PluginProbe
xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN / 1.3.4
xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN v1.3.4
1.3.4 1.3.3 1.3.2 1.3.1 1.3.0 1.2.4 trunk 1.0.0 1.0.1 1.0.2 1.0.3 1.0.4 1.0.5 1.0.6 1.0.7 1.0.8 1.0.9 1.1.0 1.1.1 1.1.2 1.1.3 1.1.4 1.1.5 1.1.6 1.1.7 All 30 releases
← All changes | readme.txt +183 -355 1.0.91.3.4 View file →
@@ -1,84 +1,113 @@
1 -=== xSpeed Cache ===
2 -Contributors: asif2bd, wpdevteam, seakashdiu
3 -Tags: caching, performance, speed, optimization, minify
1 +=== xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN ===
2 +Contributors: asif2bd, wpdevteam, seakashdiu, tushar284, hurayraiit, alimuzzamanalim
3 +Tags: cache, performance, page speed, optimization, mcp
4 4 Requires at least: 6.0
5 -Tested up to: 7.0
5 +Tested up to: 7.1
6 6 Requires PHP: 7.4
7 -Stable tag: 1.0.9
7 +Stable tag: 1.3.4
8 8 License: GPLv2 or later
9 9 License URI: https://www.gnu.org/licenses/gpl-2.0.html
10 10
11 -Ultra-fast WordPress caching & performance plugin. Page cache, minify, GZIP, lazy load, fonts, object cache, CDN — one switch, no bloat, no upsells.
11 +A complete WordPress caching plugin: page cache, object cache, CDN, database cleanup and Core Web Vitals optimization, plus a built-in MCP server.
12 12
13 13 == Description ==
14 14
15 -Your visitors decide to stay or leave in under 3 seconds. **xSpeed** makes sure they stay.
15 +Your visitors decide to stay or leave in under 3 seconds. **xSpeed Cache** makes sure they stay.
16 16
17 -Most caching plugins bury you in settings, charts, and upgrade popups. xSpeed does the opposite — install it, flip one switch, and your site loads faster. No bloat, no upsells nagging you, no PhD required.
17 +Most caching plugins bury you in settings, charts and upgrade popups. xSpeed Cache does the opposite. Install it, flip one switch, and your site loads faster. No bloat, no upsells nagging you, no PhD required.
18 18
19 -Built by the team at **WPDeveloper** — trusted by over 7 million WordPress users worldwide.
19 +Built by the team at **WPDeveloper**, trusted by over 6 million WordPress users worldwide.
20 20
21 -= What Does xSpeed Do? =
21 +https://youtu.be/fYVy77GJDE4
22 22
23 -xSpeed is a full-site performance plugin. It caches your pages, shrinks your code, compresses your files, and serves everything as fast as your server physically can — including an AI-powered audit that tells you exactly what's slowing your site down.
23 += What This WordPress Caching Plugin Does =
24 24
25 +xSpeed Cache is a full-site performance plugin. It caches your pages, shrinks your code, compresses your files and serves everything as fast as your server physically can, including an AI-powered audit that tells you exactly what is slowing your site down.
26 +
25 27 The result: pages that load in milliseconds, not seconds. Better Google PageSpeed scores. Happier visitors. Better SEO rankings.
26 28
27 -= The Speed Advantage No Other Free Plugin Offers =
29 +If you have been searching for how to speed up WordPress site performance without hiring a developer, this is the shortest path there. It is built to speed up WordPress from the first page load, not after a week of tuning.
28 30
29 -When xSpeed caches a page, it doesn't just save it — it serves it directly from the server, bypassing PHP entirely.
31 += The Speed Advantage No Other Free WordPress Cache Plugin Offers =
30 32
33 +When xSpeed Cache caches a page, it does not just save it. It serves it directly from the server, bypassing PHP entirely.
34 +
31 35 That means:
32 36
33 -* **With xSpeed static cache:** 5–15ms response time
34 -* **Without it (PHP-served cache):** ~85ms response time
37 +* **With xSpeed static cache:** 5 to 15ms response time
38 +* **Without it (PHP-served cache):** around 85ms response time
35 39
36 -That's up to **17× faster** page delivery on cache hits. No other free caching plugin does this across Apache, nginx, and LiteSpeed automatically.
40 +That is up to **17x faster** page delivery on cache hits. No other free WordPress cache plugin does this across Apache, nginx and LiteSpeed automatically, which is what makes it worth comparing against any other best WordPress cache plugin shortlist you are working from.
37 41
38 42 = Features at a Glance =
39 43
40 -**Page Caching**
44 +https://youtu.be/LlIb3XuQ-mo
41 45
42 -Your pages are saved as static HTML files and served instantly to visitors — before WordPress even loads. The cache rebuilds itself automatically whenever you publish a post, switch themes, or update a plugin. You never have to think about it.
46 +**AI Assistants and the WordPress MCP Server**
43 47
44 -* Static-file rewrite path (bypasses PHP entirely — 5–15ms TTFB)
45 -* Auto-purge on publish, update, comment, theme change
48 +xSpeed Cache ships a WordPress MCP server, so a Claude WordPress MCP connection, or any other MCP client, can inspect and tune your site through the same tools the dashboard uses. Every action is bounded by what you allow when you connect, which is what separates a real WordPress MCP plugin from a chatbot bolted onto a settings page.
49 +
50 +* MCP server appears on the Overview as a capability card, so an AI connection can be set up without hunting for a panel
51 +* OAuth discovery, with dynamic client registration bounded by stored-client limits, redirect URI limits, name and URI length limits and per-IP rate limiting
52 +* Read-only MCP connections can read status through every per-command tool, while write actions stay refused
53 +* Credentials cannot be written by an AI assistant unless you explicitly grant that permission when connecting
54 +* WP-CLI parity: `wp xspeed purge`, `wp xspeed preloader status`, `wp xspeed score run`, `wp xspeed optimize` and `wp xspeed settings list|get|update`
55 +* The `optimize_site` tool measures the site, applies recommended settings one at a time, re-checks the page after each change and reverts anything that breaks it
56 +
57 +**Disable Bloat**
58 +
59 +Turn off WordPress features you do not use. Each one is a request your server does not have to make.
60 +
61 +* Disable dashicons on the frontend
62 +* Remove oEmbed, RSS feeds, XML-RPC, jQuery Migrate and REST API authentication headers
63 +
64 +**AI-Powered Site Audit (Pro)**
65 +
66 +xSpeed Pro scans your specific site and tells you exactly which performance features will help the most, with severity ratings and concrete reasons rather than generic advice.
67 +
68 +
69 +**Page Caching That Speeds Up Your WordPress Site**
70 +
71 +Your pages are saved as static HTML files and served instantly to visitors, before WordPress even loads. This is the fastest way to speed up WordPress page delivery, and the cache rebuilds itself automatically whenever you publish a post, switch themes or update a plugin. You never have to think about it.
72 +
73 +* Static-file rewrite path that bypasses PHP entirely for a 5 to 15ms TTFB
74 +* Auto-purge on publish, update, comment and theme change
46 75 * One-click cache purge from the admin bar
47 -* Exclude specific URLs (e.g. `/cart`, `/checkout`, `/my-account`)
48 -* Set your own cache expiry (1–720 hours)
76 +* Exclude specific URLs such as `/cart`, `/checkout` and `/my-account`
77 +* Set your own cache expiry, from 1 to 720 hours
49 78 * Separate mobile cache for phone and tablet visitors
50 -* Per-post cache rules — custom expiry or disable caching for individual posts
79 +* Per-post cache rules with custom expiry, or disable caching for individual posts
51 80
52 -**Code Minification**
81 +**Code Minification for WordPress Page Speed Optimization**
53 82
54 -Strips all the unnecessary whitespace, comments, and characters from your HTML, CSS, and JavaScript without breaking anything.
83 +Strips all the unnecessary whitespace, comments and characters from your HTML, CSS and JavaScript without breaking anything. Smaller files are one of the most reliable WordPress page speed optimization wins available.
55 84
56 -* Minify HTML, CSS, and JavaScript
85 +* Minify HTML, CSS and JavaScript
57 86 * Combine CSS and JS files to reduce HTTP requests
58 -* Defer or delay JavaScript so it doesn't block page rendering
87 +* Defer or delay JavaScript so it does not block page rendering
59 88 * Async CSS loading
60 -* Removes `?ver=` query strings from asset URLs
61 -* Safe-minify: automatically skips already-minified files and falls back if anything looks off
89 +* Removes `?ver=` query strings from asset URLs (generated files under `wp-content/uploads` keep theirs, so a page-builder or consent-banner edit still reaches returning visitors)
90 +* Safe-minify automatically skips already-minified files and falls back if anything looks off
62 91
63 92 **GZIP Compression**
64 93
65 -Makes every file your server sends smaller — so browsers download them faster.
94 +Makes every file your server sends smaller, so browsers download them faster.
66 95
67 96 * Auto-configures GZIP on Apache and LiteSpeed
68 97 * Shows a ready-to-paste config snippet for nginx and IIS
69 -* Detects if your server already has GZIP active — no double-configuration
98 +* Detects if your server already has GZIP active, so there is no double-configuration
70 99
71 -**Lazy Load**
100 +**Lazy Load WordPress Images, Videos and Iframes**
72 101
73 -Images, videos, and iframes load only when a visitor scrolls to them — not all at once on page load.
102 +Lazy load WordPress media so images, videos and iframes load only when a visitor scrolls to them, rather than all at once on page load.
74 103
75 -* Lazy load images, iframes, and videos
76 -* Automatic CLS (Cumulative Layout Shift) fix so your layout doesn't jump
104 +* Lazy load images, iframes and videos
105 +* Automatic Cumulative Layout Shift fix so your layout does not jump
77 106
78 -**Fonts Optimization**
107 +**Font Optimization for WordPress Core Web Vitals**
79 108
80 -Web fonts are one of the most common causes of slow-loading pages.
109 +Web fonts are one of the most common causes of slow-loading pages, and fixing them is one of the easiest ways to increase WordPress page speed. Together with lazy loading and the LCP preload, this is practical core web vitals optimization rather than a score-chasing trick.
81 110
82 111 * Adds `font-display: swap` so text is visible immediately while fonts load
83 112 * Preloads above-the-fold font files for instant rendering
84 113 * Removes the blank-text flash caused by slow Google Fonts responses
@@ -84,12 +113,12 @@
84 113 * Removes the blank-text flash caused by slow Google Fonts responses
85 114
86 115 **Browser Cache**
87 116
88 -Tells browsers to remember your static files (images, CSS, JS) so returning visitors load your site even faster.
117 +Tells browsers to remember your static files such as images, CSS and JS, so returning visitors load your site even faster.
89 118
90 119 * Sets proper `Cache-Control` and `Expires` headers
91 -* Works automatically — no manual configuration needed
120 +* Works automatically with no manual configuration needed
92 121
93 122 **Cache Preloader**
94 123
95 124 Warms up your cache automatically so the very first visitor after a purge still gets a fast page.
@@ -96,137 +125,147 @@
96 125
97 126 * Sitemap-driven cache warmer
98 127 * Auto-warms cache when you publish or update content
99 128
100 -**Object Cache (Redis / Memcached)**
129 +**Redis Object Cache for WordPress (Redis and Memcached)**
101 130
102 -Speed up database-heavy WordPress installs with server-side object caching.
131 +Speed up database-heavy installs with a persistent object cache WordPress can rely on between requests. Set up Redis object cache WordPress support, or Memcached, in seconds and keep every repeated query in memory.
103 132
104 133 * Connect Redis or Memcached in seconds
105 -* View status and flush cache from the dashboard
134 +* View status and flush the object cache from the dashboard
135 +* Works as a drop-in persistent object cache, so object cache WordPress lookups are not repeated on every page load
106 136
107 -**CDN Support**
137 +**WordPress CDN Plugin Support with Cloudflare Integration**
108 138
109 -Serve your static files from a CDN for faster global delivery.
139 +Serve your static files from a WordPress CDN for faster global delivery. Point it at whichever provider you already use, including a WordPress CDN free tier, so you are not locked into one network while you decide which is the best WordPress CDN for your traffic.
110 140
111 141 * Pull-zone URL rewriting for any CDN provider
112 -* Built-in Cloudflare integration: connect your zone, auto-purge on publish, toggle dev mode
142 +* Built-in Cloudflare WordPress CDN integration: connect your zone, auto-purge on publish and toggle development mode
143 +* Works as a WordPress CDN plugin for any pull zone, with no separate connector to install
113 144
114 -**Database Optimization**
145 +**WordPress Database Cleanup and Optimization**
115 146
116 -A bloated database slows down every page load. xSpeed keeps yours clean.
147 +A bloated database slows down every page load. This WordPress database cleanup plugin keeps yours clean and helps speed up WordPress database queries without a separate tool.
117 148
118 149 * Optimize database tables
119 -* Remove post revisions, spam, trash, transients, and orphaned meta
150 +* Remove post revisions, spam, trash, transients and orphaned meta
120 151 * Schedule automatic cleanup so it runs on autopilot
121 152
122 -**Disable Bloat**
153 += Built to Handle WordPress Edge Cases =
123 154
124 -Turn off WordPress features you don't use — each one is a request your server doesn't have to make.
155 +xSpeed Cache handles the edge cases other plugins miss:
125 156
126 -* Disable dashicons on the frontend
127 -* Remove oEmbed, RSS feeds, XML-RPC, jQuery Migrate, REST API authentication headers
157 +* **Multisite ready.** Each site in the network gets its own cache and settings.
158 +* **LiteSpeed server?** xSpeed Cache detects the LiteSpeed Cache server module and steps back to avoid conflicts.
159 +* **WooCommerce?** Logged-in customers and checkout pages are never cached.
160 +* **WordPress Site Health.** xSpeed Cache adds its own health check under Tools then Site Health, so you always know your cache config is working correctly.
161 +* **Works on any server.** Apache, nginx, LiteSpeed, IIS and any standard PHP host.
128 162
129 -**AI-Powered Site Audit (Pro)**
163 += Designed for Everyone =
130 164
131 -xSpeed Pro scans your specific site and tells you exactly which performance features will help the most — with severity ratings and concrete reasons, not generic advice.
165 +**Non-technical users:** A 3-step setup wizard walks you through first-time configuration in under 2 minutes. Settings auto-save, so there is no Save button to forget.
132 166
133 -= Smart Enough to Stay Out of Trouble =
167 +**Developers:** REST API at `/wp-json/xspeed/v1/`, developer filters (`xspeed_skip_minify`, `xspeed_strip_asset_version`, `xspeed_cache_skip_for_post`, `xspeed_cache_expiry_for_post`), `WP_DEBUG` awareness, and a React 18 and TypeScript admin UI.
134 168
135 -xSpeed handles the edge cases other plugins miss:
169 +**Agencies:** Use the `xspeed_branding` filter to white-label the dashboard for clients.
136 170
137 -* **Multisite ready** — each site in the network gets its own cache and settings.
138 -* **LiteSpeed server?** — xSpeed detects LiteSpeed Cache's server module and steps back to avoid conflicts.
139 -* **WooCommerce?** — logged-in customers and checkout pages are never cached.
140 -* **WordPress Site Health** — xSpeed adds its own health check under Tools → Site Health so you always know your cache config is working correctly.
141 -* **Works on any server** — Apache, nginx, LiteSpeed, IIS, and any standard PHP host.
171 += Private By Default =
142 172
143 -= Designed for Everyone =
173 +xSpeed Cache never collects personal data, stores IP addresses or uses tracking cookies. Every optimization runs locally on your server. By default it makes no calls to any third-party server. The only request is a quick check to your own site's home URL to confirm GZIP is active, rate-limited to once per hour.
144 174
145 -**Non-technical users:** A 3-step setup wizard walks you through first-time configuration in under 2 minutes. Settings auto-save — there's no Save button to forget.
175 +xSpeed Cache also includes **optional usage analytics**. You are asked in two places, both off by default: a clearly labeled consent control in the setup wizard, and the switch in xSpeed Cache → Settings → Privacy & usage data. Nothing is sent unless you opt in from one of them. When enabled, xSpeed Cache shares anonymous, non-sensitive diagnostics: your WordPress and PHP version, active theme and plugins, server type, site language, and which xSpeed Cache features you have switched on, so we know what to keep fast and compatible. No personal data and no page content are ever sent, and you can turn it off again at any time from xSpeed Cache → Settings → Privacy & usage data. See the External services section below.
146 176
147 -**Developers:** REST API at `/wp-json/xspeed/v1/`, developer filters (`xspeed_skip_minify`, `xspeed_cache_skip_for_post`, `xspeed_cache_expiry_for_post`), `WP_DEBUG` awareness, and a React 18 + TypeScript admin UI under 80 KB gzipped.
177 += Backed By a Team You Trust =
148 178
149 -**Agencies:** Use the `xspeed_branding` filter to white-label the dashboard for clients.
179 +xSpeed Cache is developed by the trusted team at WPDeveloper, a leading WordPress marketplace used and loved by millions of users.
150 180
151 -= Private By Default =
181 += Loved xSpeed Cache? =
152 182
153 -xSpeed never collects personal data, stores IP addresses, or uses tracking cookies. Every optimization runs locally on your server. By default it makes no calls to any third-party server — the only request is a quick check to your own site's home URL to confirm GZIP is active, rate-limited to once per hour.
183 +If xSpeed Cache makes your site faster, please leave a review on WordPress.org. It really helps.
154 184
155 -xSpeed also includes **optional usage analytics**. The setup wizard shows a clearly-labeled consent control for it (enabled by default, untick to opt out), and nothing is sent until you confirm your choices in the wizard. When enabled, xSpeed shares anonymous, non-sensitive diagnostics — your WordPress & PHP version, active theme & plugins, server type, site language, and which xSpeed features you have switched on — so we know what to keep fast and compatible. No personal data and no page content are ever sent, and you can turn it off again at any time from your dashboard. (See "External services" below.)
185 +== Installation ==
156 186
157 -= Backed By a Team You Trust =
187 +1. Upload the `xspeed` folder to the `/wp-content/plugins/` directory, or install the plugin through the WordPress Plugins screen directly.
188 +2. Activate the plugin through the Plugins screen in WordPress.
189 +3. Open xSpeed Cache from the admin menu. The 3-step setup wizard walks you through first-time configuration in under 2 minutes.
190 +4. Settings auto-save, so there is no Save button to forget.
158 191
159 -xSpeed is developed by the trusted team at WPDeveloper, a leading WordPress marketplace used and loved by millions of users.
192 +== Frequently Asked Questions ==
160 193
161 -= Loved xSpeed? =
194 += Does this WordPress cache plugin work on my server? =
162 195
163 -If xSpeed makes your site faster, please leave a review on WordPress.org — it really helps!
196 +Yes. xSpeed Cache works on Apache, nginx, LiteSpeed, IIS and any standard PHP host. GZIP auto-configures on Apache and LiteSpeed, and a ready-to-paste config snippet is provided for nginx and IIS.
164 197
165 -== Installation ==
198 += Will it conflict with LiteSpeed Cache? =
166 199
167 -1. Go to **Plugins → Add New** in your WordPress admin and search for **xSpeed**.
168 -2. Click **Install Now**, then **Activate**.
169 -3. Navigate to **xSpeed** in your sidebar.
170 -4. The setup wizard will guide you through the rest — it takes about 2 minutes.
200 +No. xSpeed Cache detects the LiteSpeed Cache server module and steps back to avoid conflicts.
171 201
172 -That's it. Your site is now faster.
202 += Is it safe for WooCommerce? =
173 203
174 -== Frequently Asked Questions ==
204 +Yes. Logged-in customers and checkout pages are never cached, and you can exclude specific URLs such as `/cart`, `/checkout` and `/my-account`.
175 205
176 -= Will this break my site? =
206 += Does it support multisite? =
177 207
178 -Very unlikely. xSpeed includes safety checks for every optimization: minification falls back to the original if anything looks off, and the cache bypasses logged-in users, admin pages, AJAX, and REST requests automatically. If something ever looks wrong, you can toggle any feature off individually.
208 +Yes. Each site in the network gets its own cache and settings.
179 209
180 -= Does it work with WooCommerce? =
210 += Is this a WordPress MCP adapter? =
181 211
182 -Yes. Add `/cart`, `/checkout`, and `/my-account` to the Excluded URLs list and xSpeed will skip caching those pages. Logged-in customers are never served cached pages regardless.
212 +Not exactly. A WordPress MCP adapter usually exposes core WordPress data. The xSpeed Cache MCP server exposes the performance tools this plugin owns, such as cache purging, preloader status, score runs and settings reads and writes, so an assistant works on speed rather than on content.
183 213
184 -= Does it work with my server? =
214 += Can I connect Claude to it? =
185 215
186 -xSpeed works on Apache, nginx, LiteSpeed, IIS, and any standard PHP host. Static-cache rewriting and GZIP auto-configuration work out of the box on Apache and LiteSpeed. For nginx and IIS, xSpeed shows you a ready-to-paste config snippet.
216 +Yes. A WordPress MCP Claude connection uses OAuth discovery, and the MCP server appears on the Overview as a capability card so you can set it up without hunting for a panel. Read-only connections stay read-only.
187 217
188 -= Does it support WordPress Multisite? =
218 += Is xSpeed Cache the best free WordPress cache plugin? =
189 219
190 -Yes. Each site in the network has its own independent cache and settings.
220 +That is for you to judge, but here is the honest basis for comparison. The static-file rewrite path serves cached pages before PHP loads, across Apache, nginx and LiteSpeed, which most free plugins do not do. Object caching, CDN support and database cleanup are included rather than reserved for a paid tier.
191 221
192 -= Will it conflict with LiteSpeed Cache? =
222 += Can it replace my separate WordPress page speed plugin and CDN plugin? =
193 223
194 -No. xSpeed detects LiteSpeed's server-level caching module and steps back automatically to avoid double-caching. Otherwise, only run one page-cache plugin at a time.
224 +In most cases yes. Page caching, minification, GZIP, lazy loading, font optimization, browser caching, object caching, WordPress CDN support and database cleanup are all in one plugin, so you are not stacking a WordPress page speed plugin on top of a cache plugin on top of a database tool.
195 225
196 -= How do I exclude a page from being cached? =
226 += Will it help my Core Web Vitals? =
197 227
198 -Go to **xSpeed → Settings**, paste the URL path (e.g. `/cart`) into the Excluded URLs field — one path per line. Changes save automatically.
228 +It targets the parts a plugin can influence. The static cache improves server response time, the LCP preload picks the largest image on the page rather than the first, lazy loading defers offscreen media, and the automatic Cumulative Layout Shift fix stops the layout jumping. Page weight and DOM size are reported to you, since only a person can fix those.
199 229
230 += What is the MCP server for? =
231 +
232 +The MCP server lets an AI assistant connect to your site and use the same tools the dashboard uses, such as purging cache, checking preloader status, running a score and reading or updating settings. Read-only connections stay read-only, and credentials cannot be written unless you explicitly grant that permission when connecting.
233 +
234 += Will this break my site? =
235 +
236 +Very unlikely. xSpeed Cache includes safety checks for every optimization: minification falls back to the original if anything looks off, and the cache bypasses logged-in users, admin pages, AJAX and REST requests automatically. If something ever looks wrong, you can toggle any feature off individually.
237 +
200 238 = How do I clear the cache? =
201 239
202 -Click **Purge** in the xSpeed dashboard, or use **Purge xSpeed Cache** in your admin bar. The cache also clears itself automatically whenever you publish or update content.
240 +Click **Purge** in the xSpeed Cache dashboard, or use **Purge xSpeed Cache** in your admin bar. The cache also clears itself automatically whenever you publish or update content.
203 241
204 -= Can I use xSpeed alongside Cloudflare? =
242 += Can I use xSpeed Cache alongside Cloudflare? =
205 243
206 -Yes. The built-in Cloudflare module connects your zone and auto-purges Cloudflare's cache whenever xSpeed purges its own — so both caches stay in sync.
244 +Yes. The built-in Cloudflare module connects your zone and auto-purges Cloudflare's cache whenever xSpeed Cache purges its own, so both caches stay in sync.
207 245
208 246 = Can I disable minification temporarily for debugging? =
209 247
210 -Yes. Either toggle the option off in the admin UI, enable `WP_DEBUG` (xSpeed automatically skips HTML minification when debug is on), or use the `xspeed_skip_minify` filter.
248 +Yes. Either toggle the option off in the admin UI, enable `WP_DEBUG` (xSpeed Cache automatically skips HTML minification when debug is on), or use the `xspeed_skip_minify` filter.
211 249
250 += Does xSpeed Cache send my data anywhere? =
251 +
252 +By default, no. The only request is a check to your own site's home URL to confirm GZIP is active. Usage analytics and external performance scores are covered in detail in the External services section.
253 +
212 254 == Screenshots ==
213 255
214 -1. Cache panel — master toggle, status, and live stats (cached pages, cache size, last purge).
215 -2. Minification — minify and combine HTML, CSS, and JavaScript with defer/delay options.
216 -3. Lazy Load — defer images, iframes, and videos until they scroll into view, with CLS-fix.
217 -4. Cache Preloader — sitemap-driven cache warmer that keeps the first visitor fast.
218 -5. Object Cache — connect Redis or Memcached, view status, and flush from the dashboard.
219 -6. CDN — pull-zone URL rewriting for faster global static-asset delivery.
220 -7. Cloudflare — connect your zone, auto-purge on publish, and toggle development mode.
221 -8. Custom Cache Rules — per-URL and per-post caching rules with custom expiry.
222 -9. Disable Bloat — switch off unused WordPress features (dashicons, oEmbed, RSS, XML-RPC, and more).
223 -10. Heartbeat Control — throttle the WordPress Heartbeat API to reduce admin-ajax load.
224 -11. AI-Powered Site Audit (Pro) — site-specific recommendations with severity ratings and concrete reasons.
256 +1. Overview — cache status, hit ratio, cached pages, cache size, and average time saved at a glance.
257 +2. Optimization — minify, compress, lazy-load, resource hints, fonts, and bloat control in one place.
258 +3. Advanced Cache — cache 404s, search results, feeds, and the REST API, plus custom rules and maintenance bypass.
259 +4. Browser Cache — Cache-Control and Expires headers with separate TTLs for static assets and HTML.
260 +5. Health & Insights — diagnostics, hit ratio, cache coverage, and rule-based suggestions you can apply in one click.
261 +6. MCP Server — control this site's cache from Claude and other AI agents over a token-scoped connection.
262 +7. AI Provider — choose OpenAI, Anthropic, Google Gemini, or OpenRouter and set the model powering the AI features.
263 +8. Migration — import settings from WP Rocket, W3 Total Cache, WP Super Cache, or LiteSpeed Cache.
225 264
226 265 == External services ==
227 266
228 -xSpeed contacts your own site (the gzip probe below) and, when usage analytics is enabled, one analytics service. The setup wizard shows a clearly-labeled consent control for analytics (enabled by default, untick to opt out), and nothing is sent until you confirm your choices there.
267 +xSpeed Cache contacts your own site (the gzip probe below); when usage analytics is enabled, an analytics service; only if you choose to submit the optional deactivation survey, that same service; and — only when you run a speed test yourself — one external performance-score provider. Analytics consent is asked in two places, both off by default — a clearly-labeled control in the setup wizard, and the switch in xSpeed Cache → Settings → Privacy & usage data — and nothing is sent unless you opt in from one of them; turning the switch off stops all collection and clears the scheduled send. The deactivation survey is separate and never sends anything unless you explicitly click Submit. External scores are off by default, turn on the first time you press Test, and never run on their own.
229 268
230 269 = Self-hosted gzip probe =
231 270
232 271 * **What it does:** Issues a single `GET` request to your site's home URL (`home_url('/')`) with an `Accept-Encoding: gzip` header to detect whether your web server is already serving gzipped responses. The response body is discarded; only the `Content-Encoding` header is read.
@@ -233,15 +272,8 @@
233 272 * **When it runs:** On demand when the admin dashboard loads server status, throttled to once per hour via a transient (`xspeed_gzip_active`).
234 273 * **Where the request goes:** Your own site (`home_url()`). This request goes only to your own server.
235 274 * **What is sent:** No personal data, no site identifiers, no payload — just a standard HTTP `GET` from your server back to your server.
236 275
237 -= Usage analytics (opt-in, off by default) =
238 -
239 -* **What it does:** When usage analytics is enabled, xSpeed periodically sends anonymous, non-sensitive diagnostics to help us keep the plugin fast and compatible with real-world WordPress environments. Data sent: site URL, site name, WordPress version, PHP version, site language & charset, multisite flag, server software, your list of active & inactive plugins, active theme & version, text direction, and your xSpeed feature usage (which optimization features you have switched on and their numeric settings — e.g. cache lifetime, minification, lazy-load). This is feature-usage data only: it tells us which features are actually used so we can focus on what matters. **We never send any values you enter** — no API keys, tokens, passwords, license keys, email addresses, URLs, brand names, or logos — and **no page content, no visitor data, and no personal data** (your email is never collected in the free plugin).
240 -* **When it runs:** It runs at most once per day via WP-Cron, only after you confirm your choices in the setup wizard. Untick the consent control (or disable it later from the dashboard) and nothing is ever sent.
241 -* **Where the request goes:** WP Insights, WPDeveloper's usage-analytics service — `https://send.wpinsight.com/process-plugin-data`. ([Privacy Policy](https://wpdeveloper.com/privacy-policy))
242 -* **How to turn it off:** Untick the consent control in the wizard, or disable it later from the xSpeed dashboard. Opting out stops all data collection and clears the scheduled task.
243 -
244 276 == Third-party libraries ==
245 277
246 278 This plugin bundles the following GPL-compatible third-party libraries:
247 279
@@ -260,9 +292,9 @@
260 292 * License: MIT
261 293
262 294 = React / React DOM / Scheduler =
263 295
264 -Used for the xSpeed admin interface bundle.
296 +Used for the xSpeed Cache admin interface bundle.
265 297
266 298 * Source: https://github.com/facebook/react
267 299 * License: MIT
268 300
@@ -274,267 +306,63 @@
274 306 * License: ISC
275 307
276 308 == Changelog ==
277 309
278 -= [1.0.9] – 2026-07-16 =
310 += [1.3.4] – 2026-09-20 =
279 311
280 -**Redesigned dashboard navigation, improved settings experience, and caching reliability fixes.**
312 +**Consent-manager scripts marked late are now always left alone, below-fold sections skip rendering work until they are needed, and xSpeed's MCP server shares a site cleanly with other MCP plugins.**
281 313
282 -Dashboard & Admin UX:
283 -- New: Redesigned settings navigation with dedicated pages for Optimization, Cache, Compression, Cloudflare, Health, and AI & Agents.
284 -- New: Branded loading skeleton for a smoother dashboard loading experience.
285 -- Improved: Clearer and searchable settings navigation.
286 -- Improved: Enhanced search with tab and section-level results.
287 -- Improved: Cleaner Free dashboard with streamlined Pro sections.
288 -
289 314 Optimization:
290 -- Fixed: Improved CSS combination compatibility with page builders.
291 -- Fixed: Resolved frontend rendering issues on block themes.
315 +- New: Below-fold sections are rendered lazily with content-visibility: auto, so the browser skips their layout and paint work until they scroll into view.
316 +- New: Block-editor stylesheets are stripped from anonymous frontend pages that do not use any blocks.
317 +- Fixed: Scripts that another plugin marks data-no-optimize or data-no-minify late — as consent managers such as Borlabs Cookie do — are restored to their original URL and left alone by minify, defer and delay, however late the marker is stamped.
292 318
293 -Caching:
294 -- Fixed: Admin bar cache purge issue.
295 -- Fixed: Hit counter reset reliability.
296 -
297 -= [1.0.8] – 2026-07-14 =
298 -
299 -**MCP support for AI assistants, LCP optimization, and admin experience improvements.**
300 -
301 319 AI / MCP:
302 -- New: MCP server support for Claude and other MCP-compatible AI assistants.
303 -- New: Secure OAuth 2.1 connection for remote AI assistants.
304 -- New: MCP dashboard with available tools and permissions.
320 +- Improved: The AI & agents screen now leads with the MCP server and says what each of its tools does, with descriptions shown in full.
321 +- Improved: An assistant already connected over OAuth may ask for approval once more after updating — nothing needs re-entering, and read-only connections stay read-only.
322 +- Fixed: An AI assistant can now connect to xSpeed and to another MCP plugin on the same site. xSpeed's OAuth details moved to an address of their own under /xspeed/mcp, and the site-wide address is handed over as soon as another plugin asks for it — where nothing else wants it, xSpeed keeps answering there.
305 323
306 -Performance:
307 -- New: Resource Hints with LCP image preload and font preconnect.
308 -- Fixed: Improved LCP image loading by preventing lazy loading on the hero image.
309 -
310 324 Dashboard & Admin UX:
311 -- New: Settings shortcut from the WordPress Plugins page.
312 -- Improved: Updated admin menu organization and dashboard navigation.
313 -- Improved: Better Pro license messaging and settings search experience.
314 -- Fixed: Checkbox rendering in both light and dark mode.
325 +- Fixed: Buttons can carry a border and always show keyboard focus, and the Cloudflare Dev-mode controls use proper button styling.
315 326
316 -Reliability:
317 -- Fixed: Improved cache permission handling on non-NGINX servers.
327 += [1.3.3] – 2026-09-16 =
318 328
319 -= [1.0.7] – 2026-07-05 =
329 +**Consent gets a dashboard home, the cache engine learns to leave non-HTML alone, and uncacheable pages now tell the CDN so.**
320 330
321 -**Improved reliability, granular cache management, Redis compatibility, and asset optimization fixes.**
331 +Privacy & Analytics:
332 +- New: A "Privacy & usage data" panel to view and withdraw usage-analytics consent any time, with a matching wp xspeed privacy command.
333 +- Improved: The setup wizard's analytics consent now defaults to off and is only ever an explicit opt-in.
322 334
323 335 Caching:
324 -- New: Granular cache purge options for Page/Static, CSS/JS, Object Cache, and REST Cache.
325 -- Fixed: Improved compatibility with previously installed caching plugins.
326 -- Fixed: Purge All now properly clears optimized assets, object cache, and triggers CDN/edge purges.
336 +- Fixed: WordPress's virtual robots.txt (and favicon) is no longer cached or minified, so every directive and newline reaches crawlers intact.
337 +- Improved: /robots.txt joined the default cache exclusions, and the sitemap pattern now matches sitemaps.xml too — existing installs keep their working exclusion through the rename.
327 338
328 -Object Cache:
329 -- Fixed: Redis 6+ ACL compatibility for managed hosting environments.
330 -- Improved: Object cache write verification for better reliability.
331 -- Improved: Site-specific object cache flushing for shared Redis environments.
332 -- Improved: Persistent object cache group flushing.
339 +Cloudflare & CDN:
340 +- New: A page xSpeed refuses to cache now sends no-store edge headers, so a CDN never freezes a half-optimized or excluded page.
341 +- Fixed: The deferred Cloudflare purge batch is bounded, cleared on deactivation, and says so when a purge is refused.
333 342
334 -Asset Optimization:
335 -- Fixed: Combined CSS now preserves inline styles and stylesheet order.
336 -- Fixed: Combined CSS files are regenerated correctly after cache purge.
337 -- Fixed: Relative asset paths are preserved in optimized CSS.
343 +Optimization:
344 +- Fixed: Scripts marked data-no-optimize or data-no-minify are left completely alone by minify, defer and delay — consent-manager configurations always ship current.
345 +- Fixed: xSpeed's own scripts are never deferred or delayed by its own optimizer.
346 +- Fixed: The Conservative preset now switches LCP preload and preconnect off, matching its "page cache + GZIP only" promise.
338 347
339 348 Dashboard & Admin UX:
340 -- Fixed: Dashboard layout issue with large WordPress admin menus.
341 -- Fixed: Admin menu and toolbar overlay issues.
342 -- Fixed: Pro sidebar item ordering.
349 +- Improved: Preload now reports what actually happened — how many pages are warming, and the server's reason when a crawl cannot start.
343 350
344 -Migration:
345 -- Fixed: Mobile cache migration compatibility for NGINX static cache.
351 +Reliability:
352 +- Improved: Uninstall now removes all usage-tracking state, the scheduled send, and every leftover option row.
346 353
347 -= [1.0.6] – 2026-06-25 =
354 += [1.3.2] – 2026-09-15 =
348 355
349 -**New caching capabilities, smarter settings, Pro cache warming, and major reliability improvements.**
356 +**Purging is now a contract other caches can join: clearing xSpeed's page cache also invalidates LiteSpeed Cache and the host's nginx FastCGI cache, and every purge is scoped to exactly the site and pages it was asked for — including on multisite.**
350 357
351 358 Caching:
352 -- New: REST API response caching with per-route TTL.
353 -- New: Feed, search results, and 404 page caching.
354 -- New: `xspeed_should_cache` filter for advanced cache control.
355 -- New: Maintenance-aware cache serving to prevent stale maintenance pages.
356 -- Improved: Feed handling with conditional GET (304 Not Modified) support.
357 -- Fixed: Cache metadata handling for feeds, 404 pages, and content types.
358 -- Fixed: Automatic cache purging for user and taxonomy changes.
359 -- Fixed: Versioned cache drop-in to ensure updates are applied correctly.
359 +- New: A purge-event contract lets other caching layers invalidate together with xSpeed, so a purge clears every cache that matters in one action.
360 +- New: Purge All is forwarded to LiteSpeed Cache and the host's nginx FastCGI cache when they are present.
361 +- Fixed: One post change triggers exactly one invalidation, deleting a media file purges again, and a purge still finds its post when the hook hands over none.
362 +- Fixed: Purges are scoped per site on multisite — a purge no longer sends another site's URLs to this site's server cache, a default port is not treated as a different site, and full purges stay on the current site.
363 +- Fixed: A purge listener that throws no longer aborts the purge, a query string of "0" is still treated as a query, and a partial purge reports itself as partial instead of claiming success.
360 364
361 -Settings:
362 -- New: Conditional settings with dependency support (AND/OR logic).
363 -- Fixed: Preserved custom option keys during schema-driven saves.
364 -- Fixed: Image URL validation for media fields.
365 +Optimization:
366 +- Fixed: Delaying JavaScript no longer breaks inline scripts bound to a delayed handle, and replayed external scripts keep their original load order.
365 367
366 -White Label:
367 -- Fixed: Footer credit and Help & Support link controls.
368 -- Fixed: Fallback to the default logo when a custom brand logo is unavailable.
369 -
370 -Migration:
371 -- New: One-Click Profiles and Save & Share with an improved import experience.
372 -- Fixed: Import now counts and migrates only enabled source settings.
373 -
374 -Reliability:
375 -- Fixed: Improved REST API error handling to prevent broken JSON responses.
376 -
377 -Admin UX:
378 -- New: Opt-in usage analytics (WP Insights).
379 -- Improved: Sidebar navigation, conditional Pro settings, and submenu behavior.
380 -- Improved: Pro upgrade links now point directly to the pricing page.
381 -
382 -Pro (requires xSpeed Pro):
383 -- New: Predictive Cache Warming and Scheduled Cache Prewarming.
384 -- New: Brotli compression support with GZIP fallback.
385 -
386 -= [1.0.5] – 2026-06-18 =
387 -
388 -**Migration into Free, LiteSpeed cache ownership & accurate hit counting.**
389 -
390 -Migration:
391 -- New: One-click migration from other caching plugins (LiteSpeed Cache, WP Rocket, W3 Total Cache, etc.) is now part of the Free plugin — import your existing exclusions and settings on activation instead of starting from scratch.
392 -
393 -LiteSpeed:
394 -- Fixed: On LiteSpeed/OpenLiteSpeed, xSpeed now tells LSCache to stand down (X-LiteSpeed-Cache-Control: no-cache) and owns the cache itself, so the X-XSpeed-Cache header is emitted, hits are counted, and the dashboard no longer falsely reports a PHP fallback.
395 -- Fixed: LiteSpeed cache hits route through the drop-in (which both tags and counts them) since OpenLiteSpeed's .htaccess can't tag or log a static hit — giving consistent ~1ms hits and an accurate hit ratio.
396 -
397 -Cache hit counting & stats:
398 -- Fixed: Hit/miss counters moved off transients onto a persistent option, so they no longer evaporate when a non-persistent object cache (e.g. an unreachable Redis) is active — the hit ratio was getting stuck at a fake 0%/100%.
399 -- Fixed: Cache MISSes are now recorded inline so the hit-ratio stat reflects reality instead of being pinned at 100%.
400 -- Fixed: PHP-served cache HITs are counted correctly and the drop-in device-bucket desync is resolved.
401 -- Fixed: Homepage now caches via the static rewrite (the rule used a pattern that required a non-empty path, so `/` fell through to PHP while inner pages were rewritten).
402 -
403 -Nginx:
404 -- Fixed: A nginx access_log directive in the generated snippet could take down the whole server when its log file was missing; the path is now resolved lazily so a deleted hits.log can't fail `nginx -t`.
405 -- Fixed: The dashboard's nginx server-block snippet now updates optimistically when you toggle cache, instead of showing the pre-toggle state, and the wizard's Done step shows the post-apply block.
406 -
407 -Admin UX:
408 -- New: Collapsible sidebar groups for cleaner navigation.
409 -- Improved: Renamed the "Cache" module label to "Page Cache" for clarity.
410 -- Improved: Sidebar group icons and chevrons brighten correctly on hover (white in dark mode).
411 -
412 -Module fixes:
413 -- Fixed: Lazy Load — four correctness bugs resolved.
414 -- Fixed: Heartbeat — editor-context detection, CLI set support, and honest frontend copy.
415 -- Fixed: Database cleaner — expired-transient cleanup gaps and a count mismatch.
416 -- Fixed: Google Fonts — no longer double-appends `display=swap` on entity-encoded hrefs.
417 -- Fixed: Settings now strictly validate boolean fields instead of casting, preventing bad values from silently becoming `true`/`false`.
418 -- Fixed: Object Cache — core option groups marked non-persistent so the drop-in can always be deactivated; degraded backends detected honestly.
419 -- Improved: Static-rewrite SSL probe verifies the certificate and no longer blocks admin page loads.
420 -
421 -= [1.0.4] – 2026-06-14 =
422 -
423 -**One-click object cache, parity exclusions & admin polish.**
424 -
425 -Object Cache:
426 -- New: One-click Object Cache setup for Redis and Memcached — tests the connection, installs its own drop-in, and writes the wp-config constants (fully reversible). No drop-in plugin or PHP extension required.
427 -- Improved: Dashboard now reports a degraded object cache honestly when the drop-in can't reach its backend, instead of implying caching is healthy.
428 -
429 -Admin UX:
430 -- New: WP admin submenu now mirrors the in-dashboard navigation, so the menu and dashboard tabs stay in sync.
431 -- Improved: Settings changes apply live across dashboard navigation — no full page reload needed.
432 -- Improved: Menu icon now recolors to the active accent state correctly.
433 -- Improved: Success notifications are anchored to a single consistent position (bottom-center).
434 -- Fixed: Long panel titles no longer push the subtitle off-screen.
435 -- Fixed: Number-input spinners render consistently across browsers (Firefox no longer clips the value).
436 -
437 -Cache exclusions:
438 -- New: Exclusion lists now ship pre-populated with LiteSpeed / WP Rocket-parity defaults (16 URLs, 20 cookies, 28 query params), so a fresh install caches correctly out of the box.
439 -- New: Exclusion rules now support regex via a `~` prefix (e.g. `~utm_[a-zA-Z0-9_-]+`), alongside glob and substring, with ReDoS guards.
440 -
441 -Bug fixes:
442 -- Fixed: Browser Cache no longer emits an "Array to string conversion" warning on multi-valued Cache-Control headers (also clears a false "nginx config required" notice).
443 -
444 -License:
445 -- Fixed: Activating a Pro license now unlocks the Pro panels immediately — no full page reload needed.
446 -
447 -= [1.0.3] – 2026-06-07 =
448 -
449 -**Topology-aware UX, nginx HIT counting, admin polish.**
450 -
451 -Cache topology & UX:
452 -- New: Topology-aware rewrite banner — the dashboard now detects containerized hosts (xclude, Kinsta, RunCloud Atomic, etc.) where the `$document_root` assumption doesn't hold, and tells the user exactly what to expect on their stack instead of silently failing.
453 -- New: Unified nginx server-block snippet — one consolidated, copy-pasteable snippet (collapsible in the UI) replaces the previous fragmented sections.
454 -- New: Nginx-served HITs are now counted — a dedicated access_log captures cache hits served directly by nginx (no PHP), so the dashboard "HITs in last 24h" stat is accurate on nginx setups.
455 -- New: `X-XSpeed-Cache` response header — cache hits are now visible in the response headers, with a distinct value per serve layer (`HIT (nginx)` for the fast static path, `HIT (php)` for the drop-in fallback) so you can confirm a page was cached and tell exactly which layer served it.
456 -- Improved: Browser Cache notice is topology-aware and renders its snippet in a proper code block.
457 -
458 -Admin UX:
459 -- New: Third-party admin notices are suppressed on xSpeed admin screens (`page=xspeed*` only) — other plugins' "rate us" / promo notices no longer crowd the xSpeed dashboard.
460 -- New: Aligned sticky title-bar across the sidebar and content panels for a cleaner scroll experience.
461 -- Improved: Browser Cache + GZIP notices probe-gate themselves — once the underlying issue is resolved, the notice dismisses on its own instead of lingering.
462 -
463 -Benchmark:
464 -- Fixed: "Without cache" leg of the dashboard speed test now appends a cache-buster query string. Previously it was hitting the cache and reporting an artificially-fast baseline, making the speedup number look small.
465 -
466 -= [1.0.2] – 2026-06-02 =
467 -
468 -**Static-rewrite cache, Site Health & Fonts.**
469 -
470 -Static-rewrite cache + Site Health:
471 -- New: Static-file rewrite path — cached HTML is served directly by Apache / nginx / LiteSpeed, bypassing PHP entirely on cache hits (5-15ms TTFB vs ~85ms via the PHP drop-in).
472 -- New: .htaccess static-cache block — installed automatically on cache enable, removed cleanly on disable. Block precedes WordPress's own rules so static files match first.
473 -- New: nginx config snippet — copy-pasteable server { } block surfaced in the dashboard when nginx is detected (PHP can't write nginx config). Avoids the "if is evil" pitfall via a named-location fallback.
474 -- New: LiteSpeed LSCache coexistence — xSpeed detects LSCache's server-level module and steps back instead of double-caching.
475 -- New: Active rewrite probe — Health module pings the cache directory and confirms the rewrite is actually serving static bytes (not just present in .htaccess).
476 -- New: WordPress Site Health integration — Tools → Site Health now lists an xSpeed check covering static-rewrite status + nginx config requirements.
477 -- New: Persistent banner — Cache panel warns the admin when caching is on but the static-rewrite block isn't engaged (slow fallback path).
478 -- New: Copy-to-clipboard button on every config-snippet panel (nginx, GZIP, object-cache).
479 -
480 -Fonts:
481 -- New: Fonts module — adds `font-display: swap` to enqueued web fonts so visible text doesn't wait on a slow Google Fonts response, and exposes a preload list for above-the-fold font files.
482 -- New: FontsModule tests covering the swap rewrite + preload `<link>` emission.
483 -
484 -Improvements & fixes:
485 -- Improved: Server-type detection is cached so CLI / cron contexts see the same server type as web requests.
486 -- Improved: Drop-in (advanced-cache.php) and WP_CACHE constant are preserved across plugin upgrades; auto-heal hook tightened to admin_init to avoid REST/cron noise.
487 -- Improved: Plugin Check pass — i18n textdomains, WP_Filesystem coverage, SQL preparation, sanitization, and plugin/readme headers all cleaned up for WordPress.org review.
488 -- Fixed: nginx snippet rewritten to avoid the try_files trap that broke pretty permalinks.
489 -- Fixed: Rewrite condition normalized for trailing-slash + non-trailing-slash URLs.
490 -- Fixed: WP-Rocket-style canonical pattern — server-level conditional rewrite.
491 -- Fixed: Minify tag-rewrite filters bail in non-frontend contexts (REST / admin / cron).
492 -- Fixed: wp.org release zip now ships `vendor/` — resolves the 1.0.1 activation fatal.
493 -- Improved: Release pipeline rebuilt — `.distignore`-driven dist build, CI verify step, version-named artifact on every run.
494 -- Improved: Plugin version read from the PHP header — single source of truth.
495 -
496 -= [1.0.1] – 2026-06-01 =
497 -
498 -**Foundation release — full feature set + Pro hooks.**
499 -
500 -Module architecture + LiteSpeed parity floor:
501 -- New: Module architecture — every feature now ships as a self-contained Module (Cache, Health, Preloader, Heartbeat, Minify, GZIP, Lazy Load, Disable Bloat, Database, CDN, Cloudflare, Object Cache, Browser Cache).
502 -- New: Health module — 24-hour hit/miss counter + activity log.
503 -- New: Preloader module — sitemap-driven cache warmer with content-publish auto-warm.
504 -- New: Cache exclusion intelligence — glob URL patterns, cookie patterns, User-Agent bypass, ignored query parameters.
505 -- New: Per-device cache (mobile-separate).
506 -- New: Per-post cache rules — don't-cache + custom expiry meta box.
507 -- New: Minification — CSS / JS / HTML minify, combine, defer JS, delay JS, async CSS, remove ?ver= query strings.
508 -- New: Lazy Load module — images / iframes / videos + auto CLS-fix.
509 -- New: Disable Bloat module — 6 ergonomic toggles (dashicons, oEmbed, RSS, XML-RPC, jQuery Migrate, REST auth).
510 -- New: Database module — optimize tables, scheduled cleanup, autoload analysis.
511 -- New: CDN module — pull-zone URL rewriting.
512 -- New: Cloudflare module — zone connect, auto-purge, dev-mode toggle.
513 -- New: Object Cache module — Redis / Memcached config + status + flush.
514 -- New: Browser Cache module — Cache-Control + Expires headers.
515 -- New: Settings search across the entire dashboard with keyword highlighting.
516 -- New: 3-step setup wizard on first activation with preset chooser and benchmark.
517 -- New: Sidebar grouping under domain headers (Cache / Performance / Network / Insights / Tools).
518 -- New: Sidebar tooltips + search shortcut in the collapsed rail.
519 -- New: xspeed_branding filter — agencies can rebrand the dashboard.
520 -- New: xspeed_cache_skip_for_post + xspeed_cache_expiry_for_post filters.
521 -
522 -Pro-essentials (everything xSpeed Pro depends on, bundled here so any Pro release works against this single Free version):
523 -- New: xspeed_module_descriptor filter — Pro hooks this to swap its panels to LicenseLockedPanel when license is invalid.
524 -- New: AI Privacy module — GDPR off-switch + xspeed_ai_can_collect_data filter that Pro AI features must consult before recording visitor data.
525 -- New: Pro upsell teasers — in-context inline cards on Cache, Minify, Lazy Load, Browser Cache and Disable Bloat panels.
526 -- New: Locked Pro module rows in the sidebar — shows what Pro offers with a clear upgrade prompt.
527 -- New: Pro Audit on the Cache panel — site-specific scan listing the top Pro features that would help THIS site, with severity chips and concrete reasons (not generic marketing copy).
528 -- New: Sidebar slot for the license module (appears when xSpeed Pro is installed).
529 -- New: Global 36px form-control height baseline across the dashboard.
530 -- New: filemtime() cache busting on admin asset URLs.
531 -
532 -Improvements & fixes:
533 -- Improved: React panel registry — modules auto-render in the dashboard.
534 -- Improved: Portal-based save indicator — zero layout shift.
535 -- Improved: Distribution zip prunes dev dependencies (composer install --no-dev).
536 -- Fixed: 5 duplicate module icons + regression test.
537 -
538 -
539 -= [1.0.0] – 2026-05-27 =
540 -- Initial release.
368 +Older releases are listed in changelog.txt, included with the plugin, and at [xspeedcache.com/changelog](https://xspeedcache.com/changelog/).