The WordPress Plugin Security Problem Nobody Talks About
The real WordPress plugin security problem is not zero-days, it is the abandoned plugins, the opaque ownership changes, the CVEs that sit unpatched for months, …
Writing · WordPress
WordPress
All posts in the WordPress category. Search across the full archive or pick another topic below.
WordPress Accessibility in 2026: The Essential Guide for Site Owners
The European Accessibility Act is in full force and WordPress site owners are behind. This is a founder-level guide to what accessibility actually requires, why…
Why I Built a Free WordPress Security Scanner
I built WP Vanguard because I got tired of finding out about security problems the wrong way. Here is the founder story behind the free WordPress security scann…
WordPress vs Astro in 2026: What You’re Actually Trading When You Go Static
We are in the middle of converting store.wbcomdesigns.com to Astro. So I am not writing this from a position of theory or fear. I … Read more…
What I Include in My WordPress Maintenance Retainers (and What I Charge)
What a WordPress maintenance retainer includes, what it excludes and what it costs: from about $150 to $800 a month, and the three factors that decide the price…
Is WordPress Really Open Source? What That Means for Developers and Agencies
Yes, WordPress is open source under the GPL. What that means for developers and agencies, what the 2024 governance dispute exposed, and the honest risks of buil…
Visual Regression Testing for WordPress: Why I Never Ship Without It
How I use BackstopJS and Playwright screenshots to catch visual bugs before they reach production. A practical guide to visual regression testing for WordPress …
AI Tools for WordPress Plugin Development: Real Workflow, 3x Faster in 2026
After integrating a custom MCP stack into our plugin development workflow, Wbcom Designs measured a 3x throughput improvement on WordPress plugin work. This is …
When a Client Says ‘Make It Like Facebook’
Every agency owner has heard ‘make it like Facebook.’ Here is how I navigate these conversations honestly, what clients actually need, and why WordPress communi…
We Built an Open-Source MCP Server to Clean Malware From 17 WordPress Sites in One Day: Here’s Everything We Learned
After cleaning 17 infected WordPress sites in a single day using our new open-source MCP server, we’re sharing the tool, the real-world attack patterns we found…
Multi-Vector WordPress Malware: Protecting Your Main Site, Staging, and Test Environments
Modern WordPress attacks don’t just target one vulnerability—they deploy coordinated, multi-vector assaults that compromise your core files, plugins, mu-plugins…
Gutenberg Blocks in 2026: WordPress Development in the AI Era
After building 100+ WordPress plugins, I’ve watched Gutenberg evolve from controversial newcomer to the foundation of modern WordPress development. With 60% ado…