WordPress Insights

Our Blog & Resources

Expert advice, security warnings, and performance guides to help you manage your WordPress site successfully.

18 Sep 2026
•
Peter Claridge

When a WordPress site kept going offline

The problemA hospitality website hosted on AWS Lightsail had become painfully slow and was intermittently going offline. Visitors were hitting timeout errors and even server access was becoming unreliable. What made it difficultThe hosting dashboard suggested the server was barely using its CPU, so the obvious explanation didn’t fit the symptoms. What I foundAfter working…
Read More

Read article →: When a WordPress site kept going offline
18 Sep 2026
•
Peter Claridge

How I Fixed Intermittent Cloudflare 524 Errors on an AWS Lightsail WordPress Site

If you rebooted your AWS Lightsail WordPress site and it’s not coming back, then you need to check the Linux CPU steal time and Lightsail CPU burst capacity. In my case the server could technically boot, but it no longer had enough available CPU capacity to bring the full WordPress stack back under load. The…
Read More

Read article →: How I Fixed Intermittent Cloudflare 524 Errors on an AWS Lightsail WordPress Site
16 Sep 2026
•
Peter Claridge

Elementor Pro flaw under attack: WordPress sites urged to update now

Attackers are actively exploiting a critical vulnerability in Elementor Pro, the popular WordPress website builder, to upload and run malicious PHP files. The flaw can allow unauthenticated attackers to take complete control of affected sites. Administrators should update immediately and check their websites for signs of compromise. Key takeaways The vulnerability is rated critical, with…
Read More

Read article →: Elementor Pro flaw under attack: WordPress sites urged to update now
14 Sep 2026
•
Peter Claridge

THEMIS puts WordPress plugins under the security microscope

A new security testing tool could help WordPress developers find plugin vulnerabilities before criminals do. Called THEMIS, the framework is designed to understand how plugins interact with WordPress, allowing it to uncover flaws that traditional web fuzzers often miss. Its early tests found 10 previously unknown vulnerabilities across real-world plugins. Key takeaways THEMIS is designed…
Read More

Read article →: THEMIS puts WordPress plugins under the security microscope
12 Sep 2026
•
Peter Claridge

Critical WordPress plugin flaw puts more than five million sites at risk of takeover

A critical flaw in the popular All-in-One WP Migration and Backup plugin could let unauthenticated attackers take complete control of vulnerable WordPress websites. The issue, tracked as CVE-2026-19949, affects versions up to 7.109 and has been fixed in version 7.110. Website owners should act quickly, even if no suspicious activity is visible. Key takeaways CVE-2026-19949…
Read More

Read article →: Critical WordPress plugin flaw puts more than five million sites at risk of takeover
11 Sep 2026
•
Peter Claridge

WordPress developer tutorial for beginners: Build your first custom site step by step

Key Takeaways This wordpress developer tutorial for beginners takes you from the basic WordPress concepts to a small custom site you can test locally. The safest progress comes from making one change at a time, checking the result, and keeping your work separate from the live website. Learn how WordPress.com, WordPress.org, themes, plugins and core…
Read More

Read article →: WordPress developer tutorial for beginners: Build your first custom site step by step
9 Sep 2026
•
Peter Claridge

Elementor Pro Vulnerability Exploited in Active WordPress Attacks: What Site Owners Need to Know

A critical vulnerability in Elementor Pro is reportedly being used in active cyberattacks against WordPress websites running vulnerable versions of the popular page builder. The incident highlights the risks of delayed updates and shows why regular monitoring, backups and a reliable WordPress maintenance plan are essential for website owners. Key takeaways Security reports indicate that…
Read More

Read article →: Elementor Pro Vulnerability Exploited in Active WordPress Attacks: What Site Owners Need to Know
7 Sep 2026
•
Peter Claridge

WordPress sites under attack as Super Forms and Elementor Pro flaws fuel mass exploitation

WordPress site owners are being targeted by a wave of attacks abusing critical vulnerabilities in the Super Forms and Elementor Pro plugins. Security researchers say more than 440,000 exploitation attempts have been blocked, with attackers uploading PHP webshells that can provide remote control of affected websites. Key takeaways The incidents affect widely used WordPress tools…
Read More

Read article →: WordPress sites under attack as Super Forms and Elementor Pro flaws fuel mass exploitation
5 Sep 2026
•
Peter Claridge

Critical Everest Forms flaw puts 100,000 WordPress sites at risk of takeover

A serious vulnerability in the Everest Forms WordPress plugin could allow unauthenticated attackers to upload and run malicious PHP files on affected websites. More than 100,000 sites may be exposed. The flaw creates a potential route to remote code execution, data theft, website defacement and complete site takeover. Key takeaways CVE-2026-19598 affects Everest Forms versions…
Read More

Read article →: Critical Everest Forms flaw puts 100,000 WordPress sites at risk of takeover
3 Sep 2026
•
Peter Claridge

WordPress editing tutorial: How to edit pages, posts and your website design

Key Takeaways WordPress editing becomes much easier once you know where content, design settings and media controls live. This wordpress editing tutorial walks through the main tools, with practical checks to help you make changes confidently. Use the page and post editor for content, and the Site Editor for wider design changes. Add and arrange…
Read More

Read article →: WordPress editing tutorial: How to edit pages, posts and your website design