I use a 4K monitor, so screenshots for my WordPress posts are often much larger than I need.

My usual workflow was:

- Resize the screenshot

- Convert it to WebP

- Upload it to WordPress

- Add alt text and insert it into the post

Some screenshot tools can handle the resizing and conversion, but uploading and inserting the image is still another step.

That’s why I built **KXNotes Image Paste Optimizer**.

Now I can copy a screenshot, press **Ctrl+V** in Gutenberg, and the plugin automatically:

- Resizes and converts it to WebP

- Generates a readable filename and alt text

- Uploads and inserts it at the cursor

Everything runs on your own WordPress server—no cloud service, external AI API, or telemetry.

https://wordpress.org/plugins/kxnotes-image-paste-optimizer/

Would this fit your content workflow? What should I improve next?

I have been trying to build a website using Wordpress since May. I am not a coder and I not especially technical but I think I am reasonably adept at working most things out. I spent many years on Squarespace (before they borked it) and never had problems.

I started using the Wordpress Management in my CPanel (see pic 1) but after a while of building it all felt clunky. So I deleted everything and went back to scratch, downloading the Wordpress App through the Applications (see pic 2).

This was going well until early this week when, after an auto update, I was suddenly having problems getting a JSON response. I went through all the fixes and couldn't get it sorted. It also deleted a bunch of template and patterns I had created.

So I again deleted EVERYTHING (I saved all my written content into a Word doc) - uninstalling everything, detatching, you name it. Essentially created a new admin, the works. Started with the basics of Twenty-Twenty Five and it seemed to be OK, but I am nervous about uploading any new themes or plugins (which I will need to do).

I have a new theme with associated plugins (paid for by my bro who uses Wordpress - lucky sis!) but I don't know whether to start over using the first method or the second method.

What I really want is to be able to design some graphics and use them on blank templates, so that each page of my site is similar but not the same - main content layout the same or similar, dropdown menu the same, footer the same, but with some graphic variations. I truly did not think it would be this difficult. I have even used blocks wherever possible.

My future business has no shop, no major photograph stuff (so not gallery type or image heavy), no blogs with comments. Just a bunch of pages with different services and explanations for my freelance future.

I'm also worried I'll find myself back with the JSON response issue which I never figured out how to fix.

If anyone has advice or is willing to work through this with me, I'll be grateful. I don't want to go to Wix Studio or similar - the cost is prohibitive considering my pages will all be mostly static and without online store features or sales. I knew Wordpress was a steep learning curve but after four months, it is starting to feel harder than it needs to be.

Thanks in advance, Redditors.

I've been building WordPress plugins since 2014 and I've used WooCommerce a lot.

I got really tired of paying $279 per year for the WooCommerce Subscriptions plugin, so I built my own plugin. I also really didn't like how buggy WooCommerce's PayPal & Stripe plugins where, so I built those into the plugin as well.

I decided to build this plugin to give back to the open-source community, so it's 100% free. No paid version, no upselling, no collecting emails or anything like that. Support is also free.

It's on the WordPress Repository: Accept PayPal & Stripe with Subscriptions for WooCommerce

(I added Promo to my post title, but I am not actually promoting anything paid, it's all free)

You get best SEO and Speed for NextJS based websites and also you can host it on your VPS, Vercel or CloudFlare

My recommendation is Vercel since it auto handle several things like caching, builds and more.

Another reason for liking NextJS is that AI Coding Agents love it and can do the changes directly.

I’m not saying WordPress has zero use cases (legacy sites, pure content farms, non-technical clients who insist on it). But if you’re starting fresh and you have even basic coding ability? Choosing WordPress is just masochism at this point.

Next.js isn’t perfect either, but it’s not even close to the same tier of pain.

Obviously after OpenAI model found the WP2Shell Remote Code Execution 3 weeks ago - everybody noticed. So other AI and security companies including Anthropic, PWNai and Aikido wanted to prove they can too 🙂

7.0.3 release post: https://wordpress.org/news/2026/08/wordpress-7-0-3-release/

Patchstack security advisory: https://patchstack.com/articles/wordpress-7-0-3-released-12-vulnerabilities-found-and-fixed/

Recently launched a new WordPress site hosted on Pantheon and I'm having issues with each of the popular webp plugins:

1. Converter for Media - Stores the webp files in outside of wp-content/upload, which is where Pantheon expects all site files to be stored.
2. EWWW Image Optimizer - This plugin supposedly stores all files in wp-content/upload, but when I run the bulk convert and then refresh the page, all the converted images disappear.
3. ShortPixel - Stores backups of the original files outside wp-content/uploads (in ShortpixelBackups/).

Hoping there is a trick to using one of these plugins or another plugin that is compatible with Pantheon.

EDIT: I'm a dummy. The EWWW Image Optimizer plugin is working, I just didn't realize that when you run the bulk optimize, that after it runs it shows you a list of images which you have to then click "Start Optimizing" to complete the process. I thought it was already done optimizing.

WordPress took a beating this past month. The newest AI models are finding and writing code to exploit vulnerabilities that sat hidden for years.

Nobody caught them until these latest model releases. So now we are dealing with the fallout...

WordPress 7.0.3 officially dropped today, August 6, as a new security release.

The recent security reality.
The WordPress.org core team forced a background auto-update for 7.0.2 in July to handle active exploits.

What was patched in July?
- Patched one critical-severity flaw.
- Patched one high-severity flaw.

Version 7.0.3 follows right on its heels. Given the current wave of AI-driven attacks, you want to apply this patch immediately.

Those 7.0 branch fixes?
The 7.0 branch was a significant upgrade, to say the least. It dropped native AI engine frameworks and fixed server-side memory leaks that previously choked websites.

And version 7.0.1 knocked out 31 bugs in the block editor, fixed media library folder-view errors, and cleaned up display issues in the new admin dashboard.

I think, all told, the core team resolved over 700 bugs across core and Gutenberg. So for those folks who say the WordPress dev team has fallen asleep on the job, well, I'd say more like three Red Bulls a day...

Do not wait on this. Log into your dashboard, run a backup, and apply the 7.0.3 update.

https://preview.redd.it/y3wg4dslfthh1.png?width=575&format=png&auto=webp&s=b11a3495980f61d30753e969ebc9efed0c79f406

I've seen other sites when posting on twitter they get a social media card with a thumbnail. While my links dont. they are posted as links

We manage some content-heavy WordPress sites (news portals, big blogs, 10k+ posts) and hit a wall where no amount of page or object caching helped. Turned out the bottlenecks were baked into how WordPress stores data, not something a cache layer could paper over. Sharing what actually moved the needle in case it saves someone a bad week.

Three things were doing most of the damage:

Taxonomy queries. On a site with 50k posts and ~10 tags each, wp_term_relationships balloons to half a million rows. Filtering by multiple taxonomies means expensive JOINs, and without the right indexes MySQL just falls back to full table scans. A composite index on term_taxonomy_id and object_id took some of these from seconds to milliseconds.

Post meta lookups. wp_postmeta gets brutal at scale since every custom field is its own row. Anything that filters or sorts by meta (featured status, view counts, custom dates) JOINs that table repeatedly. Indexing meta_key with a prefixed meta_value (191 chars for utf8mb4) helped a lot. For the really hot fields we ended up denormalizing into a small custom table kept in sync via save_post.

Deep pagination. WordPress uses OFFSET, so page 500 makes MySQL fetch and throw away 10,000 rows before it returns anything. Crawlers hitting deep archives were quietly hammering the DB. Switching to cursor-based pagination with date_query comparisons kept query time flat no matter how deep the page.

Query Monitor on staging plus EXPLAIN to confirm the indexes were actually being used was the workflow that tied it all together.

Happy to share the SQL and WP_Query snippets if anyone wants them, I wrote the whole thing up with code somewhere. Curious what’s worked for others too, especially anyone who’s gone the custom-table route.

I want to learn Python as part of my professional development, but day to day I'm mostly working with WordPress, React, and PHP.

For those of you who use Python alongside WordPress, what are you actually using it for? Was it worth adding to your stack? What's your hosting setup like?

I can think of things like automation, AI integrations, data processing, scraping, image manipulation, or background jobs, but PHP already handles everything I need on the web side. That's what has me wondering if there's a practical niche I'm missing.

If you've built a project that combined WordPress and Python, I'd love to hear the use case, how the two communicated (REST API, webhooks, message queue, etc.), and whether you'd do it the same way again.

Part of me thinks, "PHP already does everything I need—why learn a second backend language?" I'm curious if anyone has found Python genuinely expanded what they could build rather than just adding another tool to maintain.

I can't read anything about this version on WordPress.org

Hoi allemaal,

Ik loop al een tijd tegen het issue aan dat opmaak niet zichtbaar is op mijn gepubliceerde website. In de customizer kan ik alles toevoegen, veranderen en aanpassen. Na het opslaan en publiceren lijkt alle opmaak aan kleuren en vormen verloren te gaan. Ook zaken zoals margins worden niet aangepast in de live weergave.

Bijvoorbeeld het menu, ik heb een hoofdmenu aangemaakt, met items en subitems. Dit past die dan allemaal aan, maar kleuren, lettertype of andere opmaak neemt die niet over. Ook het toevoegen van een knop op pagina pakt die wel, maar een vierkant of ronde knop of welke kleur dan weer niet. Daarom betwijfel ik of dit een cache issue is.

Ik ben inmiddels van scratch begonnen, alle thema's en plugins verwijdert (ook uit de prullenbak) en instellingen nagelopen... Ben nu opnieuw begonnen met een nieuw thema en nieuwe plugins en heb opnieuw dit issue.

Hebben jullie dit ook wel eens gehad? Of hebben jullie hopelijk de oplossing? Ik hoop het!

I was told i need to increase my WordPress Memory Limit

its currently set to 256 MB.

• 512 MB as the recommended minimum for your current setup.
• 768 MB for the best performance

not sure must this be done in wordpress by editing a file (if yes can you guide me on this)

or at my hosting provider

any advice would be appretiated

​Hi everyone,

​I'm managing 3 WordPress sites built with Elementor, using Yoast SEO for meta titles and descriptions.

​On all subpages, the SEO title appears exactly as I set it in the Yoast meta box. However, on the homepage of all 3 sites, it automatically prepends the Site Name with a colon, like this:

[Site Name]: [My Custom Yoast Title]

​For example, if my Site Name in WordPress General Settings is "Noviber", the homepage title renders as Noviber: My Custom Title instead of just My Custom Title.

​I want the homepage title to display only the custom text I entered in Yoast, without the Site Name: prefix.

​Is this controlled in Yoast Search Appearance settings, theme header settings, or somewhere else? How can I fix this?

​Thanks in advance!

If you've moved to Oxygen 6, here's a failure mode that cost me a week and isn't in the docs anywhere.

Oxygen 6 is a full rewrite on the Breakdance engine. Your page design lives in the _oxygen_data post meta as JSON, not in template files. Two separate things read that JSON: the PHP renderer that serves the page, and the builder's client-side schema. The builder is much stricter.

So you get pages that serve perfectly to visitors, look right in every screenshot, and refuse to open for editing with Validation Error: IO-TS decoding failed. No line number, no field name.

In my case, every numeric property is stored as {number, unit, style}. The style key is what actually compiles, so a raw clamp() with unit: "" renders fine. But unit is validated against an enum, and "" isn't in it. One value. And because selectors are shared site-wide, that single bad entry locked the builder on every page at once.

How to find it: walk your _oxygen_data JSON for any unit: "". The only place that's legitimate is line_height, which genuinely is unitless. Anything else is a builder failure waiting to happen.

Two more in the same family, if you're debugging blind:

- .breakdance .woocommerce SELECTOR matches nothing. Both classes sit on <body>, so it's never a descendant. Style WooCommerce through the .bde-* wrappers instead — and verify with element.matches() rather than trusting that the rule is in the file.

- WrapperLink outputs href="#". Your classes still apply, so it looks perfect and every link is dead. Use ContainerLink.

The general lesson beyond Oxygen: with any builder that keeps state in the database, "the front end renders" isn't proof the page is intact. Verify against the editor.

I've been keeping notes on this stuff while building a client site — happy to share if it'd help anyone.

Hi

I'm using WordPress 6.4.3 and need to disable API logins because I'm getting many failed login attempts even though I've limited access to /wp-admin/ to specific IP addresses in htaccess.

I haven't created Application Passwords.

I have the Disable WP REST API plugin enabled.

When I go to my-website/wp-json/wp/v2/users using Google chrome, I get the message:

"{"code":"rest_login_required","message":"REST API restricted to authenticated users.","data":{"status":401}}"

I have the Limit Login Attemps plugin installed.

I tried sending a request from Step 3:

https://ai-tool-hunter.com/wordpress-rest-api-python-tutorial-for-beginners-what-actually-works-and-what-wastes-your/

(with random login/password data)

I get a 401 status, but the Limit Login Attempts check doesn't increment the failed login attempt counter.

Do you have a Python script I can use to check if the API login is not working?

I'm trying this code

import wordpress

site_url = "MY_URL"

username = "user1"

password = "your_application_password"

wp = wordpress.Connect(site_url, username, password)

print(wp)

I get this answer

> & "C:\Program Files\Python314\python.exe" c:/MyStuff/Python/wordpress/r2.py

2026-08-06 17:52:55,123 - ERROR - Authentication failed: {"code":"rest_login_required","message":"REST API restricted to authenticated users.","data":{"status":401}}

Traceback (most recent call last):

File "c:\MyStuff\Python\wordpress\r2.py", line 6, in <module>

wp = wordpress.Connect(site_url, username, password)

File "C:\Users\Adam\AppData\Roaming\Python\Python314\site-packages\wordpress\wordpress.py", line 140, in __init__

raise Exception("Authentication failed")

Exception: Authentication failed

PS C:\Program Files\Microsoft VS Code> ^C

PS C:\Program Files\Microsoft VS Code>

Let's say theoretically you have a dedicated server hosting 75 websites. 98% of those sites you built and are therefore "responsible" in case there are security patches.

2% of the sites used another vendor and have no ongoing relationship beyond paying for hosting.

If one of those sites has plugins with vulnerabilities how should I handle the situation? I can't just update the plugins on my own because some require new licensing.

If I leave them as-is and they get hacked, it could effect my other clients. But I can't force them to pay me to update their site - how do you guys handle this?

With other hosting set ups, each WP instance is isolated so it doesn't really matter if they're hacked (not my problem) but with everyone on the same server I worry about attacks (DDOS etc.) on this one site effecting all the others.

For anyone who's on Hostinger and using WP Umbrella (and possibly other 3rd party services).

Yesterday evening, Hostinger automatically turned on their CDN on all of my Hostinger-based sites. Following that, WP Umbrella had problems syncing, was giving false 503 alerts and showing other issues. After an hour+ of troubleshooting, I tracked the root cause back to Hostinger's CDN. After disabling it, WP Umbrella is running fine again.

I'll be reporting this to both Hostinger and WP Umbrella, but wanted to give the community a heads up here, as well.

Hello,

I've had a Wordpress website for a couple of years now. I created it using Elementor and the Astra template. A couple of months ago, I opted to update Astra on my Wordpress dashboard and ever since then there's been an issue on my website when viewed on a mobile phone that I can't seem to resolve. The issue does not appear in the mobile view of the site editor interface - only on an actual mobile phone.

In one container, text that had appeared below an image now starts on the image itself. This happens in the case of two images. I've checked it on several different phones and browsers, but the same issue is always there. I've tried a few solutions suggested by online searches, but nothing has worked.

Has anyone had similar issues since updating Astra? If so, how have people resolved the issue?

Thanks for any help you may be able to offer.

Just made-over my entire website with claude code thanks to this thing. Genuinely crazy.