The announcement post - https://wordpress.org/news/2026/08/browser-extension/

Hi everyone,

My website has recently been getting hammered by bots making a huge number of requests to admin-ajax.php. This is causing my server's CPU usage to frequently hit 100%.

I've enabled Cloudflare's Bot Fight Mode, which seems to help somewhat, but it hasn't solved the problem.

I also tried creating a Cloudflare custom rule to challenge all requests to admin-ajax.php. However, this breaks the forms on my website because they rely on admin-ajax.php to work properly.

I've also enabled Cloudflare's DDoS protection, but it doesn't seem to make much difference in this case.

I'm wondering what the recommended approach would be here. How can I block or rate-limit these malicious/bot requests to admin-ajax.php while still allowing legitimate AJAX requests from my website to work normally?

Any advice would be greatly appreciated. Thanks!

This morning after upgrading to 11.4.5 I cannot access config menu. Error is The website encountered an unexpected error. Try again later. It ha been a few hours, no change. I just checked the Statis report, same error. I can get into the recent log messages. I think I see the entry but have no idea how to fix. Here it is:

Message: Drupal\Core\Database\DatabaseExceptionWrapper: SQLSTATE[42S22]: Column not found: 1054 Unknown column 'locale_file.hash' in 'SELECT': SELECT "locale_file"."project" AS "project", "locale_file"."langcode" AS "langcode", "locale_file"."version" AS "version", "locale_file"."timestamp" AS "timestamp", "locale_file"."hash" AS "hash", "locale_file"."last_checked" AS "last_checked" FROM "locale_file" "locale_file" WHERE ("project" = :db_condition_placeholder_0) AND ("langcode" = :db_condition_placeholder_1); Array ( [:db_condition_placeholder_0] => bartik [:db_condition_placeholder_1] => en-gb ) in Drupal\locale\CurrentImportStorage->get() (line 68 of /home/shirmkth8bfz/public_html/windsofhawi.com/drupal/core/modules/locale/src/CurrentImportStorage.php).

Below that is a much longer backtrace. Will post it if necessary. Any ideas?

Hello everyone.. so we’re on the process of reevaluating our CRM setup for a growing 12-person b2b sales team. Grateful for blessings 😄 We need something that handles inbound lead routing and email sequencing smoothly without requiring a full-time admin just to keep custom objects working.

RIght now we're looking at them both, anyone knows how do they compare when it comes to reporting flexibility, automation usability, and data cleanliness for bigger number of records (around 10k+ and growing)?? Thanks ! 😄

The Gap in the Market
The industry is dominated by massive legacy platforms built in the 90s/2000s. They cost small agencies $500–$1,000+ a month, take months to onboard, and are crammed with complex enterprise features a 2-person team will never use. Most scratch agencies either overpay for these bloated systems or run their entire business on messy spreadsheets.
What I’m Building
I’m building a clean, modern alternative focused strictly on speed, zero setup time, and core operational pain points:
Automated Rate Increase Flags:Instantly spotting client policy price hikes so agents can check in before clients shop elsewhere.

Account Bundling Identifiers:Automatically highlighting single-policy clients for easy cross-selling.

Instant Search Navigation: Allowing agents to pull up any client or file in under a second while on a live phone call.

Simplified Client Workflows:Streamlining public client intakes into a clean visual workspace for the agent.

My Question for the Community
My target audience consists of business owners who are heavily non-technical and used to clunky legacy software.
For those who have launched B2B SaaS into traditional, non-tech-savvy industries:
Onboarding: Do non-tech users prefer self-serve CSV imports, or should I mandate a 10-minute guided setup call?

Early Feedback: What’s the best way to extract honest, actionable product feedback from busy small-business owners who aren't used to testing beta software?

Would love to hear your thoughts or learn from anyone who has tackled a similar legacy industry!

For those using HoneyBook, Dubsado, 17hats or another CRM for an event-based business:

What does it handle really well for you?

More importantly, what do you still end up using Instagram DMs, WhatsApp, spreadsheets, Notes, Google Calendar or other apps for?

Is there anything you wish your CRM handled that would actually make a noticeable difference in your day-to-day business?

And if you’re happy with your current setup, I’d love to hear that too.

I’m moving a site off Thrive Theme Builder (cost + lock-in) to a native block theme with my own styles. WP 7.0 stack, theme.json v3.

The site has: blog posts, a few unique one-off pages, and the main marketing pages (home, services, etc.). Some of it was built with Thrive Architect.

My plan so far:

**1.** Build the theme locally — either a child theme of a minimal FSE theme or from scratch with Create Block Theme. Templates, patterns, colors, type scale all defined in theme.json. **2.** Push to staging, activate the new theme with Thrive still active. **3.** Convert pages one at a time, highest-traffic first. **4.** Deactivate Thrive Architect only when nothing depends on it anymore. 

I’m doing it this way because Thrive Architect stores content in post meta, not post_content — so deactivating it early can make content vanish entirely, not just lose its layout. Landing pages seem to be the worst case since they bypass the theme template completely.

What I’m trying to get right:

**•** Where’s the line between “start from scratch” and “child theme a minimal FSE theme”? For a fully custom design, does starting clean actually save time, or do you end up rebuilding what Twenty Twenty-Five already gives you? **•** For blog posts specifically — did Convert to Blocks work for you, or did you end up rebuilding? What broke? **•** Anything that bit you on the SEO side? I have a crawl baseline and CWV numbers saved, but I’m sure there’s something obvious I’m missing. **•** Any reason *not* to run the new theme in production while old pages still render through Architect? That’s the part of my plan I’m least sure about. 

Anyways, looking for advices
Thanks

If you were building a new website today, would you choose the WordPress Block Editor (Greenshift) or Elementor?

Hi all, i need some help asap. I have a new company doing amendments to my website / seo. They removed the old company’s user email and it looks like various changes have been reverted back to old ones. Email attached. How do i resolve this, i literally cant sleep atm.

Gibt es ein kostenloses Plugin wo ich über ical Link einen Google Kalender für das Frontend einbauen kann?

Ich habe eine neue Webseite für Ferienwohnungen und da ich noch keine Einnahmen habe, suche ich ein kostenloses Plugin womit ich übersichtlich die Belegung der Unterkunft anzeigen kann. Der Eigentümer der Ferienwohnung gibt die Belegung in seinen Google Kalender ein und über den ical Link möchte ich den Kalender auf der Website anzeigen.

I know, elementor is a nightmare. The website was built using it before I came along and now there’s almost 300 pages. The website is catalog style and that’s just how they want it.

Problem is, the website and the WP dashboard are so incredibly slow. Like noticeably slow. The website home page fails every speed test I’ve run and the reasons keep coming back to elementor. What can I do to fix this without rebuilding the entire thing?

I have two WordPress websites with a mid-range managed host, which I prefer not to mention since the post is not about them.

It has been two times now (v7.0.2 and v7.0.4) that I read a headline “critical security fix just released, update immediately”, I go to the updates section of the host control panel to check if the auto-update has been applied, but two hours after the official release still nothing and I have to make a backup myself and update manually from the wp dashboard.

I am mildly irritated by this delay, since I have set the minor auto-updates to “immediately” but it takes hours instead, and especially with v7.0.2 the vulnerability was being exploited very quickly.

Is that delay normal?

How long does it take with your managed hosts for the auto-updates to be applied after the official release?

Hi, I’m currently researching how small web agencies and freelance developers handle website security for their clients.

I’m not trying to sell you anything. I’m simply trying to understand the current workflow and the problems people actually face.

If you have a few minutes, I’d really appreciate your honest answers to these questions:

1. How many client websites do you currently manage?

2. What tools or methods do you currently use to check the security of those websites?

3. How often do you perform security checks?

4. When a security tool reports multiple issues, how do you decide which issue needs to be fixed first?

5. What part of the security-checking process takes the most time or effort?

6. Do you ever find security reports difficult to understand or difficult to explain to your clients? If yes, what makes them difficult?

7. After discovering a vulnerability, how do you usually figure out how to fix it?

8. Do you have to manually search Google, documentation, GitHub, or vendor websites to find the correct solution?

9. Have you ever received a false alarm from a security scanner? If so, how did you handle it?

10. What is the biggest frustration you currently have with website security management?

11. If you could completely remove one part of your current security workflow, what would it be?

12. Approximately how much time do you spend each month dealing with website security across your clients?

13. Are you currently paying for any security tools? If yes, which ones and approximately how much?

14. If a tool could automatically monitor your clients' websites, identify the most important security problems, explain them in simple language, and give you clear step-by-step instructions for fixing them, would that be useful to you?

15. What would make a tool like that genuinely valuable enough for you to pay for?

There are no right or wrong answers. I’m particularly interested in your actual experience, even if it means telling me that this idea wouldn't be useful.

Thank you for your time.