WordPress Insights

Our Blog & Resources

Expert advice, security warnings, and performance guides to help you manage your WordPress site successfully.

2 Sep 2026
•
Peter Claridge

Critical GiveWP flaw puts WordPress donation sites at risk of server takeover

A critical vulnerability in the GiveWP WordPress donation plugin could allow attackers to run operating-system commands on affected servers. Tracked as CVE-2026-82222 and rated CVSS 10.0, the flaw affects versions up to 4.16.7.1. GiveWP has more than 100,000 installations, making urgent updates important for charities and other organisations. Key takeaways GiveWP versions through 4.16.7.1 are…
Read More

Read article →: Critical GiveWP flaw puts WordPress donation sites at risk of server takeover
31 Aug 2026
•
Peter Claridge

WordPress tutorial video YouTube: a beginner’s guide to learning WordPress step by step

Key Takeaways A good WordPress tutorial video YouTube search can give you a practical starting point, but progress comes from following along rather than watching passively. Use a safe practice site, check that the lesson matches your setup, and build one small website as you learn. Choose a tutorial aimed at your experience level and…
Read More

Read article →: WordPress tutorial video YouTube: a beginner’s guide to learning WordPress step by step
31 Aug 2026
•
Peter Claridge

Fake reCAPTCHA Trap Turns WordPress Websites into Windows Credential Theft Machines

Hundreds of compromised WordPress websites are reportedly being used to display fake reCAPTCHA checks and deliver malware to Windows visitors. The campaign combines malicious plugins, browser persistence, blockchain-hosted instructions and “ClickFix” social engineering to install Amatera, an information stealer designed to capture browser passwords and other sensitive data. Key takeaways Fake CAPTCHA pages instruct visitors…
Read More

Read article →: Fake reCAPTCHA Trap Turns WordPress Websites into Windows Credential Theft Machines
29 Aug 2026
•
Peter Claridge

Critical Pods flaw puts 100,000+ WordPress sites at risk of admin takeover

A critical vulnerability in the Pods WordPress plugin could let attackers access administrator-level functions without logging in. Tracked as CVE-2026-19598 and rated 9.8 out of 10, the flaw affects more than 100,000 installations. Website owners should update immediately and check for signs of unauthorised access. Key takeaways CVE-2026-19598 affects Pods versions up to and including…
Read More

Read article →: Critical Pods flaw puts 100,000+ WordPress sites at risk of admin takeover
26 Aug 2026
•
Peter Claridge

WordPress admin accounts at risk as miniOrange SAML flaws come under attack

Two serious flaws in the miniOrange SAML 2.0 Single Sign-On plugin for WordPress are being targeted in opportunistic attacks. The vulnerabilities can let unauthenticated attackers impersonate existing users, including administrators, and gain access to protected WordPress dashboards. Site owners should check their plugin edition and update manually where necessary. Key takeaways CVE-2026-61979 and CVE-2026-15981 can…
Read More

Read article →: WordPress admin accounts at risk as miniOrange SAML flaws come under attack
25 Aug 2026
•
Peter Claridge

Critical Pods plugin flaw could hand WordPress administrators to attackers

A critical vulnerability in the Pods – Custom Content Types and Fields plugin could let unauthenticated attackers reset administrator passwords and take over vulnerable WordPress websites. Tracked as CVE-2026-19598, the flaw affects more than 100,000 installations and has a CVSS score of 9.8. Site owners should update immediately. Key takeaways CVE-2026-19598 affects Pods versions up…
Read More

Read article →: Critical Pods plugin flaw could hand WordPress administrators to attackers
13 Aug 2026
•
Peter Claridge

WordPress tutorial video download: how to find, save and watch lessons offline

Key Takeaways A thoughtful wordpress tutorial video download can make learning easier when your internet connection is unreliable or your schedule is busy. The safest approach is to use authorised download tools and organise lessons around a real site project. Choose lessons that match your current WordPress knowledge. Prefer official platforms and clearly licensed material.…
Read More

Read article →: WordPress tutorial video download: how to find, save and watch lessons offline
12 Aug 2026
•
Peter Claridge

WordPress 7.1 accessibility update could affect some admin plugins

WordPress 7.1 is set to introduce a long-awaited accessibility improvement to the admin area, but the change may affect a small number of plugins and custom dashboards. Most websites should see no public-facing impact. However, site owners and developers should test their WordPress maintenance plan before upgrading production sites. Key takeaways WordPress 7.1 changes the…
Read More

Read article →: WordPress 7.1 accessibility update could affect some admin plugins
11 Aug 2026
•
Peter Claridge

Canonical WordPress: how to use canonical URLs to improve SEO

Key Takeaways Canonical URLs help search engines understand which version of similar WordPress pages should be treated as the main one. They are useful, but they work best when they agree with redirects, internal links and sitemap entries. Use one clear, preferred URL for each important piece of content. Check the canonical tag in the…
Read More

Read article →: Canonical WordPress: how to use canonical URLs to improve SEO
10 Aug 2026
•
Peter Claridge

BdThemes WordPress supply-chain attack leaves sites exposed to rogue admins and webshells

A supply-chain attack involving seven BdThemes WordPress plugins has allowed attackers to create hidden administrator accounts and install webshells on affected websites. The campaign reportedly abused a poisoned remote promotional feed rather than altered plugin files, making the compromise difficult to spot through routine plugin checks alone. Key takeaways The incident matters because it targeted…
Read More

Read article →: BdThemes WordPress supply-chain attack leaves sites exposed to rogue admins and webshells