Latest insights

WordPress Development Blog

Expert tips, tutorials, and insights for WordPress developers.

Twelve months migrating from WordPress to Astro on Cloudflare Pages

Twelve months migrating from WordPress to Astro on Cloudflare Pages

The initial port from WordPress to Astro took weeks. The other eleven months went to redirects, hreflang, six-locale parity, and a build that outgrew Cloudflare's own runner. A migration field report.

Training a Flux LoRA for blog heroes: three approaches that failed first

Generic text-to-image gives you a stranger. A face reference drifts. A LoRA that renders laptop screens looks uncanny. What finally worked for a consistent editorial hero across hundreds of posts, and why.

Cloudflare Pages silently drops _redirects past 100KB

Cloudflare Pages documents a 2,000-rule limit on _redirects, but the cap that actually bites is 100KB of file size. Rules past the byte cutoff are dropped at deploy with no warning. A production diagnosis.

AI translation in WordPress: why it breaks multilingual SEO

AI translation in WordPress: why it breaks multilingual SEO

AI translation in multilingual WordPress nails 99 percent of prose, then breaks the structural fields - slug, canonical URL, hreflang, taxonomy terms, redirect map. Operations report from 6 locales.

Why shipping an MCP server in your WordPress plugin is the AI move that survives

Why shipping an MCP server in your WordPress plugin is the AI move that survives

Metorik founder Bryce Adams told WP Product Talk that the company's MCP integration drew 500 users within days of a quiet preview launch, faster than any feature he has shipped in ten years. He also said customers churning out of Metorik have an average MRR 40 percent lower than retained ones, suggesting AI is taking the commodity use cases, not the core ones. GravityKit just open-sourced Block MCP for block-level WordPress edits. The pattern is clear: in 2026, the plugin that ships an MCP server is the one that compounds. The plugin that bolts a chat box onto its admin is the one that gets cannibalised.

53 percent of WordPress sites run unpatched CVEs: GuardingWP 2026 audit

53 percent of WordPress sites run unpatched CVEs: GuardingWP 2026 audit

GuardingWP's inaugural State of WordPress Security 2026 report scanned 424 confirmed WordPress installs across 40-plus verticals. The headline finding is that more than half ship at least one plugin with a known unpatched CVE. Patchstack founder Oliver Sild said WordPress 7.0 will trigger an "absolute rush by hackers to steal API keys." This article reads both as evidence that the plugin economy is the structural problem and NIS2 plus DORA already encode the fix.

More Articles

NIS2 and DORA on WordPress: what a site must meet in 2026

NIS2 and DORA on WordPress: what a site must meet in 2026

The NIS2 Directive (2022/2555) was to be transposed into national law by 2024-10-17. The DORA Regulation (2022/2554) applies directly from 2025-01-17. For a WordPress site operator this means specific obligations if the site relates to a regulated entity. We explain it without panic, with references to the texts of the acts.

WordPress 7.0 Armstrong shipped: AI infrastructure, Abilities API, and what actually changed

WordPress 7.0 Armstrong shipped: AI infrastructure, Abilities API, and what actually changed

WordPress 7.0 codenamed Armstrong shipped in May 2026 with foundational AI infrastructure (Abilities API, AI Services Registry, AI Client), a modernised dashboard, Command Palette everywhere, block-level custom CSS and the Icons block. Real-time collaboration was removed during the release-candidate cycle. This guide is the post-release recap of what changed, what to test, and what to wire up.

Core pathways

Start from the strongest topic pillar

This section routes users and crawlers into the service pages and topic archives that carry the strongest WordPress, SEO, and performance clusters.