That sentence probably just caused several people to fall asleep or keep scrolling, but hear me out.

I’ve spent a pretty stupid amount of my career around CMSs, DXPs, Drupal, WordPress, headless platforms, agencies, and all the other ways we’ve invented to describe putting content on the internet.

And I realized there really wasn’t a weekly show I wanted to listen to that just covered what actually happened in this industry and why any of it matters.

So I decided to make it.

The first episode is about something I noticed happening across several announcements this week:

WordPress shipped 7.1.
Storyblok plugged into Claude.
Salesforce expanded Headless 360.
Optimizely is giving agents more control inside the CMS.
Contentful is talking about what happens when your website visitor isn’t human.

My takeaway is that we might be watching the CMS get an entirely new kind of user: AI agents. (I know... this might not be news to everyone here... but when I step out of my LinkedIn bubble... I realize there are a lot of people not following the signals)

And that could make structured content, APIs, permissions, metadata, and all the traditionally boring CMS stuff suddenly much more important.

Anyway.

I have no idea if this will become a thing.

But I’m going to try doing it every week, covering the interesting CMS/DXP news, having some opinions about it, making fun of our industry when deserved, and hopefully talking to some smart people along the way.

If that sounds interesting, here’s the first episode:

Apple: https://podcasts.apple.com/us/podcast/your-cms-has-a-new-user-and-its-not-human/id6804680238?i=1000785544658
Spotify: https://open.spotify.com/episode/1FG1olsK8yV0Q0y8LC0FqH?si=0UjSsl2MTgChoT1jRswNCg
YouTube: https://youtu.be/i5YJhz41EKY?si=wGUAStYgos1vH3hv

Would genuinely love feedback, especially from people who actually work in this world.

Including “your take is completely wrong.”

Honestly, that might make Episode 2 easier.

I'm newish with wp and having a somewhat pre setup ish theme is a must.

I'm selling one or two physical products with multiple digital subscriptions.

Thanks!

Hi. I am building a site and testing out booking plugins. BookingPress looks pretty good to me and very promising; it has a wonderful dashboard. However, before I commit to buying the BookingPress plugin. I would like to know how good their customer service is. Trustpilot reviews are mainly about the plugin. If possible, I would like to avoid customer service and my first preference is to ask AI for tech support. But in case I need to talk to a human being, I would like to know how their customer service is.

1. Have you contacted customer service?
   
2. Was there ever a need for you to contact customer service?
   
3. If yes, how was your experience?

I have been using a wordpress plugin to do a security audit of my wordpress-backed website. I am the sole administrator of this site.

One thing I find very strange is that it reports deactivated themes and plugins as problems.

I keep my list of active plugins small, but I've never given a second thought to keeping plugins or themes I no longer use. Am I missing something? Can a malicious actor find some way to use to exploit deactivated plugins or themes?

Every time a 40-page CIM lands in your inbox, the clock starts. But the harder problem isn't analyzing one deal, it's keeping context across the 3 to 10 active opportunities you're juggling at once. You forget where a conversation stalled, and a broker follows up before you remember which business they represent.

Spreadsheets hold up until around deal 30, then nothing ties together. Salesforce is powerful but not built for deal flow; you spend weeks customizing objects for a system that still doesn't know what a CIM or an LOI is.

Curious what people here are actually using. Have you made a general CRM work for M&A pipeline tracking, or found something more specialized? How do you keep CIMs, financials, and broker conversations organized across concurrent deals?

Bonjour,

J’utilise WordPress avec WooCommerce, Astra Free et Elementor Free.

Sur ma page Boutique, j’ai un très grand espace vide entre la bannière/titre « BOUTIQUE » et la liste des produits (voir capture).

J’aimerais simplement réduire cet espace, mais je ne trouve aucun réglage permettant de le faire dans Astra > Personnaliser > WooCommerce > Catalogue de produits.

Est-ce qu’il existe un réglage que j’ai raté dans la version gratuite d’Astra ?

Je précise que j’utilise uniquement les versions gratuites d’Astra et Elementor.

Merci !

Lead fills form, you emails three days later, books a call, demo happens, proposal goes out as a PDF, three weeks of email negotiation, legal reviews a contract in DocuSign, deal closes in the CRM, someone manually creates an invoice in another tool, payment eventually lands.

How long does it take? how many tools do you use? How many things usually fall thriught the cracks? Any data loss between handovers?

We built something that cuts this to one system. Happy to share if anyone is curious.

I built a Notion CRM for small agencies and consultants who want their sales workflow organized without feeling like they're setting up an entire enterprise system.

It keeps Deals, Companies, Contacts, and follow-ups connected, with views for active, won, and lost deals.

If you just want to try the deal side first, I also made the Deal Tracker available separately for free.

Would love to hear what you’d want in a simple CRM setup.

Hello,

I have set up a Wordpress site (www.Magic.Army) and am using WooCommerce to manage my storefront. Everything seems to be functioning great except that I cannot get any emails to work via purchases or the contact form.

I am using WP Mail SMTP (free) along with Brevo (also free). I have followed this guide to set everything up. All of the DNS records have propogated, and I'm getting confirmation on the Brevo site that my domain is verified on every record. I've ensured all of the settings are congruent between Brevo and WP Mail SMTP, to include the 'From Email' field. I have tried generating several new API keys to ensure that wasn't the issue, and nothing changed.

Whenever I go to send a test email, I get the following error:
Action Needed: It doesn't look like the DKIM record required by Brevo (formerly Sendinblue) has been added to your domain. Please check out our step-by-step guide for details on how to add this record to your domain's DNS.

From what I can tell, that error is a bug and will be persistent even if everything is functioning correctly, but I figured it's worth mentioning since everything is not working correctly. That said, the DKIM records are there and can be seen/accessed.

Emails are not going into any sort of spam folder, and there's nothing in my 'Sent' emails folder, either. Any ideas on what could be causing this issue?

Edit: SOLVED
Turns out you're not allowed to use captial letters in your 'From Address'. Switched to all lowercase and everything now works fine.

I feel like when prepping for a client call, the useful context is in email, a drive folder, someone's calendar, or in someone's head. The CRM sometimes has the record, not necessarily all of the important information or is linked in the right way.

How are you guys solving this today? I'm thinking about how AI agents can help with data compilation but AI Assistants need a good data model to build from. Are you running into this?

I spent some time this weekend finding the entrance vector for a site that was getting re-hacked after cleanup. I mean I knew it would get re-hacked since I wasn't finding the the vector in the usual "easy" ways. Turns out it was this: nvd.nist.gov/vuln/detail/CVE-2026-15459

The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.0. On sites not yet connected to the WPMU DEV Hub — the default state after installation — the site API key that keys the WDP-AUTH request signature is empty, making the signature verified by validate_hash() trivially forgeable

It's bad enough this plugin adds an alternate auth path to your web site, with full admin control given to some 3rd party you don't know. But I also learned this plugin, wpmudev-updates, is usually stealth-installed with other plugins from WPMU DEV, so users don't know it's being installed. To top it off, it doesn't show up in the plugin dashboard so they don't even know it's there.

In the case of the site mentioned above, I think it was installed with another plugin a couple of years ago, and that plugin was since removed, but wpmudev-updates did not get removed.

Is it just me or is it a little crazy to allow plugins to provide auth bypass for complete admin control of your site by third parties? Is this a common pattern? What other plugins do this aside from the WPMU DEV ones? (I'm talking about the situation where there ISN'T an active exploit in the code ... the intended use scenario is what seems insane to me).