Tag

WordPress Plugins

Plugin recommendations, reviews, and best practices for extending WordPress.

18 articles

There are over 60,000 plugins in the WordPress repository. Most of them you don't need, and some of them will actively harm your site. The trick is knowing which ones are worth installing and which to avoid.

Our plugin articles focus on practical recommendations: security plugins that actually work, caching solutions that play nicely with managed hosting, and the occasional warning about plugins that cause more problems than they solve.

Explore topics
WordPress Hosting UK Business Small Business AI Visibility SEO Web Hosting Content Strategy Security AI Discovery Files WordPress
Security 15 May 2026

Avada Builder Just Patched a 1M-Site SQL Injection. The WooCommerce Deactivated Trap Is the Buried Lead.

Wordfence disclosed CVE-2026-4798 in Avada Builder this week, affecting over 1,050,000 WordPress installations. The headline is patch to 3.15.3. The buried lead almost nobody covered is the WooCommerce-installed-then-deactivated precondition that turns the SQL injection from a "1M sites at risk" panic into a much narrower exploit window. We have held Avada licences for years and patched our portfolio first. Here is what actually matters.

7 min read Read
WordPress 16 Mar 2026

WordPress 7.0's AI Experiments Plugin: We Tested Every Feature

We installed the AI Experiments plugin on WordPress 7 Beta 5 and tested all seven features: excerpt generation, alt text, image generation, review notes, content summarisation, title generation, and abilities explorer. Alt text generation is the standout. Here's what works, what doesn't, and which AI provider handles each task best.

8 min read Read
Security 10 Dec 2025

131,000 Attacks Target WordPress Sites via Sneeit RCE Flaw

A critical remote code execution flaw in the Sneeit Framework WordPress plugin (CVE-2025-6389, CVSS 9.8) has triggered 131,000+ attack attempts. Attackers are creating admin accounts and uploading backdoors. Here's how to check if you're compromised and what to do right now.

8 min read Read
Security 4 Dec 2025

King Addons Hack Lets Anyone Become WordPress Admin

A critical vulnerability in King Addons for Elementor (CVE-2025-8489) lets anyone create an admin account on your WordPress site. Over 48,400 exploit attempts logged since October. Here's how to check if you're compromised and lock it down.

9 min read Read
WordPress 26 Oct 2025

WordPress 6.9 Beta Preview (October 2025): What You'll Notice

WordPress 6.9 Beta 1 brought a Command Palette shortcut, instant back-button navigation, block-level comments, the Accordion block, and the AI Abilities API. This is the October 2025 beta preview, preserved for context. WordPress 6.9 launched 2 December 2025, see the live "what's new" coverage for the shipped feature set.

10 min read Read
WordPress 2 Oct 2025

Do You Still Need a Cookie Consent Banner in 2026?

Most UK websites don't need a cookie banner at all. The Data (Use and Access) Act 2025 came into force on 5 February 2026 with new low-risk-cookie exemptions and PECR penalties up to £17.5m. Here's when consent is legally required, when you can skip it, and what to do instead of annoying your visitors with popups.

9 min read Read
Back to all articles