Practical guides on the security, speed, and care of your website, written in plain language.
No articles match your search. Try another word.
Membership plugins can be a back door. A flaw in Ultimate Member let you become a site administrator right at registration, and it was exploited in the wild.
Read more →
Instead of your site, a message appears saying the account has been suspended. It is stressful, but usually quickly solvable. We explain the most common reasons and the next steps.
Read more →
In 2023 a flaw in the WooCommerce Payments plugin let a stranger pose as the shop administrator. With a single request header. WordPress had to force updates.
Read more →
LiteSpeed Cache is one of the most popular WordPress speed plugins, 5 million installs. In 2024 it had a flaw that let a stranger become an administrator.
Read more →
An address like johnsmith.services@gmail.com works, but looks amateurish and carries real risks. Business email on your own domain means professionalism, trust and control.
Read more →
Many people think only plugins are dangerous. Yet in 2024 the popular Bricks builder/theme let strangers run their own code on the server, without logging in.
Read more →