Blog
Product updates, WordPress advice, and stories from behind the shield.
Automattic has released 11.2.0 and 11.1.2 of WooCommerce Stripe Gateway to fix security issues. Here is how to pick a version, confirm the update and deal with the 10.9.0 password…
Read articleBefore installing another plugin, use the built-in Settings > Discussion options to hold suspicious comments, close old threads and clear your Spam and Pending piles safely.
Read articleWooCommerce now ships security fixes in their own patch releases and can push required extension fixes to connected stores. Here is where that protection stops and what to check o…
Read articleWooCommerce has released fixed WooPayments versions for every release line. Here is how to find your version, update, confirm the result and check staging copies too.
Read articleCVE-2026-111497 is a critical Brotli flaw that WordPress pingbacks can reach. Updating WordPress will not fix it. Here is who is exposed and what to ask your host.
Read articleSuspect someone else has your WordPress login? Reset the password, check the account email and sign out other devices from one screen, then confirm it worked.
Read articleBugShield Scout scanned 34,751 WordPress.org plugins and shortlisted 2,243 findings across 1,465 plugins for review. Developer outreach has already led to patched releases documen…
Read articleWordPress 7.1.4 fixes 22 vulnerabilities, including an upgrade-process flaw that needs no login. Here is how to update, close off the upgrade folder and check who holds Contributo…
Read articleA careful, owner-friendly procedure for writing errors to a private WordPress debug log, reading the result and returning wp-config.php to normal.
Read articleMatch each person's real tasks to the lowest suitable WordPress role, then audit existing accounts, trim excess access and confirm what each login can still do.
Read articleA practical walkthrough for exporting your WordPress database with phpMyAdmin or mysqldump, keeping it with your files, and checking the copy imports before you trust it.
Read articlePHP has announced an urgent security release for 21st October. Here is what WordPress owners should check now, and how to confirm the fixes reach their sites.
Read article