Read more here- https://x.com/SybreWaaijer/status/2093382158349951136

same person who highlighted the recent issue with WPForms.

We need a system of shame for plugin developers who take features that were free and lock them away in the paid version. How you gonna "update" your plugin by making it worse? How desperate does that make you look that you can't innovate something that adds value so you feel you have no choice but to do a takebackskies. 🤮

Hey guys,

we are two devs who built a free & open source image optimization plugin (GPLv2): neoOptimize

• WP Plugin Directory: https://wordpress.org/plugins/neo-optimize/
• Code on GitHub: https://github.com/neo-wp/neowp-plugins

Most image resizing plugins downsize your original image files to some fixed size and you lose the original data forever. We wanted to keep the originals (similar to non-destructive editing).

So we built a small free/open-source plugin that tries to solve this by leaving your images as-is and copying a resized version into the cache folder. The image size is determined by the exact size the image is used on your site.

Need a simple way to communicate with WordPress editors? Attenta Admi Messages gives your team a dedicated place for internal messages inside the WordPress administration area. Start with the free version and expand your workflow when you need more advanced features.

👉 Install Attenta Admi Messages: https://wordpress.org/plugins/attenta-admi-messages/

updated PHP and WordPress versions yesterday, and now when I go to my website it's going to a standard WordPress holding page instead of my blog page. The settings in reading are all correct.

when I go to edit the page directly in WordPress it also lists the correct URL. for some reason WordPress is deciding to send users to this home.html file instead of my page and I can't get my head around why.

Hey guys! I’m using WordPress and want to make my product images clickable with my Amazon affiliate links. What’s the easiest way or best plugin to set this up? Thanks!

Patchstack link - https://patchstack.com/articles/unauthenticated-php-object-injection-to-remote-code-execution-on-givewp/

I watched a video on youtube by darrel wilson about integrating claude and wordpress to design websites (using elementor as the page builder which is the builder I am familiar with ), and he suggested his own theme (solace) in this workflow, I usually work with astra or blocksy and I am not really familiar with his theme, did any of you guys use it before and have live websites using this theme ?

I'm using this library so that users of my plugin can install extensions that are hosted in the plugins repo with a couple clicks. However, it is unreliable: it works in 99% of the cases but it does not work on some environments. In some i get the error: "The plugin does not have a valid header" and I just cannot debug this.

Is there a modern successor to the TGM Plugin Activation library?

RSVPMaker is a free and flexible events and email marketing plugin. Use it to post events on your website, independent of any external service, promote them to your email list, sign people up and collect money.

I use RSVPMaker for my own projects but would like to see more website owners and consultants take advantage of it. I'm hosting a a couple of online training sessions and am also sharing a video demo below.

• Do more with RSVPMaker, event registration and email marketing for WordPress Saturday August 29, 2026 12:30 PM EDT
• Do more with RSVPMaker, event registration and email marketing for WordPress Wednesday September 2, 2026 7:00 PM EDT

Short tutorial https://youtu.be/NWHtaODbbP0

I manage 100's of WP sites and I've had a few dozen Wordfence reports today from thousands of Amsterdam and Bulgarian IPs just hammering my sites. Anyone else experiencing this today?

Hi,

I found out my webhosting space is flooded with malware. I removed it from one site but after an hour it was back, probably from one of the other sites. I remove the files with my FTP-client WinSCP but it is sooooo slooooowwww.... I am working on it all day already.

Is there a way to do this faster? I mean, should I be able to login to the server directly, I could do a del *.* or not?

EDIT: support from my webhost has wiped the entire hosting package. I restored the site and updated WP + all plugns and installed iThemes for security. Now fingers crossed!!

Hi, 19F here.

So the thing is I am a CS major and for some time, I have been practicing and making websites on wordpress with different builders ( Elementor etc ) for a friend of my brother. He is basically guiding me through the process. And he makes decent money.

Recently, I needed some money for some reasons so I am thinking, why not make a gig on Fiverr and Upwork?

I can't do anything toooo fancy like some custom retro website or some very fancy animation, but some basic to almost mid website I can make.

Do any of you guys have some suggestions on how to start freelancing.

Thanks.

P.S. I also know HTML and CSS and some basic troubleshooting will learn JS and some frameworks as time passes to, so I can properly be a web designer.

I have a bunch of sites inundated by bots. I'll have a site in the US that all of a sudden uses all my server memory at a time where 99% of the country is asleep. I've used some of the security plug-ins, but have not found them to be very helpful in terms of blocking all these malicious bots. Has anybody else found something that will actually block all these attacks??

Hi everyone, I’m running into a baffling issue while building a custom post ticker shortcode.

My WP_Query successfully fetches the latest posts and grabs their titles and permalinks perfectly. However, has_post_thumbnail() is returning false for every single post in the loop, forcing my code to output my text fallback instead of the images.

I know for a fact that all the post have feature images

Here is my code (running via Code Snippets plugin):

add_action( 'after_setup_theme', function() {

add_theme_support( 'post-thumbnails' );

add_image_size( 'blog-card', 600, 400, true );

} );

add_shortcode('custom_post_ticker', 'build_smooth_ticker'); 1

function build_smooth_ticker() {

$query = new WP_Query(array(

'post_type' => 'post',

'posts_per_page' => 10,

'post_status' => 'publish'

));

if (!$query->have_posts()) return '';

$items = '';

while ($query->have_posts()) {

$query->the_post();

$current_id = get_the_ID();

// TEMPORARY DEBUG LINE

$items .= '<!-- ID: ' . $current_id . ' | Has thumb: ' . (has_post_thumbnail($current_id) ? 'YES' : 'NO') . ' -->';

if (has_post_thumbnail($current_id)) { $content = get_the_post_thumbnail($current_id, 'blog-card'); } else {

// This fallback always triggers

$content = '<div style="color: white; font-weight: bold; padding: 0 20px; line-height: 180px;">' . get_the_title() . '</div>'; }

$items .= '<div class="ticker-item"><a href="' . get\_permalink() . '">' . $content . '</a></div>';

}

wp_reset_postdata();

return '<div class="ticker-wrap"><div class="ticker-track">' . $items . $items . '</div></div>'; }

hey there I'm not really sure how to go about this, I'm reaching out for a friend he is running a website for a hobby he likes to post his art he makes and other various topics in a community based forum kidna thing he has setup, I'm wondering if i could get some advice to help him get it out there more, he currently posts to his youtube which gets a bit of traction that satifies him, one big problem i noticed is he just gets a bunch of fake accounts signing up they dont last long because of their malicous attempts being blocked is there a way to weed the fake accounts out that are signed up also? would love any advice like i said before its just a hobby he enjoys doing it for fun keeps him happy dont really know where else i can reach out.

Hello,

I'm struggling to remove a blank space after the last block on the home page of this site. I have tried to adjust the padding in the site editor and on the block itself. Both are set to zero. I looked for hidden paragraphs and could not find any. This is a Wordpress site hosted through BlueHost.

Any help would be greatly appreciated!!!!

Hi everyone,

I'm trying to understand a strange issue affecting a client's WordPress website:

https://sarltib.fr/

This client is currently in a dispute with their former web agency. I'm supposed to take over the website, but I don't have access to the hosting, WordPress admin, FTP or database yet.

While we're waiting to recover everything from the former provider, this new issue suddenly appeared on the website.

When accessing the site, I get the following error:

“Server IP address could not be found for cloudflare-check.net”

The strange part is that the actual WordPress website is still there and seems to load normally in the background.

In Chrome, when I inspect the page, I can see a full-screen iframe with the title “Security check” displayed on top of the website. If I manually delete this iframe from the DOM using Chrome DevTools, the normal website immediately appears behind it.

In Firefox, I only see the cloudflare-check.net error page.

The WordPress login page at /wp-admin is also still accessible.

Since I don't have access to the website yet, I'm mainly trying to identify what we're dealing with so I can advise the client while the current provider still has control of the hosting.

Has anyone seen this kind of behavior before?

In particular:

• Could this simply be a DNS configuration issue?
• Does this look like a compromised WordPress installation / malicious iframe injection?
• Is cloudflare-check.net actually related to the legitimate Cloudflare service, or is the name just being used to make the page look legitimate?

Thanks for any help or feedback!

https://preview.redd.it/unnt5cwx8xlh1.png?width=2544&format=png&auto=webp&s=56e1d4f3d78871dda759a65e5e4e797a87e53d05

Basically a notes app that stores data by modifying PHP on every save. So no database at all

Sharing a free, open-source project that works well with WordPress

halloween.js is a zero-dependency library that adds Halloween-themed ambient effects to a page (blinking eyes, flying witches, a dropping spider, a rising tombstone, corner spider webs).

No plugin needed, just one script tag pasted into the Theme Editor's header.php (or any "Insert Headers and Footers" type plugin if you'd rather not touch theme files directly), plus one CSS class on <body> to turn it on. Styles are injected automatically, no separate CSS file, no build step.

Under 10 KB gzipped, MIT licensed, source on GitHub.

Live demo + WP instructions: https://halloween.js.org/
GitHub: https://github.com/rogulia/halloween.js