So I've been using WP Forms for a couple of years, but while it's easy, it's expensive and I hate how it stores its responses in hidden posts. I also hate that the Pro version is $399 and still doesn't have n8n integrations or webhooks. They have tons of formatted forms... but none ever fit.

I'm on a mission to make my site more responsive, and lower costs... so What do you think is the best forms program? I do plan to be running several sites including some that will need people to upload information including drivers licenses and sign a waiver.

been thinking about Gravity Forms and potentially Fluent forms - but would love everyone's thoughts.

My WP Forms subscription expires in October so have to make a decision soon so I can migrate the big 3 sites before the WP Forms expires

I’m a web developer with 10+ years of experience.

Today I generated a genuinely unique, award-worthy website design in ChatGPT, with instructions for it to be exported as a WordPress/Elementor theme.

From generating the site to installing it on WordPress and having it actually working took less than an hour.

And I’m sitting here thinking… are we cooked? 😂

How much time do you think web developers realistically have before we get a tool where you type:

> “Build me a unique, high-end website for this business.”

…and one click later you have the design, responsive pages, CMS, animations, SEO basics, WordPress integration, and everything else ready to go?

Not another generic AI template — I mean genuinely custom, polished websites.

1 year? 2 years? Or are we basically already there?

Hey r/Wordpress,

About two years ago, I released a plugin called WPSS Ultimate User Management. I was pretty proud of it, but I made one rookie mistake: I completely messed up the naming strategy. The name was so bad that the WordPress plugin directory search algorithm basically buried it. It wouldn't even show up if you searched for user management plugins!

Instead of leaving it to die in search engine limbo, I decided to give it a proper comeback. I've spent the last few weeks refactoring the whole codebase, cleaning up the backend, and bringing it up to standard for WordPress 7.0.

What’s new?

Besides code optimizations and performance tweaks, I wanted to make user management faster right from the native WP admin.

Now, when you hover over any user in the native WordPress user list, you’ll find a new Permissions link alongside the default Edit/View options. Clicking it pops up a clean role-management view specifically for that user, saving you from navigating away or digging through full profile pages just to adjust roles and capabilities.

Here’s a quick overview of what the plugin does:

• Role & Capability Editor: Create custom roles or fine-tune exact capabilities for existing ones.
• Dashboard & Menu Access: Restrict access to specific admin menus, submenus, and the admin bar based on user roles.
• Widget & Sidebar Permissions: Control who can see or edit classic widgets and sidebars.
• Content Restrictions: Block access to posts, pages, or custom post types by role with custom restriction messages.
• Clean & Lightweight: Native WP hooks, no bloated external libraries, and built for PHP 8.1+.

It’s been a fun process fixing old mistakes and polishing the code. If you handle client sites, membership platforms, or just need cleaner access control, I'd love for you to check it out and let me know what you think!

WordPress plugin link: RoleCraft: User Access Control

Github project link: RoleCraft: User Access Control

I'm dealing with a persistent, self-healing malware infection across ~30 WordPress sites on the same cPanel shared hosting account (A2 Hosting).

Symptoms:

· Files reappear seconds after deletion
· mu-plugins/nexus-router-run.php (empty 0-byte file) keeps coming back
· Advanced-cache.php, db.php, and .g_*.php files in wp-includes
· Shared memory segments (shmop) storing payloads
· Processes like .g_98130eea.php running even after file deletion
· .user.ini files with auto_prepend_file pointing to backdoors

What I've done:

· Replaced WordPress core with fresh files
· Replaced all plugins from official sources
· Replaced Astra theme from official source
· Cleaned database (removed sc_, wp_91_, transient_sc* options)
· Changed database name, username, and password
· Regenerated WordPress salts
· Killed all .g_ processes
· Cleared shared memory (ipcrm)
· Deleted all .user.ini files
· Deleted all mu-plugins
· Deleted advanced-cache.php and db.php
· Disabled all cron jobs
· Changed cPanel password

The problem:

Shared memory keeps coming back (new segments appear), and the .g_ process restarts. Something is recreating it. I suspect it's either:

· A system-level cron job outside my user
· A hidden backdoor in another infected site
· Something at the server level A2 Hosting needs to handle

Questions:

1. Has anyone dealt with this specific "Crux Runner" or "SC_" malware family?
   
2. How do I find what's re-creating the .g_ process?
   
3. Is this a server-level infection that only A2 Hosting can fix?

I've spent days on this. Any help appreciated.

Hi yall! I own a boarding & grooming dog salon. I need a website that’s really just the bare minimum: explaining our company and prices. We currently use wix and it’s very expensive. The fanciest thing about wix page is that there’s a place to email us directly from the website. Does it sound like it could be worth switching to wordpress?

In this wave of wp2shell, etc. What are you doing to keep it safe? Cloudflare? SOC? Miraculous plugins ? All the previous …?

I have been learning WordPress and building a good site for a few months now. I am thoroughly studying everything and I’m avoiding “vibe coding” or any other AI assisted stuff so I can ACTUALLY learn how to do this. My goal is to start as a WP freelancer then become good enough to hire people to automate tasks for me and turn it into a business (this is general plan for the next years I of course dont think I can achieve this in 3 months). Anyways I’ve seen a lot of negativity online of people being extremely pessimistic about offering to build a business a website. So pessimistic, in fact, that a part of me is starting to believe them. And since I have no real world experience to test this (I’m not good enough yet to offer my services) I don’t know if they are right or not. So this question is to the people who DO work in the industry. Someone can enter and make money from it right? It’s not dominated by big companies only right? I hope so. Thanks to anyone who answers in advance!

I'm clicking apply to any job i find on any platform , i have some experience in web development (im a 2nd year CSIT student btw)

and i got an opportunity/appointment for wordpress website management/seo role , they liked my resume seeing my previous experience , i intentionally had not kept the wordpress part in my resume and just mentioned web development , the thing is i have knowledge/experience about building websites with MERN stack which ofcourse is tougher than wordpress but i have never touched wordpress in my life and i need to pass the interview , i have some experience regarding SEO too as i made my portfolio rank 1 for keyword (my full name) search, i had used google search console for that , i had heavily used ai at that time , but i very well remember what the process is , the role is just to update/manage the wordpress website and monitor google analytics and search performance , i feel like i can easily handle the job if i got this , but the problem is i donot have enough time to learn all this shit , can experienced/knowledgeable personnels help this fresher land the opportunity , they had listed this role as junior level , the interview/appointment is sunday morning and i have another appointment tomorrow for a different role so i dont have much time to prepare , can you guys tell me what to look at before the interview .

Hi everyone,I run wpmade.design, a gallery where I showcase beautiful websites built with WordPress. I am currently working on a redesign to add more functionality to my platform.

But sometimes I feel unsure. It seems like everyone is moving to AI website builders or modern frameworks like Astro.

Is it still worth putting effort into WordPress and page builders today? Will designers and developers keep using them, or is the industry moving on?I would love to hear your thoughts!

Hey everyone,

There's still a persistent stereotype in 2026 that WordPress and visual page builders don't have any place in the web, and only produce bloated, cookie-cutter templates from 2015.

I run wpmade.design, a curated showcase dedicated to proving that wrong by highlighting stunning, high-performing websites built specifically on WordPress (using Gutenberg/blocks, Bricks, Elementor, Breakdance, Oxygen, etc.).

I’m always on the hunt to feature standout projects, but finding modern, high-tier visual work built on WP often feels like searching for a needle in a haystack compared to platforms like Framer or Webflow.

Where do you usually discover well-crafted WordPress sites?

• Any specific galleries, Twitter/X accounts, or Discord communities you follow?
• Are there design studios/freelancers pushing the envelope with WP page builders that you love?
• If you've built one yourself recently that looks clean and performs well, feel free to drop the link!

Hello Everyone,

I am facing a strange issue on one of my envirnoments with the Site Lockdown plug-in. The admin-ajax.php causes an internal server error (500) while executing the file scanner.

Would you have some idea about this? Rights look ok, server settings as well, the plug-in also seems to be installed correctly.

The access logs look well, timeouts have been increased, so I am unsure if I should modify code in order to get this right or do you have some concrete idea how to fix this?

Thanks and best regards,

T.

I wrote a long article and it's incredibly glitchy on phone btw.

Major focus is to reduce LCP metric (Mobile) to below 2.5s.
Recently added NitroPack but it is not helping much.
So what are the suggestions on this?

WordCamp US starts tomorrow, and WordPress 7.1 will be released during the event.

But honestly, I’m more interested in Monday’s Showcase Day.

Real WordPress projects, real implementations, and hopefully some honest discussion about what happens when these sites actually grow.

I find that much more useful than another feature list.

There is always discussion around WordPress:

Is it outdated?
Will AI replace it?
Do themes still make sense?
Should serious projects always be custom?

But real projects usually give much better answers.

What did the team build?
What had to be customized?
What became difficult at scale?
What broke?
What would they do differently?
How are they maintaining it years later?

After working with WordPress for a long time, those are the stories I learn the most from.

New features are useful, of course. But seeing what people are actually running in production tells you much more about where WordPress is today.

Anyone else following Showcase Day? What type of real-world WordPress case study would you actually like to see?

I develop and maintain infrastructure for thousands of agencies for a living and honestly, the last few months have been draining.

Since roughly April, about half of our dev time has gone into security. Hardening, audits, reviewing input handling, capability checks, dependencies. Rinse and repeat, because of new AI-driven attacks we need to stay ahead of.

Maybe an unpopular opinion, but I don’t think this will last. The same AI models they use to find holes in our code are the ones we turbocharged and use to check our code before we release it. They scan, we scan first. There are only so many types of security bugs, and once a codebase has been tested and fixed like this for a few months, there’s not much left to find.

And when that happens, I think open source will come out of this in really good shape. Code that has been attacked from every direction and survived is code you can actually trust.

My bet is that within a few months, “it’s open source” becomes a reason to trust software instead of a reason to worry, and people will realize it.

Right now though, it’s just tiring.

Anyone else? Or is it just me?

Is WP Script the best solution, or are there any other insights?

First time creating a WordPress site. I am a florist, and I need to create a place where customers can enter an address that they want their flower arrangement delivered to. I also want it to tell them how much it will cost to deliver to the address they entered. I want custom tiers: for example, 1-5 miles from my business would cost $3, 5-10 miles would be $8, 10-15 miles would be $14, 15-20 miles would be $21, and so on. Does it need to be a distance-based shipping rate plugin, or could it be done on a form plugin? TIA!

Hey gang,

I've built a website using the Nostalgia WordPress theme. Link is below:
https://quanticalabs.com/wp_themes/nostalgia/portfolio/

I like most of what the theme has to offer, but my question is this: Is there a way to easily replace or override the lightbox gallery function with another? The one that is currently built into the theme is called Fancybox, and is utilized for image viewing in the Portfolio section. I'd like to deactive or replace it somehow with another type (Simple Lightbox, Firelight lightbox, etc.)

Would this require some hardcore PHP editing or are there tools out there (plugins, etc.) that would assist?

Thanks a bunch for your time,

_C

I'm brand new to building a website. I need one for my business. I was under the impression I could learn Wordpress and use that. I was under the impression it was somehow user friendly.

I'm accustomed to learning curves when using new software. But Wordpress is so convoluted. I can't figure out where anything is. I start typing some text into the page and then preview it and it's not there on my site. But there's a ton of other stuff I didn't add which is there. All from the theme I guess. I can't figure out how to edit the theme or the text or get anything to work the way I want it to.

I've spent days and I just can't figure out this block editor thing. It's driving me insane.

Any thoughts or advice?
How to make this work?
More training needed?
Or is it just really bad for beginners?

Why can't Wordpress just be a WYSIWYG editor that lets us drag and drop items onto the page and then edit them however we want? That's what I thought it was 🙁

Hola amigos.

Llevo días que el icono del sitio no se visualiza.

Creen que el plugin LiteSpeed Cache sea el causante? Tenía un plugin distinto para cache, luego instale este.

Saludos.