WordPress Plugin Vulnerabilities in 2025: What to Actually Check Before You Install
WordPress ecosystem vulnerabilities hit an all-time high in 2025: over 11,000 disclosed, 91% in plugins. Here’s what to check before you install one.
WordPress ecosystem vulnerabilities hit an all-time high in 2025: over 11,000 disclosed, 91% in plugins. Here’s what to check before you install one.
WordPress 6.7 through 6.9 quietly shipped bcrypt hashing, browser prefetching, and real-time editor Notes. Here’s what actually changed in core.
Crawl budget used to be a concern mostly for enormous e-commerce sites with millions of URLs. In 2026 it’s relevant to almost everyone, for a reason that has nothing to do with site size: your pages aren’t just being crawled by Googlebot anymore. They’re being crawled by a growing list of AI bots, each with … Read more
I spend most of my working hours inside WordPress sites — diagnosing why a plugin conflict tanked someone’s Core Web Vitals, or why a theme update broke schema output. A pattern shows up constantly: sites treating SEO and performance as separate projects, when in 2026 they’re close to the same project. Performance is an SEO … Read more