# I Built & Open-Sourced 12 Lightweight WordPress/WooCommerce Plugins (<15KB) + 6 Browser-Based AI & PDF Tools

> Source: <https://dev.to/kabeer099/i-built-open-sourced-12-lightweight-wordpresswoocommerce-plugins-15kb-6-browser-based-ai--2h5j>
> Published: 2026-11-03 09:18:52+00:00

Most WordPress and WooCommerce site owners end up installing 20+ heavy plugins—or paying $49 to $99/year per plugin—just to handle basic performance optimization, WhatsApp ordering, Cash-on-Delivery (COD) fraud prevention, or JSON-LD SEO schema.

Worse, many "free" plugins inject bloated JavaScript frameworks, admin upsell banners, and external telemetry that slow down `wp-admin` and hurt **Core Web Vitals (LCP, INP, CLS)**.

To solve this for my own client projects and the wider developer community, I engineered and open-sourced **12 ultra-lightweight (<15 KB each), zero-telemetry, GPLv2-licensed WordPress & WooCommerce plugins** plus **6 client-side WebAssembly AI & PDF utilities**.

🔗 **Live WordPress Plugins Vault (.ZIP Downloads + Readme + PHP Source Viewer):**

👉 [https://kabeer.site/plugins.html](https://kabeer.site/plugins.html)

🪄 **Live Browser-Based AI & PDF Studio Tools:**

👉 [https://kabeer.site/tools.html](https://kabeer.site/tools.html)

Every `.zip` archive includes the main PHP plugin file (protected with `ABSPATH` guards, WordPress Settings API nonces, `current_user_can('manage_options')`, and strict sanitization), a standard `readme.txt`, `index.php` directory protection, and a clean `uninstall.php`.

Removes WordPress core bloat (Emoji scripts/styles, oEmbeds, `wp_generator`, RSD/WLW links), unloads 36 KB `dashicons.min.css` for logged-out visitors, strips `?ver=` query strings for better Cloudflare cache hit rates, disables XML-RPC, and injects a **65ms Instant Hover Link Prefetcher**.

Adds a customizable site-wide floating WhatsApp button and hooks into `woocommerce_after_add_to_cart_button` to place a direct **"Order via WhatsApp"** button on WooCommerce product pages with the product title, price, and permalink pre-filled.

Built for Cash-on-Delivery (COD) e-commerce stores. Validates mobile phone digit length at checkout, blocks repeated fake digit strings (e.g., `00000000000`), and enforces a configurable maximum COD cart total cap.

Uses your server's native PHP GD/Imagick engine via `wp_upload_image_mime_transforms` and `big_image_size_threshold` to automatically convert uploaded JPEG/PNG sub-sizes to WebP and scale down oversized 4000px+ photos with **zero monthly credit limits**.

Outputs clean `Schema.org` structured data (`Article`, `Product`, `WebPage`, and `Organization`) in `wp_head` without heavy metabox bloat.

Safely inject your Google AdSense Publisher ID (`ca-pub-...`), Meta Pixel, TikTok Pixel, GA4, and custom `<head>` / `<footer>` scripts without editing theme files.

Brute-force login limiter (locks out offending IPs for 15 minutes after 5 failed attempts using anonymized MD5 transients), disables XML-RPC DDoS vectors, blocks `/?author=1` username enumeration scans, and sends `X-Frame-Options: SAMEORIGIN` & `X-Content-Type-Options: nosniff` headers.

Redirects "Add to Cart" directly to Checkout and removes unnecessary checkout fields (Company Name, Address Line 2, optional Postcode) to reduce cart abandonment.

Automatically parses `<h2...>` tags on singular posts to generate an SEO-friendly Table of Contents and estimated reading time badge.

Automatically converts target keywords across blog posts into internal or affiliate links using safe regex matching outside existing HTML tags.

One-click admin utility (protected with `check_admin_referer`) to purge post revisions, auto-drafts, spam comments, and expired transients, while capping future revisions at 5 per post.

Adds a custom Agency Support widget to `wp-admin`, declutters default dashboard metaboxes, and customizes the admin footer branding for client handoffs.

`kabeer.site/tools.html`)
Alongside the WordPress plugins, I also built 6 browser-based utilities powered by WebAssembly, HTML5 Canvas, `pdf-lib`, `PDF.js`, and `Tesseract.js` (100% client-side privacy—files never leave the browser):

`@imgly/background-removal` WASM + Smart Edge Cutout + Transparent PNG, Passport Blue & Pure White backdrops)`Tesseract.js` Neural OCR)`<20KB`, `<50KB`, `<100KB`)
You can inspect the `readme.txt`, step-by-step installation guide, and PHP source code for every plugin directly in your browser at **[https://kabeer.site/plugins.html](https://kabeer.site/plugins.html)**, or test the AI/PDF tools at **[https://kabeer.site/tools.html](https://kabeer.site/tools.html)**.

Have a feature request or building a custom Laravel, React, or WooCommerce platform? Connect with me at **[kabeer.site](https://kabeer.site/)** or on WhatsApp (`+92 334 2978455`)!