I was just curious if you theme developers are shipping your themes with a front-page.html and home.html. My clients find it very confusing when they go to edit their pages and they can just go to pages in the sidebar and edit all pages except the blog and front pages.

Back in the day before block themes these templates were necessary but now some clients like to edit their own content via the block editor. Maybe a better approach would be to ship with a page-home.html and page-blog.html instead. At leas this way they arent forced to use the templates and if they are comfortable with the block editor they can create their own templates and use them. Now your basically forced to edit the front-page and home templates because they take over no matter what.

IDK im just thinking out loud at this point. Anyone here have the same thoughts and what do you do when shipping themes or designing them for clients? Thanks.

we had a long term client using wordpress and woo, who didn’t want to move to shopify or magento. The store already had custom integrations with local CRM and accounting platforms, so changing the commerce platform would have meant rebuilding a lot of working infrastructure.

The main problems were performance, reliability and years of wp customisations becoming increasingly difficult to maintain. I wanted to see whether we could solve this with a more structured theme architecture based on roots. It worked well enough that we gradually turned it into a shared upstream for our other woo projects.

The current stack:

• Roots Acorn 6 with Sage architecture and Blade templates
• Vite Tailwind CSS v4 with CSS custom-property design tokens
• Alpine.js GSAP, ScrollTrigger and Lenis Swup for page transitions
• WooCommerce

The shared platform contains the basic design system, woo templates and functionality, universal gutenberg blocks, ajax catalog filters, side cart, search and build tooling. Each client has a separate private fork containing its branding, design tokens, navigation and client-specific blocks. We then pull platform improvements from the shared upstream.

There are still rough edges. Gutenberg blocks and parts of the editing experience need more work, but the frontend performance and level of control have been encouraging so far.

A production example using it: roxder.com
github: https://github.com/antoniaksander/sobe-theme

The part I’m still evaluating is whether the shared-upstream/client-fork model. Has anyone here maintained a similar setup across multiple WooCommerce projects? Looking for people to discuss and test this idea.

Ten years ago sage and blade often felt like overkill for wp and woo. But with AI assisted development, I’m finding the additional structure much easier to justify—but I’m interested to hear where others think of this approach what would be the title be?

Boilerplate demo: https://agenticwp.ayoubomari.com/

I got tired of the usual WooCommerce setup (page builders, a pile of plugins, custom CSS scattered everywhere), so I started building a boilerplate around a different workflow, relying on AI to implement the design and automate tasks in the admin panel instead of doing everything by hand. Still a work in progress, and I'm new to the WordPress space, so I could use feedback on how to get it closer to (or better than) the Shopify dev experience.

The main idea: edit files instead of building everything through wp-admin, with AI handling most of the implementation. Design tokens live in theme.json — colors, fonts, spacing, button radius, etc. Change something there and it propagates through the theme, instead of the same value being set in five different places.

For custom sections, I borrowed from Shopify's section model. A section is basically:

block.json

render.php

CSS

You add it to a template and configure it with attributes. I'm deliberately avoiding the "everything is a nested block" approach, sometimes I just want a section with a few settings, not an editor tree to manage.

WooCommerce still does the heavy lifting. Products, cart, checkout, all use the normal WooCommerce data model. I'm not replacing WooCommerce, just making those pages follow the same design system as everything else. Yoast handles SEO, schema, and sitemaps right now, but I'm not sure that's the best pick, curious what plugins people would actually recommend for SEO and anything else worth baking into a boilerplate like this.

Frontend's kept lean: no page builder loaded everywhere, carousels share one JS file, some interactions are just CSS, layout shift gets handled before first paint where possible. I also wired up Playwright and Lighthouse MCP so the AI can check performance and accessibility metrics itself and optimize against them instead of me eyeballing PageSpeed reports.

Basically: WordPress/WooCommerce as the backend, Shopify-ish workflow for the theme layer. Open to any feedback, especially from people who've built a lot of WooCommerce stores and know what's actually missing here.

Looking for some SEO/WordPress advice on this.
An older business website has closed down. The same owner now has a new business in the same field under a different brand.

Moving the products across via CSV is straightforward, but there are also around 500 blog posts on the old site.

Would it be better to:
transfer the existing blogs to the new website, update/rebrand them with the new company name and then submit the new URLs through Google Search Console, or
rewrite/recreate the blogs from scratch on the new site?

The old business no longer exists, but the content itself is still relevant to the same industry.

Main concern is preserving any SEO value without creating duplicate content or causing issues with Google.
What would be the best way to handle this?

I already use a pretty nice plugin for popup galleries that can scroll through all the images on a page, but I want to show a longer video ad that I made, and have some way to show the looping gif preview on the page itself, and for people who want to watch the whole thing, just click a button and have it pop up in a lightbox or something.

Right now I have the video as its own page, which is a little too much for how much I'm showing on that page, compared to the other pages

This is for a portfolio

So every once in a while, when I click on All Pages in the Dashboard, I get 404 error that the page doesn't exist.

Is there any kind of fix for this? It's been happening for some time now and the only solution is to delete all cookies and log back in again.

This is the only WP page that I manage.

We've tried disabling plugins.

We made sure our PHP and WP versions were up to date. The issue was caused under earlier versions of both. Updating did not fix it.

It happened on its own. We did not update anything, plugin or otherwise, between when the site was loading properly and not loading properly. We do not have automatic updates on.

There are screenshots of how the homepage is supposed to look in this social media promo below. Simply going to lynntv.org on your desktop will show something horribly wrong.

We do not have a webmaster, an IT department.. just me, the executive director with a nice collection of hats. I know enough about wordpress to be dangerous. (and I can build basic sites, didn't build ours.)

We lost a lot of our funding, so we can't hire a webmaster. Scouring forums will hopefully do the trick!

Thank you.

https://preview.redd.it/0hn7hoxjjkih1.jpg?width=864&format=pjpg&auto=webp&s=5d3f85b4820f087d47bfde7cc2ab53af4f7b3eb5

Not exactly how i wanted to start my week, by what can i do. I just received this mail from the Dokan Team. Who else got this?

Subject: Important Security Update from Dokan

Hi XXXXXXX,

We're writing to share an important security update regarding Dokan Pro.

What Happened?

As part of our routine security review, we identified a software supply-chain attack involving an npm package used within our infrastructure. The incident resulted in unauthorized access to part of our cloud storage, where we found that a ZIP file had been modified and uploaded again.

Our engineering and security teams immediately contained the incident and secured the affected systems. We addressed the unauthorized changes, reviewed the affected components, and completed the necessary remediation.

The identified security issue has now been addressed, and we have released Dokan Pro version 5.0.11.

How We Addressed The Issue

Although the identified issue has been resolved, we're taking additional precautions to provide our users with another layer of protection.

We have reviewed and strengthened the affected systems and are continuing to monitor them closely.

As part of these precautions, we strongly recommend that all Dokan Pro users update their plugin and review their WordPress websites.

What You Need to Do

1. Update Dokan Pro

Please update to Dokan Pro version 5.0.11.

We strongly recommend that you do not continue using an older version of Dokan Pro.

1. Change Your WordPress Passwords

Please change the passwords of your WordPress users, particularly Administrator accounts.

Use strong, unique passwords and avoid reusing passwords that you use on other services.

We also recommend enabling two-factor authentication (2FA) for Administrator accounts wherever possible.

1. Check Your Administrator Accounts

Go to WordPress → Users and review the accounts with Administrator access.

If you notice an Administrator account that you do not recognize, please remove it immediately and change the passwords of your other WordPress users.

1. Review Your WordPress Files

Please review your WordPress files and directories for any files that you do not recognize or anything that appears to have been added or modified unexpectedly.

If you notice anything suspicious or are unsure about a particular file, please contact us. Our team can help review the files with you and advise you on the appropriate next steps.

I have built a WordPress translation plugin and I’m looking for early testers

I’ve been working on a WordPress plugin called Best Translate and I’m at the stage where I’d like to get feedback from people using it on real websites.

The idea came from finding multilingual WordPress sites unnecessarily difficult to manage, especially with Elementor. Best Translate scans the website and organises detected text page by page, so you can clearly see what you’re translating instead of managing duplicated pages.

It currently supports things like:

• Elementor pages
• Headers, footers and navigation
• HTML widgets
• Multiple languages
• CSV import/export
• Language switchers
• Manual control over translations
• One-page free mode and a full Pro version

I’m happy to give the full Pro version free to a small group of early testers in exchange for genuine feedback.

If anyone here manages WordPress websites and wants to try it, send me a message on [[email protected]](mailto:[email protected]) or have a look at bakemywebsite.com.

I’d also be interested to hear what people currently dislike about existing WordPress translation plugins, because that may help decide what I build next.

If you already use WPML, Polylang, TranslatePress or another solution, I’d especially like to know what frustrates you about it.

I have been using <span class="nobr">...</span> for years to keep important phrases together in headlines and prevent awkward line breaks/widows across responsive layouts. It works, but when scanning HTML it can be interruptive to reading in code view. I am switching to the shorthand of <nbr>...</nbr> and converting it to a proper HTML output element with a WordPress filter before rendering. The filters hook into the_content and the_title so both article text and post headlines can use the same syntax, while CSS simply applies white-space: nowrap. It is a small change, but improves the readability when updating content. I have been toying with building an intelligent plugin that can preflight copy to tag phrases / other rule based grouping, and maybe use a headless HTML rendered to see how copy breaks on various device widths.

I know there have been numerous reported WordPress vulnerabilities recently, and a lot of those are the result of more advanced AI scanning, but I was wondering if those were mostly reported by outside researchers or by internal maintainers?

I like Linux's approach, where kernel maintainers have built their own machines to intelligently rove over the kernel code to (hopefully) find vulnerabilities before attackers do. They are finding hundreds of real Linux vulnerabilities every week, some of which have existed for 20 years. I have wondered if the same is being done by WordPress maintainers.

I am really concerned because of all the recent security issues. But I also wouldn't know what other platform to migrate to. How do you see it? Any plans to migrate away from WP?

A simple question: "Why is my plugin not first in the result, when I search for it's exact name?" lead to a series of interesting discoveries about the free plugins directory.

Have a website that I am trying to streamline due to some server limits being hit, so I'm looking at code improvements and plugins in particular.

I have been running Wordfence premium on the site for a few years, though I'm not too sure what value it really provides.

A year ago I also put CloudFlare in front of the site as we were experiencing a large amount of bot traffic.

Do these two services overlap in terms of what they provide? Does Wordfence give me much benefit? I installed Wordfence following a hack on another website kind of blindly - following searching for things like 'how to improve wordpress security'.

Does it provide me any real value as I never really look at it. The main actual usable benefit is that it emails me a warning when a plugin is out of date.

Does anyone know of a plug-in or tool that would make it easy to scan my business cards and have it automatically upload into Fluent CRM?

Hello WP community I have a question. Is it possible to find which requests are making PHP workers hit limits ? does the error logs record and show requests which are keeping PHP workers busy?

And got a 5-star review for the first time.

You can check the link, its called SuperHertz Cache Preloader.

And got a 5-star review for the first time.

You can check the link, its called SuperHertz Cache Preloader.

AND if you like it give me more reviews

Hey everyone, just a heads up if you or your clients are using any plugins from BdThemes (they make a lot of popular Elementor add-ons). There's an active supply chain attack currently unfolding.

From what is being reported, attackers managed to compromise the update mechanism. This means that even if you think you are just doing a routine plugin update, it might be pulling a malicious payload directly into your site.

If you have any of their plugins installed, I highly recommend disabling them or checking your file integrity immediately until there is absolute clarity from the developers. Stay safe and double-check your client sites today!

Has anyone ever changed their mind about an agency after the first call?

I'm at the stage where every WordPress development agency starts looking the same. Nice portfolio, nice promises, similar pricing... but I know that's not what determines whether a project goes well.

I had an intro call with IT Monks this week, and it made me realize I'm probably asking the wrong questions. What ended up telling you the most about a WordPress development agency before you signed? Was there one question or one answer that completely changed your decision?