Knowledge base
Practical advice on security, performance and maintenance of websites. No marketing fluff, just specifics.
Eight vulnerabilities in packages you never installed. npm audit in practice
npm audit gives you a number, but the decision is yours. How to read the output, what to do when the suggested fix rolls your project back a dozen releases, how to force a safe version of a transitive dependency and why a lockfile can pass locally and break your deployment.
WordPress 7.1.2 patches a critical flaw. No login needed, every version since 4.7 affected
CVE-2026-87902 is a critical vulnerability in WordPress core that can be exploited without an account and, under common conditions, leads to remote code execution. Who is affected, how to check your site in two minutes and how to update without surprises.
PHP 8.2 loses support on December 31. Which PHP version for WordPress in 2027
PHP 8.2 security support ends December 31, 2026, and PHP 8.1 has been unpatched since December 2025. A PHP version table with dates, the real risks of running old PHP, a clear recommendation and a safe upgrade procedure that won't break your site.
EU AI Act from August 2, 2026. What to change on your WordPress site if you use AI
On August 2, 2026 new transparency obligations under the EU AI Act start applying. They cover every European company with an AI chatbot on its site (Intercom, Drift, HubSpot, Crisp), AI-generated images from Midjourney or articles written with ChatGPT. Check whether they apply to you, what the fines up to EUR 15 million are and how to implement the changes in WordPress in three ways: ready-made plugin, your existing chat tool or your own code.
AI agent in your WooCommerce store. How MCP works and whether to enable it
WooCommerce 10.8 ships May 26, 2026 with MCP and the Agentic Commerce Protocol. What it means, how a ChatGPT or Claude agent buys at your store, whether you need to act.
WordPress 7.0 ships May 20. What actually changes and what it'll break on your site
WordPress 7.0 recommends PHP 8.3, adds a Web Client AI API and simplifies block registration. Change list, breaking changes and the right upgrade order.
Generative Engine Optimization. How to land in the answers from ChatGPT, Claude and Perplexity
AI assistants now answer questions instead of sending people to Google. What to do so your company shows up in those answers: llms.txt, JSON-LD, well-known/agent.json, robots for GPTBot and ClaudeBot. Concrete steps and code, not marketing fluff.
How to change the domain in WordPress. A complete technical guide
Changing a WordPress domain step by step: wp-config.php, WP-CLI search-replace, SQL queries, 301 redirects, the SSL certificate and the most common pitfalls.
Securing WordPress. A checklist for administrators
WordPress hardening from the ground up: updates, 2FA, security headers, file permissions, wp-login, XML-RPC, REST API and monitoring. Concrete commands and configurations.
Why your website is slow. Diagnosis and fix
Causes of slow page loads: TTFB, uncompressed images, render-blocking CSS/JS, missing cache, slow hosting. Diagnostic tools and concrete fixes.
How to choose hosting. What actually matters
Renewal price, backups, site isolation, support response time. The hosting selection criteria that really matter. Without the marketing noise.