Made a video with emdash cms. Created today a theme on it https://emdashhq.com and looks to do the job. Will be useful for the ones that needs a CMS to do things. I prefer astro with mdx files :)

Curios to see how much usage will get a small website.
For the overview you can see https://youtu.be/1X6KwMjbv-Y?is=UpQcDb8XU4vU\_D-9

Next tutorial already up. Will continue next week

we ran into a weird issue, where multiple links (buttons) on our site would lead to a gambling site (while masking themselves as our website. The URL was correct).

After a couple of hours I managed to clear out all malicious code and found a VERY interesting file.

So apparently we got hacked by a group called „chinafans“. They were even so kind to leave links to their telegram behind.

So yeah.. Not sure if it’s good that i post this? But felt like sharing an interesting discovery.

Hey everyone,

I'm not a designer. I'm more on the technical side of WordPress, so most of my sites so far were built by hand in Elementor or WPBakery, or I bought a template kit on Envato and adjusted it. Works fine for me, but design was never my strong point.

Lately my feed is full of "AI will replace web designers" videos. Everyone is hyping Claude and Figma Make and promising pixel perfect sites in 10 minutes... and honestly I don't trust most of those guys.

A lot of them are selling a course.

To be clear, I'm not a Figma Make user. I'm only thinking about paying for it, and I don't want to burn an hour and a bunch of money to find out it's garbage.

here's what I actually want to know. Can I describe a layout in text prompts in Figma Make, similar to what a good Elementor template kit looks like, clean that up as a proper Figma design, and then rebuild it in Elementor with a decent result? Or does it fall apart somewhere in the middle (spacing, responsive, global styles, that kind of things?

Is there chance to get solid results?

Correct me, please

And is this whole thing a real workflow people use now, or should I just keep paying for Envato Elements and save myself the headache?

Would really appreciate honest experiences, including the bad ones. Thanks!

I understand that we should not be using 2 SEO plugins, but the company wordpress site's maintenance was handed off to a new employee after I changed roles, and they installed a second SEO plugin. The one we originally were using was Rank Math SEO , and about a year ago they installed All in One SEO.

I recently jumped back in to help them out with some questions they had and noticed both plugins were running.

I'm planning on keeping Rank Math. My question is, is there anything I need to consider when deactivating one of the plugins? Is it is simply a matter of deactivating the All in One plugin? Or is there anything else I need to do? Are there any unintended consequences I should consider?

FerimanEdge Regime Widget

I recently published a small free/open-source WordPress plugin for crypto-focused sites.

It adds a Gutenberg block and shortcode for displaying the current BTC, ETH or BNB market regime (BULL / SIDEWAYS / BEAR), individually or together.

There are a few things that I have deliberately kept simple:

• no API keys
• no server-side API requests
• no bundled third-party JS/CSS
• dark, light and visitor OS themes
• compact/standard/large layouts

The plugin itself just outputs the iframe. The market-regime data is served directly by FerimanEdge.

WordPress Plugin:
https://wordpress.org/plugins/ferimanedge-regime-widget/

Feedback on the block/shortcode UX would be useful, especially from people building crypto or finance sites. Thanks!

Made my website after getting scammed by freelancers on Fivver. What do ya’ll think? All built and pushed with WPvibe.

I'm not a developer by any means and don't know how to code. I do however use Claude mainly for designing pages in the block editor, and for troubleshooting WP issues. Before updating plugins/themes I also the entire plugin stack and theme the site in question is using through Claude to check for any compatibility issues before updating. What I've also been doing is running them through Claude to find security vulnerabilities and with just the basic Pro plan, the number of vulnerabilities I have found in commercial plugins is unfortunate. Especially when my prompt is as simple as just asking Claude to find any security vulnerabilities. I'm sure someone educated in security could prompt it to find even more. Anyway, I think it should be a requirement for dev's to run their code through an AI agent to find these vulnerabilities before production sites install them. Luckily the vulnerabilities I have reported have all been addressed, but these things really should be addressed before its released.

I got tired of opening wp-admin for checking orders and clients are usually don't take efforts to understand this woocommerce, so I built WooOps.

It handles orders, products, stock, customer notes, shipment tracking and basic reports. Self-hosted, open source, and connects to your existing store—no extra database or plugin.

Still in development with coming more features into it, I would love to hear your feedbacks so I can improve it and make it better for the community.

https://github.com/shantz1/wooops

.
I have created is a program that lets me create a post/content across my different WordPress sites. I use a combination of AI to generate the content and then use an API to publish the content.

Curious to know how others are managing and posting content?

So I just roasted my blog page with camelAI. It returned a withering critique about SEO, formatting, and my life choices. This was expected.

What I didn't expect was it finding eight scripts on the page. Eight. What the hell are those things doing?

My blog page is not my landing page. The blog front page is sitename/blog. It shows only the latest entry. This is where the eight scripts run.

However, other blog pages only run four scripts. Individual posts are found in sitename/blog/postname. These pages aren't functionally different than the blog front page. Both have navigation to traverse posts and comments are open.

Really weird is the same post in different locations behaves differently... - mysite/blog(newpost) --> 8 scripts - mysite/blog/newpost --> 4 scripts

I'm pretty sure one script is serving up avatars from Gravatar (I really need to code that locally). In any case, that should affect post locations equally.

I'm running 2025 theme with only three plugins (two "must-haves from my webhost and one for Lightspeed), so I don't think it's bloat.

When I get home, i'm going to inspect the page. But for now, does anyone know why the single-post blog page runs twice as many scripts as the other blog pages - even on the same post?

Oh... this post was initially rejected because I named my webhost. Why was that?

EDIT: What the hell? Did this thread just get downvoted because I'm asking questions?

Security reports to WordPress on HackerOne sat at 20 to 30 a month for about a decade, then hit 450 in July and 773 in August, and John Blackbourn posted the graph with the reason attached: people now point Claude and GPT at core and let them read.

Click2Shell is what one of those bugs looks like. Fixed in 7.1.1, found by pwn.ai with Claude Opus 5 and one human in the loop, and the entire attack is a link. An admin who's logged in opens it, WordPress's own JavaScript clicks Install on a theme from the official catalog for them, the

Customizer loads that inactive theme's PHP, and a sloppy AJAX handler inside the theme pulls in whatever the attacker wants. The site's theme never changes. Nothing in the firewall log looks wrong, because every request came from the admin's own browser carrying the admin's own nonce.

So on the day that link went around, the firewall wasn't the variable. The variable was how many people could open it while logged in as Administrator.

I'm going through ours now and I already know the answer on a couple of client sites is going to be embarrassing, because "the client needs admin" was always the easiest ticket to close.

How many Administrator accounts are on the sites you look after? I'm asking because I suspect my number is normal and I don't like that.

Code generation, debugging, custom plugins, CSS, SEO tasks, content creation, or something else? Looking for practical use cases rather than the usual AI hype.

Most accessibility learning is either reading the spec or long blog posts. I wanted something you could do in 90 seconds with your coffee, so I made a little swipe game.

Every day you get 10 real UI cards. Swipe right if it passes WCAG, left if it fails. After each swipe it tells you why, with the actual numbers (contrast ratio, target size, that kind of thing). At the end you see how you did against everyone else who played that day.

There are also topic quizzes if you want to drill one thing- color contrast, target size, keyboard focus, use of color, text over images.

Every card is real HTML/CSS and gets checked with axe-core before it goes in, so the answers are measured, not vibes.

Lifetime free, never charged. No account, no sign up, no cookies, no personal data collected. Your streak just lives in your browser, Running on Vercel.

https://accessible-or-not.vercel.app/

ps: bookmark it if you want to keep a streak going. And I'd love feedback on what else would actually help the community. Topics you want, stuff that annoyed you, or cards you think are wrong.

Hi guys,

I run a Google Reviews widget platform and have just released it as a WordPress plugin.

All of the widgets are designed from scratch (no generic AI slop) and the focus is very much on making them actually look good on modern websites. They’re free to use, lightweight (around 20kb), and highly customisable so you can match them to your site’s aesthetic.

I know Google Reviews plugins are nothing new on WordPress, but there's a gap for one that puts design first rather than pure functionality.

It's incredibly straight forward to get started, just simply choose a widget and type your business name into the search.

Would love to hear any feedback from people building WordPress sites especially around the designs, customisation options, or anything you feel is missing.

Thanks all.

Hi, kindly ask your help for this : when translating a blog post with WPML from English to Italian and French, there is around 50% possibility that several other posts in my blog lose the featured images. If I then open the pages that have lost the featured image in WPML Advanced Translator Editor, and I save the affected translation again, the featured mages immediately reappear. The problem is that for every new post I add, this manual refreshing of the affected posts gets more and more complicated. (In the Media section of WPML, the featured pictures always remain correctly linked. That is why refreshing ATE is enough to make them reappear, I think). If anyone has a solution for this, it would be great! Thanks in advance for your help!