I wanted to use my local AI coding tool to modify pages on a WordPress site, but I couldn't find a way to get the pages exposed to my AI coding tool.

I wrote a tool to download posts and pages to a local file system and push it back up. This gives me AI coding tool full access to modify the content - which is really useful when I want AI to generate full pages or make content modifications across multiple pages.

Does something like this exist already or would anyone find this useful?

https://github.com/jonmchan/wp-local-sync

For those using WebP on WordPress sites, what are you using to convert your JPEG/PNG images before uploading them to the Media Library? Or are you converting post upload via code or plugin?

On one website there was 1000 jpegs which I used custom code to convert to Webp in batches.

What I want to know, is there an easy way to convert them beforehand?

Any particular desktop apps, websites or batch converters you recommend that keep the quality good while reducing file size?

Just looking for a simple workflow that keeps the site lightweight.

Curious what everyone is using for website images nowadays - JPEG, AVIF or WebP?

When making websites on Wordpress I’ve generally stuck with WebP (converting) because it seems like a good balance between image quality and file size, and I’ve found it helps with PageSpeed compared with standard JPEGs.

Just wondering if AVIF has now become the better option, or whether WebP is still the safer/default choice for WordPress and WooCommerce sites.

Would be good to hear what others are using in practice, especially anyone focused on Core Web Vitals and keeping sites lightweight.

So I want opinions...

I have a client that puts so much stress in my life but he has never been late and never cheapens out, 10+ years.

He has 9 sites, separate from each other.

It was late at night so only the WordPress files were uploaded. He didn't want the MySQL database or installation to occur until the morning...I said whatever...

No messages the next day, 11 days later he comes and wants to continue.

For those 11-12 days later...the files sat there, no installing.

So we went to see the sites and 3 of them had WordPress installed...I went to see the MySQL databases and none existed. I looked in the wp-config.php and the MySQL databases were some external databases on a .de (Germany) site.

He thinks some evil bot attacked his 3 sites and the other 6 are going to be attacked.

So in your opinion, did an evil bot or a human setup WordPress in those 3 sites. Please give a quick reasoning for your answer.

This is the client that calls me at 3 in the morning if there are 3 spam comments, again, evil bots trying to hack his sites and I am sure his microwave. He is somewhere in Europe so 3am is like 8/9/10am for him.

Hi, I’m having an issue with WooCommerce / WooPayments.

On My Account → Payment methods, saved cards work correctly. I can save a test card during checkout, and it then appears in the customer account.

However, when I click “Add payment method”, the page
/my-account/add-payment-method/
is completely blank. No card form appears.

What I’ve already checked:

• WooCommerce: 11.0.1
• WooPayments: 11.0.1
• Card payments are enabled
• “Enable payments via saved cards” is enabled
• Saving a card during checkout works
• The saved card then appears correctly under My Account → Payment methods
• The add-payment-method endpoint is correctly configured in WooCommerce → Settings → Advanced
• I cleared and temporarily disabled my cache plugin: no change
• I temporarily disabled my “Customize My Account” plugin: no change

So the issue seems limited to the Add Payment Method endpoint/form itself.

Has anyone seen this with WooPayments 11.0.1?
Is there anything specific I should check in the browser console/network tab, or is this a known WooPayments issue?

Thanks!

Hey guys, I’m fairly new to WordPress at least getting along with it well enough to run my own site.

I’m offering a service on my site so I added it under products and I enabled to make an offer button for people who’s budget maybe didn’t meet my asking price because I’m OK with working with people for this specific service when it comes to price.

I enabled to make an offer button but when my friend and I tested it both him and I submitted an offer, but it didn’t go to my email and I don’t see any place where I can see the offers that I’ve come in.

I’m using the Astra theme, but as far as I can tell in searching online, the only way for this button to be of any use is to actually purchase a plug-in.

If this is the case and why even have the button in the first place before downloading a plug-in at all?

Would love any guidance on this matter.

Thanks!

Something occurred to me recently that feels embarrassingly obvious in hindsight.

A lot of WordPress sites now see requests from things like GPTBot, OAI-SearchBot, ClaudeBot or PerplexityBot. We recognize the name, maybe see it in a security log or access log, and mentally translate that into “OpenAI, Anthropic or Perplexity visited my site.”

But that is not what the log actually proves. What it proves is that somebody sent a request containing that User-Agent. Anyone can send User-Agent: GPTBot.

This isn't even a new problem. Fake Googlebot traffic has existed for years, which is why Google provides ways to verify whether something claiming to be Googlebot actually originates from Google. AI crawlers seem to have brought the same old problem back in a new form.

On WordPress this can become more than just a misleading log entry. Imagine you block generic scrapers but allow known AI crawlers, exclude certain bots from rate limiting, bypass page cache for specific crawlers, allow some crawlers access to content that ordinary scraping tools should not receive, or simply analyze AI crawler activity to see which providers are accessing which URLs.

If the identity behind those rules is based only on the User-Agent, a scraper may only need to call itself GPTBot or ClaudeBot to receive the same treatment.

The consequences can range from merely annoying to fairly significant. A fake bot can scrape content while masquerading as a crawler you intentionally allow. It can consume PHP, database and server resources that you thought were being used by a legitimate provider. It can also distort your WordPress, security or access-log analysis, so a report saying “GPTBot requested 500 pages” may not mean OpenAI requested those pages at all.

If your site grants known AI crawlers different access than unknown scrapers, a spoofed identity can potentially turn that trust decision against you.

Even people who simply block all AI bots have an interesting problem here. If you see 1,000 “GPTBot” requests and block them all, how many were actually OpenAI? Maybe all of them. Maybe none of them. Without verification, you don't know.

That seems like an important distinction: “This request claims to be GPTBot” is not the same statement as “This request has been verified as coming from GPTBot.”

Security plugins are very good at blocking traffic, rate limiting it and detecting suspicious behavior. But blocking is a policy decision. Verification is an identity question. I’m starting to think WordPress has mostly concentrated on the first question while barely discussing the second one for AI crawlers.

So I'm curious: when you see GPTBot, ClaudeBot, OAI-SearchBot or PerplexityBot in your WordPress or server logs, do you actually verify the identity, or have you basically been trusting the User-Agent?

Google's documentation on the underlying problem, for reference:
https://developers.google.com/search/docs/crawling-indexing/googlebot

Hi there, installed Wpmgr on my VPS and seems pretty cool to manage multiple sites.

I only need a way to generate monthly reports with all the activity done in a client site.

The built-in report feature seems for internal use, I’d like some reporting feature to generate a well formatted and “dumb” language monthly report for clients.

Curious about what you use for it!

Am on a personal plan. I want to remove this option from displaying when website opens. I use it for my business. How to do it?

Very non technical, reluctant site admin tried a couple times to update to 7.1 getting the following then nothing:

"Downloading update from https://downloads.wordpress.org/release/wordpress-7.1-no-content.zip…

Unpacking the update…"

Then It all just stops.

I've updated in the past (WP and plugins) without issue.

Any suggestions?

Thank you

Read more here- https://x.com/SybreWaaijer/status/2093382158349951136

same person who highlighted the recent issue with WPForms.

We need a system of shame for plugin developers who take features that were free and lock them away in the paid version. How you gonna "update" your plugin by making it worse? How desperate does that make you look that you can't innovate something that adds value so you feel you have no choice but to do a takebackskies. 🤮

Hey guys,

we are two devs who built a free & open source image optimization plugin (GPLv2): neoOptimize

• WP Plugin Directory: https://wordpress.org/plugins/neo-optimize/
• Code on GitHub: https://github.com/neo-wp/neowp-plugins

Most image resizing plugins downsize your original image files to some fixed size and you lose the original data forever. We wanted to keep the originals (similar to non-destructive editing).

So we built a small free/open-source plugin that tries to solve this by leaving your images as-is and copying a resized version into the cache folder. The image size is determined by the exact size the image is used on your site.

Need a simple way to communicate with WordPress editors? Attenta Admi Messages gives your team a dedicated place for internal messages inside the WordPress administration area. Start with the free version and expand your workflow when you need more advanced features.

👉 Install Attenta Admi Messages: https://wordpress.org/plugins/attenta-admi-messages/

updated PHP and WordPress versions yesterday, and now when I go to my website it's going to a standard WordPress holding page instead of my blog page. The settings in reading are all correct.

when I go to edit the page directly in WordPress it also lists the correct URL. for some reason WordPress is deciding to send users to this home.html file instead of my page and I can't get my head around why.

Hey guys! I’m using WordPress and want to make my product images clickable with my Amazon affiliate links. What’s the easiest way or best plugin to set this up? Thanks!

Patchstack link - https://patchstack.com/articles/unauthenticated-php-object-injection-to-remote-code-execution-on-givewp/

I watched a video on youtube by darrel wilson about integrating claude and wordpress to design websites (using elementor as the page builder which is the builder I am familiar with ), and he suggested his own theme (solace) in this workflow, I usually work with astra or blocksy and I am not really familiar with his theme, did any of you guys use it before and have live websites using this theme ?

I'm using this library so that users of my plugin can install extensions that are hosted in the plugins repo with a couple clicks. However, it is unreliable: it works in 99% of the cases but it does not work on some environments. In some i get the error: "The plugin does not have a valid header" and I just cannot debug this.

Is there a modern successor to the TGM Plugin Activation library?

RSVPMaker is a free and flexible events and email marketing plugin. Use it to post events on your website, independent of any external service, promote them to your email list, sign people up and collect money.

I use RSVPMaker for my own projects but would like to see more website owners and consultants take advantage of it. I'm hosting a a couple of online training sessions and am also sharing a video demo below.

• Do more with RSVPMaker, event registration and email marketing for WordPress Saturday August 29, 2026 12:30 PM EDT
• Do more with RSVPMaker, event registration and email marketing for WordPress Wednesday September 2, 2026 7:00 PM EDT

Short tutorial https://youtu.be/NWHtaODbbP0