I’ve been trying to upload an animated GIF for one of my WordPress.org plugin listings, but it keeps reverting back to the static logo.
Is this a new restriction by design, or am I doing something wrong? I’ve noticed other plugins, such as Elementor and SureForms, using animated GIFs, so I’m just curious if I’m missing something.
Any insight would be appreciated!

Hi everyone! I’m hoping someone can help me understand what’s happening with my WordPress site.
I’m currently using the Twenty Twenty-Five theme and its Site Editor/template system. I’m building my pages with my own custom HTML, CSS, and JavaScript.
I have a Main Page set as my static homepage under Settings → Reading, and that page has its own custom code.
The problem is when I create another page.
For example, I created an All Properties page and put completely different custom HTML/CSS/JavaScript into that page. When I go into Pages → All Pages → All Properties → Edit, I can see the correct code and the changes I make there.
However, when I actually visit the page, WordPress shows my Main Page/homepage design instead of the All Properties design.
I have a “See More” button on my homepage that links to:
mydomain.com/all-properties/
The strange thing is that the URL does change correctly. It becomes /all-properties/, so WordPress is definitely going to the correct URL.
But the actual content is still my homepage.
I’ve also checked Settings → Reading:
Homepage: Main Page

Posts page: None

So I’m wondering if this is related to how Twenty Twenty-Five templates work.
It seems like the individual page has its own custom code, but the Twenty Twenty-Five template is overriding it or not displaying the page content correctly.
What I want is simply:
Main Page → displays Main Page custom code
All Properties → displays All Properties custom code
Other pages → display their own custom code
I don't want to have to put the entire design for every page into the global/template itself.
What exactly do I need to change in the Twenty Twenty-Five Site Editor/templates to make each individual WordPress page display its own content?

I’m pretty new to the Site Editor, so a step-by-step explanation would be greatly appreciated!🥹

Dans quelle mesure pensez vous que ce thème WordPress est à risque ? Il a été créé par Automatic, et n'est plus mis à jour depuis 2013. Mon site est un tout petit blog amateur avec très peu de visites, 27 visiteurs uniques le mois dernier d'après Jetpack.

https://wordpress.org/themes/parament/

Pour l'instant j'utilise le thème Twenty 15, mais j'ai envie de revenir sur Parament qui était mon premier thème, à l'époque de mon inscription sur WordPress.

Le remettre à jour uniquement au niveau de la sécurité demande t'il beaucoup de travail ?

I'm considering building a car dealership website using WordPress and then reusing the same system for multiple dealerships, with each dealership having its own branding, inventory, admin area, and domain.

The website would include things like:

• Vehicle inventory management
• Add/edit/delete cars
• Vehicle images, specifications, pricing and availability
• Search, filtering and sorting
• Individual vehicle pages
• Customer inquiries
• Test-drive requests/bookings
• Services section
• EMI calculator
• Dealer admin dashboard

The idea is to build the core system once and then customize/reuse it for different dealerships rather than developing a completely new website each time.

For people experienced with WordPress development:

Is WordPress a good option for building something like this?

What would be the main downsides or limitations I should be aware of?

I'm particularly wondering about:

• Scalability when managing multiple dealerships
• WordPress Multisite vs separate installations
• Database/inventory performance
• Security and maintenance
• Plugin conflicts/dependencies
• Custom functionality and integrations
• Whether WordPress would become difficult to manage as the number of dealerships grows

Would you recommend WordPress for this type of product, or would you build it as a custom application from the beginning?

I'd appreciate advice from anyone who has built a similar multi-client/product-based system.

I use brizy to edit my website but their mobile version always gets messed up and is a mystery to edit. Is there an add on where I can work on the mobile site separately?

I’ve been working on a WordPress plugin called Dhruval Admin Command Palette.
The idea came from something that kept annoying me while working in WordPress: you often know what you want to do, but not necessarily the exact name or location of the WordPress setting/menu.
So I built a command palette inspired by Spotlight/Raycast, with NLP-powered search to make the experience more natural.
🔎 What makes it different?
Natural Language / NLP Matching
You don't necessarily have to search using the exact WordPress terminology.
Instead of remembering the exact admin page name, you can search using the way you'd naturally describe what you're trying to do.
For example:
“change site title”
“manage users”
“edit homepage”
“change permalink settings”
The command palette uses natural-language matching to find the most relevant WordPress admin actions.
✨ Text Highlighting
Search results also highlight the matching text, making it immediately obvious why a particular result was returned.
This is especially useful when there are several similar admin pages or commands — you can quickly scan the results and see the relevant match instead of reading through the entire result.
⚡ Other features
Ctrl + K / Cmd + K to instantly open the command palette

Search WordPress Admin pages and actions from one place

NLP / natural-language matching

Highlighted matching text in search results

Dynamic parameter extraction where applicable

WordPress.org search integration

Lightweight and designed to stay out of the way

Dedicated dashboard search interface

The goal is simple: stop hunting through WordPress Admin menus and just describe what you want to do.
It's available on WordPress.org:
Link
I'd love to hear from other WordPress developers, site owners, and power users:
What WordPress Admin action do you find yourself repeatedly hunting through menus to find?
That’s the kind of use case I’d love to add to the command palette next.

I've got a really basic website that's just a few pages of text and links. But in WordPress under the hood it's a hundred miles of spaghetti code and stuff I don't use.

I could just write a plain html site that would be sufficient, but I worry about ftp'ing into my server and deleting the whole WordPress install. I also don't know how to force it to load as https rather than http.

Does anyone with more knowledge or wisdom have any pointers?

EDIT: Thanks everyone for excellent advice!

This is driving me nuts. After 10+ years of no malware on client sites, I'm getting hacked every couple of weeks on sites that are fully up to date and using 2fa logins. The common thread is that all infections install a malware plugin called wp-flare. Beyond that, I can't find any intrusion path. It does seem that once the infection gets cleaned up, it doesn't come back, but it's driving me crazy not knowing how it's getting in to multiple sites on different hosting. Anyone seen it?

I've been running a non-commercial WordPress blog since 2009. Yesterday, I tried to create a new blog post but there was an issue with the database and now the WP Dashboard tells me that there are no posts, no activity, no comments, etc. Jetpack Stats can't find anything to show. The public interface now shows a "Page not found" with the message "Sorry, no posts matched your criteria".

I contacted my ISP's tech support and after a long back-and-forth, they reported:

"Upon reviewing logs, It shows Could not insert post into the database while adding post in wordpress dashboard, which typically occurs due to unsupported character encoding (like emojis), corrupted database tables, an omitted AUTO_INCREMENT attribute, or insufficient server memory limits.

"I have successfully repaired and optimize database am afraid issue remains same"

They ran a malware scan which found four instances of:

SL-PHP-BACKDOOR-GENERIC-hnl.UNOFFICIAL 

As a user, how do I remove these four instances?

Not sure if this is appropriate to post here, but since I've been learning WordPress for the past 5 months using advice I've gotten here, I figured I might as well ask.I'm from a developing country, and I've been calling local businesses, offering to develop websites for them and, more importantly, help them with their SEO.The companies are all in the same industry, which actually helped. I created a sample website that they can all see themselves in, including products that each of them sells. I figured having something tangible to show them would be much more effective than simply telling them what I can do.

Three businesses got back to me, and I've managed to set up meetings with all three tomorrow.Any advice you can give a beginner? Are there specific talking points I should focus on, or even advice on how to conduct business in this space?

I'm mainly looking for advice on how to approach the meetings, what I should avoid saying/promising, how to present my pricing, and how to turn these meetings into actual clients.

We are the team behind Instinctor. This is our one permitted promotional post for the free plugin on WordPress.org.

Instinctor is a professional visual website builder for WordPress with a complete motion graphics engine. Ecommerce, subscriptions, bookings, Smart Chat, customer management, and SEO are built in.

Its visual editor is called Impulse. Classic mode creates vertically scrolling pages where sections can use layered animations and three dimensional reveals. Cinematic mode creates full screen compositions with individual per screen timelines over persistent animated environments.

Grid, Rows, and Columns provide precise responsive layout control. Blocks can carry their own animation systems. Motion Walls create continuously moving titles or image compositions. Effects can respond to the mouse on desktop and the phone gyroscope on mobile.

The visual system is connected to the business behind the site. Instinctor handles configurable products, subscriptions, bookings, customer conversations, customer management, and complete SEO controls inside the same platform.

It can be installed on an existing WordPress site without replacing the theme or changing existing pages. Build and publish one Instinctor page first, then expand only when it makes sense.

Install free on WordPress.org:
https://wordpress.org/plugins/instinctor/

I run a Photobooth business for Weddings and Events.

I would like an interface where I can login and view my active calendar, add/edit daily events and add things such as flares/badges so that I get a preview of certain things about that event without having to click into the date for more information. When I click onto the date I can have the full information about the event.

This would NOT be for customers to use. Only myself and one of my employees with their own username/pw to VIEW the calendar. I would be the one adding in the information.

I would want it to appear mobile-friendly as well as using multiple devices. So that the calendar would be nice and big on the phone screen for the daily boxes to be large enough to read the badges.

Preferably a calendar that looks nice, large enough boxes for the dates when viewed on devices and is modern/clean looking.

I have attached an image I asked ChatGPT to create that I could use for an example of my needs. It pretty much looks perfect to what I need.

I'm not sure if I need a plugin, or another web based solution, or something I can install on my own server. Any suggestions are appreciated.

I am the cofounder of small association on a rare cancer. We have a website in 13 languages beacuse we know that information is needed for patients especially when it does not exist in your language.

Our website is on WP and I am not developper even though I can handle the easy tasks. We had help to start the website, so it has been cretead by a pro but he wanted out since we were not a steady stream of business.

My problem is for more complicated tasks. I wanted to use AI to help and guide me but I don't where to start.
I have a personnal paid account for Gemini and wanted to use Gem, to help me. Do you have any prompt that I could use? Can I linked my WP to Gemini so it can more useful? Should I?

Thanks a lot for your help !

This is driving me crazy! Many years ago I had a blog similar to this one https://www.dangermouse.net/ that had just a continuous stream of entries, where you could read all of them in sequence without having to click on each entry to read it.

My blog https://andrewshellshear.com/blog/ just shows a list of the titles that you have to click into to show the individual entry.

How might I change the settings to show a continuous stream of entries?

Hello Everyone,

I am facing a strange issue on one of my envirnoments with the Site Lockdown plug-in. The admin-ajax.php causes an internal server error (500) while executing the file scanner.

Would you have some idea about this? Rights look ok, server settings as well, the plug-in also seems to be installed correctly.

The access logs look well, timeouts have been increased, so I am unsure if I should modify code in order to get this right or do you have some concrete idea how to fix this?

Thanks and best regards,

T.

So I've been using WP Forms for a couple of years, but while it's easy, it's expensive and I hate how it stores its responses in hidden posts. I also hate that the Pro version is $399 and still doesn't have n8n integrations or webhooks. They have tons of formatted forms... but none ever fit.

I'm on a mission to make my site more responsive, and lower costs... so What do you think is the best forms program? I do plan to be running several sites including some that will need people to upload information including drivers licenses and sign a waiver.

been thinking about Gravity Forms and potentially Fluent forms - but would love everyone's thoughts.

My WP Forms subscription expires in October so have to make a decision soon so I can migrate the big 3 sites before the WP Forms expires

I’m a web developer with 10+ years of experience.

Today I generated a genuinely unique, award-worthy website design in ChatGPT, with instructions for it to be exported as a WordPress/Elementor theme.

From generating the site to installing it on WordPress and having it actually working took less than an hour.

And I’m sitting here thinking… are we cooked? 😂

How much time do you think web developers realistically have before we get a tool where you type:

> “Build me a unique, high-end website for this business.”

…and one click later you have the design, responsive pages, CMS, animations, SEO basics, WordPress integration, and everything else ready to go?

Not another generic AI template — I mean genuinely custom, polished websites.

1 year? 2 years? Or are we basically already there?

Hey r/Wordpress,

About two years ago, I released a plugin called WPSS Ultimate User Management. I was pretty proud of it, but I made one rookie mistake: I completely messed up the naming strategy. The name was so bad that the WordPress plugin directory search algorithm basically buried it. It wouldn't even show up if you searched for user management plugins!

Instead of leaving it to die in search engine limbo, I decided to give it a proper comeback. I've spent the last few weeks refactoring the whole codebase, cleaning up the backend, and bringing it up to standard for WordPress 7.0.

What’s new?

Besides code optimizations and performance tweaks, I wanted to make user management faster right from the native WP admin.

Now, when you hover over any user in the native WordPress user list, you’ll find a new Permissions link alongside the default Edit/View options. Clicking it pops up a clean role-management view specifically for that user, saving you from navigating away or digging through full profile pages just to adjust roles and capabilities.

Here’s a quick overview of what the plugin does:

• Role & Capability Editor: Create custom roles or fine-tune exact capabilities for existing ones.
• Dashboard & Menu Access: Restrict access to specific admin menus, submenus, and the admin bar based on user roles.
• Widget & Sidebar Permissions: Control who can see or edit classic widgets and sidebars.
• Content Restrictions: Block access to posts, pages, or custom post types by role with custom restriction messages.
• Clean & Lightweight: Native WP hooks, no bloated external libraries, and built for PHP 8.1+.

It’s been a fun process fixing old mistakes and polishing the code. If you handle client sites, membership platforms, or just need cleaner access control, I'd love for you to check it out and let me know what you think!

WordPress plugin link: RoleCraft: User Access Control

Github project link: RoleCraft: User Access Control

I'm dealing with a persistent, self-healing malware infection across ~30 WordPress sites on the same cPanel shared hosting account (A2 Hosting).

Symptoms:

· Files reappear seconds after deletion
· mu-plugins/nexus-router-run.php (empty 0-byte file) keeps coming back
· Advanced-cache.php, db.php, and .g_*.php files in wp-includes
· Shared memory segments (shmop) storing payloads
· Processes like .g_98130eea.php running even after file deletion
· .user.ini files with auto_prepend_file pointing to backdoors

What I've done:

· Replaced WordPress core with fresh files
· Replaced all plugins from official sources
· Replaced Astra theme from official source
· Cleaned database (removed sc_, wp_91_, transient_sc* options)
· Changed database name, username, and password
· Regenerated WordPress salts
· Killed all .g_ processes
· Cleared shared memory (ipcrm)
· Deleted all .user.ini files
· Deleted all mu-plugins
· Deleted advanced-cache.php and db.php
· Disabled all cron jobs
· Changed cPanel password

The problem:

Shared memory keeps coming back (new segments appear), and the .g_ process restarts. Something is recreating it. I suspect it's either:

· A system-level cron job outside my user
· A hidden backdoor in another infected site
· Something at the server level A2 Hosting needs to handle

Questions:

1. Has anyone dealt with this specific "Crux Runner" or "SC_" malware family?
   
2. How do I find what's re-creating the .g_ process?
   
3. Is this a server-level infection that only A2 Hosting can fix?

I've spent days on this. Any help appreciated.

Hi yall! I own a boarding & grooming dog salon. I need a website that’s really just the bare minimum: explaining our company and prices. We currently use wix and it’s very expensive. The fanciest thing about wix page is that there’s a place to email us directly from the website. Does it sound like it could be worth switching to wordpress?