Web hosting
Rate-Limit wp-login.php on Cloudflare's Free Plan
Add one Cloudflare Free rate limiting rule in front of wp-login.php, test it safely with curl, read the events, and avoid locking out your own admin login.
wordpress
Stories and guides about wordpress.
40 articles
WordPress
WordPress Autoloaded Options: Measure Before You Change Them
Measure WordPress autoloaded options without exposing their values. Learn how version-specific flags work, what Site Health’s warning means, and how to investigate safely.
WordPress
Are your WordPress auto-updates actually running? Check now
Auto-updates can be switched on and still never run. Check your version, Site Health, WP-Cron and wp-config.php settings in about 15 minutes.
WordPress
How to Turn Off or Control AI Features in WordPress 7.x
WordPress 7.x ships a built-in AI Client. Find every AI key in Settings > Connectors, protect it, limit AI to admins, or turn it off with one wp-config line.
Regional guides
India DPDP: Set Up WordPress Privacy Tools Before May 2027
India's DPDP duties are set for 13 May 2027, not November 2026. Set up your WordPress privacy page and test the Export and Erase Personal Data tools now.
Regional guides
UK Cookie Rules: Audit Your WordPress Site Against ICO Guidance
A step-by-step cookie audit for UK WordPress sites: list every cookie and script, check the five PECR exceptions, and decide keep, consent or remove.
WordPress
Add 4 Missing Security Headers on Apache or Nginx and Check Them
Add nosniff, Referrer-Policy, Permissions-Policy and X-Frame-Options on Apache or Nginx, handle inheritance and iframe permissions, then verify real GET responses.
WordPress
WordPress Open Registration and Admin Default Role Check
If anyone can register on your WordPress site and new users get Administrator or Editor, close the gap. Check it in wp-admin or WP-CLI, then review existing privileged accounts safely.
WordPress
Get the WordPress 7.1.3 and 7.1.4 Fixes and Verify Them With WP-CLI
WordPress 7.1.3 and 7.1.4 both shipped security fixes in October 2026. Back up, update, then prove it worked with wp core version and verify-checksums.