Our Blog & Resources

Expert advice, security warnings, and performance guides to help you manage your WordPress site successfully.

14 Oct 2026
•

Two Security Flaws Put All in One SEO WordPress Sites on Update Alert

Two vulnerabilities have been reported in the All in One SEO (AIOSEO) WordPress plugin, which has more than two million active installations. The flaws could let unauthenticated attackers trigger shortcodes or inject scripts in specific circumstances. Both have been patched, and site owners should check their installed version as part of routine WordPress maintenance. Key…
Read More

Read article →: Two Security Flaws Put All in One SEO WordPress Sites on Update Alert
12 Oct 2026
•
Peter Claridge

Why my WordPress sitemap stopped listing new posts

While going through this site’s SEO in October, I noticed new posts weren’t being picked up by Google as quickly as they should. The reason turned out to be the sitemap: it had quietly stopped updating three weeks earlier. The symptoms What made it tricky Nothing looked broken. The sitemap loaded, it was valid XML,…
Read More

Read article →: Why my WordPress sitemap stopped listing new posts
12 Oct 2026
•
Peter Claridge

Automattic Seeks 16 New Web Addresses, Including .matt

Automattic, the company behind WordPress, has applied for 16 new top-level domains, ranging from .craft and .story to .matt, the first name of founder Matt Mullenweg. The applications could broaden the company’s domain portfolio beyond .blog, which has around 375,000 registrations. The proposed names are not yet confirmed as available for public use. Key takeaways…
Read More

Read article →: Automattic Seeks 16 New Web Addresses, Including .matt
11 Oct 2026
•
Peter Claridge

WordPress theme tutorial from scratch: build and launch a custom theme

Key Takeaways A custom WordPress theme begins with clear decisions about its audience, structure and editing approach. Build it in stages, then test it carefully before launch. Decide which pages and tasks matter most to the people using the site. Choose a block or classic theme approach to suit the project and editing needs. Develop…
Read More

Read article →: WordPress theme tutorial from scratch: build and launch a custom theme
10 Oct 2026
•
Peter Claridge

WordPress plugin attacks plant hidden admin access on compromised sites

Hackers are exploiting flaws in Ninja Forms and WPC Product Bundles for WooCommerce to gain persistent access to WordPress websites. The attacks use malicious scripts hidden in form submissions or order data, where they can run when an administrator views the content. Site owners should update both plugins and check for signs of an existing…
Read More

Read article →: WordPress plugin attacks plant hidden admin access on compromised sites
7 Oct 2026
•
Peter Claridge

WordPress tutorial for beginners: a practical guide to learning with W3Schools

Key Takeaways A WordPress site becomes easier to manage when you learn one step at a time. Start with the basics, then build a routine for publishing and maintenance. Choose the WordPress setup that matches how much control you want. Organise posts, pages and media so visitors can find useful information. Pick a theme that…
Read More

Read article →: WordPress tutorial for beginners: a practical guide to learning with W3Schools
7 Oct 2026
•
Peter Claridge

Exposed WordPress backups put cloud and email credentials at risk

A cybercrime toolkit called TIKTOUK has been designed to find exposed WordPress files and recover credentials stored on vulnerable sites. Researchers found a leaked control panel holding around 50,000 server-side credentials linked to roughly 37,000 domains, including hundreds of AWS keys reported as active. The findings underline why secure backups and routine WordPress maintenance matter.…
Read More

Read article →: Exposed WordPress backups put cloud and email credentials at risk
5 Oct 2026
•
Peter Claridge

WordPress plugin flaw puts 900,000 sites at risk: what administrators should do

A critical vulnerability in the WPvivid Backup & Migration plugin could let attackers run code on affected WordPress sites without logging in. The plugin is installed on more than 900,000 websites, but exposure depends on a particular backup-transfer setting being enabled. A patched release is available, and administrators are urged to check their installations and…
Read More

Read article →: WordPress plugin flaw puts 900,000 sites at risk: what administrators should do
3 Oct 2026
•
Peter Claridge

404 error code WordPress: how to diagnose and fix not found errors

Key Takeaways A 404 means the requested page could not be found, but the cause may be a mistyped URL, missing content or a problem with WordPress rewrite rules. A few careful checks can help identify the right fix. Check the URL before changing site settings; a small typo can be the whole problem. Review…
Read More

Read article →: 404 error code WordPress: how to diagnose and fix not found errors
3 Oct 2026
•
Peter Claridge

WordPress flaw exploited within hours as CISA issues urgent warning

A critical flaw in WordPress was targeted within hours of a security update, prompting the U.S. Cybersecurity and Infrastructure Security Agency (CISA) to add it to its Known Exploited Vulnerabilities catalog. The bug could enable remote code execution on affected sites under specific conditions. Website owners should check their versions and apply the relevant fix…
Read More

Read article →: WordPress flaw exploited within hours as CISA issues urgent warning