApp (+92 334 2978455)!

── more in #ai-tools 4 stories · sorted by recency
── more on @wordpress 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/i-built-open-sourced…] indexed:0 read:3min 2026-11-03 · —