Limit REST API CORS to Your Own Apps
Replaces WordPress's permissive cross-origin (CORS) headers with an allow-list, so only the browser apps you name, such as a headless front end, can call the REST API with credentials.
Snippet Library
Developer snippets for WordPress
Snippets for developers: debugging helpers, custom cron schedules, body classes, REST API tweaks and admin tools for checking hooks and queries. Building blocks for people who write code for WordPress every day.
PHP Info Screen for Administrators
Adds a Tools > PHP Info screen showing the full phpinfo() report (extensions, limits, configuration), handy when a host's control panel does not show it.
Raise the REST API per_page Limit
Lets REST API requests for posts and pages ask for more than 100 items at once, useful for exports and static site generators.
wp-config.php Settings Overview Under Tools
Adds a Tools > Config Constants screen that shows the value of important wp-config.php settings, such as debug mode, memory limits, cron, caching and file editing, without opening the file.