WP Manifestindependent plugin directory
manifest / performance / coreboost

CoreBoost WP Registry grade B. Medium-severity findings · 1 findingWP RegistryMedium-severity findings · 1 findingOpen the reportB

a small wordpress plugin that helps optimize site speed and its other lacking parts

★ 0stars
156release downloads
v3.3.10latest · 5mo ago

Install

Download coreboost-3.3.10.zip From the v3.3.10 release on GitHub, May 13, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/nrdmartinezz/coreboost/releases/download/v3.3.10/coreboost-3.3.10.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

Advanced WordPress Performance Optimization Plugin

CoreBoost is a comprehensive WordPress performance optimization plugin designed to dramatically improve your site's Core Web Vitals, particularly Largest Contentful Paint (LCP), through advanced CSS/JS optimization, critical CSS inlining, and intelligent image loading strategies.

🚀 Key Features

LCP Optimization

  • Smart Lazy Loading Exclusions: Automatically excludes above-the-fold images from lazy loading
  • Fetchpriority High: Applies fetchpriority="high" to LCP candidates for priority loading
  • Hero Image Preloading: Multiple detection methods for Elementor and other page builders
  • Background Image Optimization: Converts CSS backgrounds to discoverable preloads

CSS Optimization

  • Critical CSS Inlining: Page-specific critical CSS for instant above-the-fold rendering
  • Advanced CSS Deferring: Preload method with JavaScript fallbacks and noscript support
  • Pattern Matching: Intelligent CSS handle detection including JetFormBuilder, Elementor, WooCommerce
  • Responsive Optimization: Different critical CSS for different page types
  • Font Optimization: Automatic preconnect, preload, and deferred loading for Google Fonts and Adobe Fonts

JavaScript Optimization

  • Smart Script Deferring: Defer non-critical scripts while preserving dependencies
  • jQuery Protection: Automatically excludes critical scripts like jQuery
  • Plugin Compatibility: Works with popular plugins (Contact Form 7, WooCommerce, Elementor)

Advanced Features

  • Admin Bar Integration: One-click cache clearing and performance testing
  • Tabbed Interface: Organized settings for different optimization areas
  • Debug Mode: Detailed HTML comments showing optimization status
  • Caching System: Performance caching with auto-invalidation
  • Real-time Validation: Form validation and character counters

📊 Performance Impact

Typical Results

  • LCP Improvement: 60-77% faster (3.5s → 0.6-1.5s)
  • Performance Score: +15-30 points in PageSpeed Insights
  • Render-blocking Elimination: Removes 1000ms+ of blocking delays
  • Core Web Vitals: Significant improvements across all metrics

Before vs After

Before CoreBoost:
❌ LCP: 3.5-8.3s
❌ Performance Score: 60-75
❌ Render-blocking CSS: 1000ms+
❌ Lazy-loaded LCP images

After CoreBoost:
✅ LCP: 0.6-2.0s
✅ Performance Score: 85-95+
✅ Render-blocking CSS: <200ms
✅ Optimized LCP loading

🛠️ Installation

Method 1: Download Release

  1. Download the latest release from Releases
  2. Upload the ZIP file through WordPress Admin → Plugins → Add New → Upload Plugin
  3. Activate the plugin
  4. Go to Settings → CoreBoost to configure

Method 2: Git Clone

cd /wp-content/plugins/
git clone https://github.com/nrdmartinezz/CoreBoost.git

Method 3: WordPress CLI

wp plugin install https://github.com/nrdmartinezz/CoreBoost/archive/main.zip --activate

⚙️ Configuration

Quick Setup (2 Minutes)

  1. Hero Images Tab: Enable "Auto-detect from Elementor Data"
  2. CSS Tab: Enable CSS deferring with "Preload with Critical CSS"
  3. Scripts Tab: Enable script deferring (safe defaults included)
  4. Advanced Tab: Enable debug mode for testing

Advanced Configuration

  • Critical CSS: Add page-specific critical CSS for optimal performance
  • Lazy Loading: Configure how many images to exclude from lazy loading
  • Custom Patterns: Add specific CSS/JS handles for your theme/plugins
  • Caching: Enable performance caching for high-traffic sites
  • Font Optimization: Enable automatic optimization for Google Fonts and Adobe Fonts to eliminate render-blocking

🎯 Optimization Strategies

LCP Optimization

// Automatic lazy loading exclusion
add_filter('wp_lazy_loading_enabled', 'exclude_lcp_images');

// Fetchpriority high for LCP candidates
add_filter('wp_get_attachment_image_attributes', 'add_lcp_priority');

// Background image preloading
<link rel="preload" href="hero.jpg" as="image" fetchpriority="high">

CSS Optimization

<!-- Critical CSS inlined in head -->
<style>/* Critical above-the-fold styles */</style>

<!-- Non-critical CSS deferred -->
<link rel="preload" href="style.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<noscript><link rel="stylesheet" href="style.css"></noscript>

Font Optimization

<!-- Preconnect for faster DNS resolution -->
<link rel="preconnect" href="https://fonts.googleapis.com" crossorigin>
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>

<!-- Font loading deferred with display=swap -->
<link rel="preload" href="https://fonts.googleapis.com/css?family=Outfit&display=swap" as="style" onload="this.onload=null;this.rel='stylesheet'">
<noscript><link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Outfit&display=swap"></noscript>

JavaScript Optimization

<!-- Deferred scripts -->
<script src="script.js" defer></script>

<!-- Critical scripts preserved -->
<script src="jquery.js"></script> <!-- Not deferred -->

🔧 Supported Plugins & Themes

Page Builders

  • ✅ Elementor & Elementor Pro
  • ✅ Beaver Builder
  • ✅ Divi Builder
  • ✅ Visual Composer

E-commerce

  • ✅ WooCommerce
  • ✅ Easy Digital Downloads
  • ✅ WP eCommerce

Form Builders

  • ✅ JetFormBuilder (special optimization)
  • ✅ Contact Form 7
  • ✅ Gravity Forms
  • ✅ WPForms
  • ✅ Ninja Forms

Popular Plugins

  • ✅ Yoast SEO
  • ✅ Rank Math
  • ✅ Slider Revolution
  • ✅ Essential Addons
  • ✅ Ultimate Addons

📈 Monitoring & Testing

Built-in Tools

  • Admin Bar Menu: Quick access to cache clearing and PageSpeed testing
  • Debug Mode: Detailed optimization comments in HTML source
  • Performance Metrics: Track optimization effectiveness

Recommended Testing

  • PageSpeed Insights: Test before/after optimization
  • GTmetrix: Monitor performance over time
  • WebPageTest: Advanced performance analysis
  • Chrome DevTools: Real-time performance debugging

🐛 Troubleshooting

Common Issues

CSS Not Loading

// Check if critical CSS is properly configured
// Ensure noscript fallbacks are present
// Verify CSS handles in debug mode

JavaScript Errors

// Add problematic scripts to exclude list
// Check jQuery dependencies
// Verify defer compatibility

LCP Not Improving

// Increase lazy loading exclusion count
// Verify hero image detection
// Check fetchpriority application

Debug Mode

Enable debug mode to see detailed optimization information:

<!-- CoreBoost: Lazy loading disabled for LCP candidate -->
<!-- CoreBoost: fetchpriority="high" added to LCP candidate -->
<!-- CoreBoost: CSS DEFERRED - Handle: elementor-frontend -->

🤝 Contributing

We welcome contributions! Please see our Contributing Guidelines for details.

Development Setup

git clone https://github.com/nrdmartinezz/CoreBoost.git
cd CoreBoost
# Make your changes
git checkout -b feature/your-feature
git commit -m "Add your feature"
git push origin feature/your-feature

Reporting Issues

  • Use the Issues tab
  • Include WordPress version, PHP version, and active plugins
  • Provide PageSpeed Insights URLs before/after
  • Include debug mode output if relevant

📝 Changelog

Version 1.0.0 (Current)

  • ✅ Initial release
  • ✅ LCP optimization with lazy loading exclusions
  • ✅ Advanced CSS deferring with critical CSS
  • ✅ JetFormBuilder compatibility
  • ✅ Admin bar integration
  • ✅ Tabbed settings interface
  • ✅ Debug mode and performance monitoring

See CHANGELOG.md for detailed version history.

📄 License

This project is licensed under the GPL v2 or later - see the LICENSE file for details.

🙏 Acknowledgments

  • WordPress Core Team for native lazy loading and fetchpriority APIs
  • Elementor team for comprehensive page builder APIs
  • Web.dev team for Core Web Vitals guidance and best practices
  • Performance optimization community for research and testing

📞 Support


Made with ❤️ for the WordPress community

CoreBoost - Boost your Core Web Vitals

Releases

Newest 25 of 60 recorded releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v3.3.10 latest
May 13, 2026 5mo ago
coreboost-3.3.10.zip
9
May 12, 2026 5mo ago
coreboost-3.3.9.zip
5
May 12, 2026 5mo ago
coreboost-3.3.8.zip
1
May 12, 2026 5mo ago
coreboost-3.3.7.zip
1
May 12, 2026 5mo ago
coreboost-3.3.6.zip
1
May 12, 2026 5mo ago
coreboost-3.3.5.zip
3
May 12, 2026 5mo ago
coreboost-3.3.4.zip
2
May 12, 2026 5mo ago
coreboost-3.3.3.zip
1
May 11, 2026 5mo ago
coreboost-3.3.2.zip
2
May 10, 2026 5mo ago
coreboost-3.3.1.zip
7
May 7, 2026 5mo ago
coreboost-3.3.0.zip
2
May 7, 2026 5mo ago
coreboost-3.2.7.zip
1
May 7, 2026 5mo ago
coreboost-3.2.6-dev.114.zip
1
May 6, 2026 5mo ago
coreboost-3.2.6.zip
4
May 6, 2026 5mo ago
coreboost-3.2.5.zip
1
May 6, 2026 5mo ago
coreboost-3.2.4.zip
1
May 5, 2026 5mo ago
coreboost-3.2.3.zip
1
May 5, 2026 5mo ago
coreboost-3.2.2-dev.113.zip
3
May 5, 2026 5mo ago
coreboost-3.2.2-dev.112.zip
0
Feb 4, 2026 8mo ago
coreboost-3.2.2.zip
6
Feb 4, 2026 8mo ago
coreboost-3.2.1-dev.111.zip
1
Feb 4, 2026 8mo ago
coreboost-3.2.1.zip
4
Feb 3, 2026 8mo ago
coreboost-3.2.0.zip
2
Feb 3, 2026 8mo ago
coreboost-3.1.9-dev.110.zip
1
Feb 3, 2026 8mo ago
coreboost-3.1.9.zip
4
All releases on GitHub →
B grade

Security

CoreBoost 3.3.10 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
3.3.10
Findings
1
Worst severity
medium
Content hash
a678f5962027ad967498b7e8…

Findings

  • medium Nonce-only admin_init actions allow low-priv cache clear and option wipe

    missing_capability

    Overview, Cache, Database, and Settings pages register admin_init handlers that process ?page=coreboost* &action=* &_wpnonce=* before WordPress enforces the manage_options menu capability. Handlers only call wp_verify_nonce. Any authenticated user can create those nonces with wp_create_nonce and hit admin.php to flush caches or run full_reset (DELETE of coreboost_% options/transients). AJAX counterparts correctly check manage_options, but the GET admin_init paths do not.

    includes/admin/class-database-page.php:47-118

    Recommendation

    At the start of each early_handle_* / handle_cache_clearing method, require current_user_can('manage_options') and bail otherwise. Prefer admin-post handlers with capability checks.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.