wordpress

Google changed its JSON-LD extraction and now applies only one pass of HTML unescaping. Double-escaped entities are no longer unrolled, so the block stops parsing and the structured data disappears. How to measure your own corpus and how to encode it correctly.

Google splits site reputation manual actions by searcher location from 30 August 2026. Outside the EEA the demotion still hits the affected portion. Inside the EEA that impact does not apply; the section may rank independently. Why parasite SEO does not return.

WordPress 7.0 with AI Client against Astro 7 with the Rust compiler and Vite 8. Speed, cost, SEO and security compared, plus the real bill for our own Astro 6 to 7 migration.

A definitive 4-year Total Cost of Ownership (TCO) analysis, real-world Core Web Vitals benchmarks, Astro 7 GraphQL APQ architecture, and a 10-point executive decision matrix for choosing between decoupled and traditional WordPress.

A practitioner guide to the live public endpoint wppoland.com/mcp and the woocommerce-mcp server. How to connect AI assistants (Claude Desktop, Cursor) to WordPress without plugins or write risk, practical business applications, and edge deployment lessons.

Cloudflare analytics for one small agency site, 23 hours: 72.4% of requests carry no browser user agent, named search bots are 3.5%, and the edge cache hit ratio is 4%. What the numbers changed about how we run the site.

CVE-2026-65640 needs Author plus Imagick plus Ghostscript. File scanners miss remote JSON. Vibe-coded plugins skip review. Hardening is policy.xml, not another security plugin.

Poland's NIS2 implementation has applied since 3 April 2026. Its definition of a managed service provider covers remote administration, so it describes anyone who maintains someone else's WordPress. What the text says, and what it does not.

We measured the WordPress.org directory. 35,696 of 69,286 plugins have had no update in two years. About 2,100 of them still run on a thousand sites or more each.

WordPress.org holds every plugin release for up to six hours. Patchstack measures the median time to mass exploitation at five hours. The public record does not say whether a security patch is exempt.

The post editor is always iframed in 7.1, with no opt-out. What breaks in block JavaScript and asset enqueueing, and the fixes with runnable code.

We turned a static marketing site into a live, read-only Model Context Protocol server at POST /mcp. Not a store, a content site: why we did it, the Cloudflare Pages Function that runs it, hand-rolled JSON-RPC with zero SDK, and the read-only safety stance behind the request_quote tool.

We published @wppoland/woocommerce-mcp - a read-only Model Context Protocol server for WordPress and WooCommerce. Install from npm, wire Claude or Cursor, and let agents answer stock and order questions without write risk.

A YMYL diagnostic for WordPress sites: how to find fake stats, fabricated citations, duplicate AI pages, wrong dates, and invented team bios before they damage trust, compliance, or AI citations.

An anonymised rescue case: a B2B services site arrived with 38 active plugins, TTFB at 1.47s, and three AI-generated custom plugins on top. How we cut the stack to 21 plugins and brought median TTFB under 0.7s without a rebuild.

BFSG and the EU Accessibility Act require a published accessibility statement with a working complaint mechanism, not just a compliant front end. This is a copy-ready template structure mapped to EN 301 549 clauses and WordPress deliverables.

Failure patterns in vibe-coded WordPress plugins: missing nonces, unsanitised input, SQL concatenation, absent capability checks, and PHP files without ABSPATH guards. Anonymised audit examples for senior review.

Greg Ziółkowski proposed merging wp_knowledge and AI Guidelines into WordPress 7.1 core. Matt Mullenweg vetoed it. The Classic block phase-out was reversed. What agencies should actually do after Mary Lou shipped.

WordPress.org has cut the mandatory update cooldown from 24 hours to six, with work underway to skip it entirely when the Gandalf AI review finds no issues. What changed, and what agencies maintaining B2B sites should do about it.

Anne McCarthy's WordPress 7.1 roadmap was framed around collaboration, yet real-time collaboration slipped again. WordPress 7.1 Mary Lou shipped on 19 August 2026. What actually landed, what was cut, and what the canary-deployment debate still says about how WordPress is built.

From the room in Kraków and from the hard data: WordPress has slipped below 42 percent share and is losing for the sixth month running. The decline hits products, not services, and the smart move is migration readiness and a modern stack, not flight.

A buyer's guide: agency, freelancer or in-house team, what questions to ask before signing, how to judge performance and security, and who owns the rights to the code, design and content once the project is done.

Real-time collaboration was pulled from WordPress 7.0 two weeks before release. The 7.1 attempt was punted as well. WordPress 7.1 Mary Lou shipped on 19 August 2026 without live multi-user editing. The database problem, the testing strategy, and what agencies should do now.

Kevin Ohashi's Review Signal benchmarks returned in 2026 after a three-year gap, powered by a brand-new open-source load-testing platform. We break down the five price tiers plus WooCommerce, name the winners, name the hosts who sat it out, and translate the data for European agencies.

WordCamp Europe 2026 in Krakow drew 2,442 attendees from 81 countries and 779 contributors across 26 teams. A view from inside the WCEU Budget Team, the CERN keynote, the new meetup signals from Italy, Spain, and Costa Rica, the Local Team that made it work, and what Malaga 2027 means.

WordPress market share has been falling since late 2025, to 41.2 percent. A source-backed senior take: why this is not the death of the platform, who is really gaining, and what it changes for businesses and WordPress developers.

WordPress 7.0 added a Connectors screen that stores AI provider credentials, and some hosts auto-installed AI plugins. Here is the threat model and a hardening checklist.

Jean Galea says WordPress stopped being his automatic first choice. He is right about the symptom. The diagnosis of decline is wrong. The honest read from an agency that still ships WordPress: this is re-segmentation, not death.

The initial port from WordPress to Astro took weeks. The other eleven months went to redirects, hreflang, six-locale parity, and a build that outgrew Cloudflare's own runner. A migration field report.

Metorik founder Bryce Adams told WP Product Talk that the company's MCP integration drew 500 users within days of a quiet preview launch, faster than any feature he has shipped in ten years. He also said customers churning out of Metorik have an average MRR 40 percent lower than retained ones, suggesting AI is taking the commodity use cases, not the core ones. GravityKit just open-sourced Block MCP for block-level WordPress edits. The pattern is clear: in 2026, the plugin that ships an MCP server is the one that compounds. The plugin that bolts a chat box onto its admin is the one that gets cannibalised.

GuardingWP's inaugural State of WordPress Security 2026 report scanned 424 confirmed WordPress installs across 40-plus verticals. The headline finding is that more than half ship at least one plugin with a known unpatched CVE. Patchstack founder Oliver Sild said WordPress 7.0 will trigger an "absolute rush by hackers to steal API keys." This article reads both as evidence that the plugin economy is the structural problem and NIS2 plus DORA already encode the fix.

A focused May 2026 WordPress ecosystem update covering WordPress 7.0 RC4, StellarWP, Envato, WooCommerce AI infrastructure, Abilities API, MCP and security risks.

Takayuki Miyoshi, the creator of Contact Form 7, has confirmed that his next project Contactable.io will launch as a RESTful API on Cloudflare Workers. What it means for your WordPress stack, for GDPR, and for forms strategy in 2026.

How to pair WooCommerce as the commerce backend with an Astro front end for Core Web Vitals, carts, webhooks, and technical SEO. Architecture, PCI boundaries, and a deployment checklist without zero-latency fairy tales.

CRA covers products with digital elements. NIS2 covers entities. DORA covers financial entities. When all three apply at once, headless WordPress sits at the intersection. I sketch what the joint evidence package looks like in 2026.

Article 28 of Regulation 2022/2554 makes financial entities responsible for the ICT risk of every third-party they touch. I walk through the supplier due-diligence checklist I ship with WordPress engagements for banks and insurers in 2026.

Article 28(3) of Regulation 2022/2554 obliges financial entities to keep a Register of Information on every ICT third-party arrangement. The fields a WordPress agency must populate to be entered.

How to ship a Tailwind v4 design system inside WordPress 6.7+ block themes without breaking editor parity, theme.json tokens or JIT compilation. A practitioner playbook covering setup, block patterns, and the gotchas.

A practitioner walkthrough to ship a WordPress site that ranks in 2026. Technical SEO, Core Web Vitals, schema, AEO, GEO, hreflang and the sequence that gets it right the first time.

Four working approaches to multi-language WordPress in 2026, with the trade-offs that decide which one fits your site. WPML, Polylang, MultilingualPress, and headless on Astro / Next.js compared by editor experience, SEO, performance and operational cost.

Article 21 of Directive 2022/2555 lists ten risk-management measures every in-scope entity must implement. I map each one to a WordPress agency control, with the evidence file each one requires for audit.

Article 23 of Directive 2022/2555 sets three reporting deadlines: an early warning at 24 hours, a full notification at 72 hours, a final report at one month. What the WordPress agency must produce inside each window.

NIS2 (Directive 2022/2555) and DORA (Regulation 2022/2554) cover similar ground but with different mechanics. Where they overlap, where they diverge, and how a WordPress agency satisfies both with one evidence trail.

How to start as a WordPress developer in 2026. Local environment, theme and plugin development, REST API and headless paths, security and Core Web Vitals. A practitioner playbook that does not waste your first month.

Article 23 of NIS2 gives 24 hours from awareness to file an early warning with the CSIRT. This playbook lists the WordPress-specific signals that trigger the clock and the template I file when the clock starts.

A practical walkthrough of building a Model Context Protocol server in front of WooCommerce. Tool definitions, catalogue and order endpoints, schema.org alignment, Zod validation, and a Cloudflare Workers deployment that an AI agent can talk to.

A working set of authentication patterns for Model Context Protocol servers. OAuth for human-delegated agent access, scoped API tokens for B2B and headless flows, when to require auth versus stay anonymous, rate limiting, and what to log.

A decision guide for picking between Model Context Protocol and a REST API when the consumer is an AI agent. Typed surface vs JSON shape inference, mutating actions, authentication, and the hybrid pattern that often beats both.

A four-week migration playbook for putting a Model Context Protocol server in front of an existing WordPress REST API. Endpoint audit, MCP scaffold, parallel-run, cutover, and the observability that makes the move safe.

How to design Zod schemas for MCP tool inputs and outputs, including idempotency keys, error response shapes, and the typed agent contracts that prevent silent drift between the MCP server and a WooCommerce origin.

After Vercel's IPO and rising European concern about US jurisdiction, what do European WordPress developers actually pick in 2026. Cloudflare, Astro, and the case against the default.

The Shopify Plus vs WooCommerce headless decision in 2026 is no longer a binary "platform vs custom" trade-off. Both can run headless, both integrate AI, both ship at the edge. The real axes are control, total cost over five years, and exit strategy. This article walks the matrix with confirmed platform facts.

Six to sixteen weeks for typical engagements, with a four-phase shape: discovery, scoping, build and cutover, tuning. The variables are catalogue size, integration count, URL preservation, and editorial team readiness, not framework choice.

Automattic published the case for WordPress as the operating system of the agentic web. The post celebrates a 43% market share and full MCP support. It does not answer the most basic question. Who pays for the tokens once AI lands in the dashboard of a non-technical site owner.

The NIS2 Directive (2022/2555) was to be transposed into national law by 2024-10-17. The DORA Regulation (2022/2554) applies directly from 2025-01-17. For a WordPress site operator this means specific obligations if the site relates to a regulated entity. We explain it without panic, with references to the texts of the acts.

WCAG 2.2 was first published as a W3C Recommendation on 2023-10-05; the current published version on www.w3.org/TR/WCAG22/ is dated 2024-12-12. The EU Accessibility Act (Directive 2019/882) applies from 2025-06-28. Germany's Barrierefreiheitsstärkungsgesetz transposes it into federal law on the same date. This article is the implementation map for a WordPress site in 2026.

Cloudflare Workers runs JavaScript and WebAssembly at hundreds of data centres in 100+ countries worldwide. Pairing Workers with a WordPress origin moves the read path off the WordPress server and turns WooCommerce into an edge-rendered store. Here is how the architecture works, where it breaks, and what to measure before adoption.

Senior B2B median in Polish IT is 24 360 PLN net, mid 18 000 PLN, junior 9 125 PLN. But "WordPress engineer" is not a single job. What WordPress, WooCommerce, Astro and headless really pay in 2026, with reference to No Fluff Jobs and Just Join IT reports.

Polish senior engineering is the post-Brexit nearshore standard for UK and DACH buyers. The market data behind that claim is concrete: 60 percent senior share, 60 percent fully-remote work, +44 percent IT job growth in 2025. Here is what those numbers mean for an agency hire.

Incremental Static Regeneration and Server-Side Rendering are not interchangeable. ISR wins when content changes on a predictable cadence and traffic is high. SSR wins when the page is personalised or session-driven. The choice is per-route, not per-stack.

In a headless WordPress build, the sitemap and the canonical URL must be rendered by the front end, not the WordPress origin. This is the specific pattern that prevents two sitemaps and two canonical URLs from competing.

WordPress.com offers five plan tiers in 2026, from free to enterprise. This guide breaks down what each tier includes, where the hidden costs are, and when self-hosted WordPress is the better investment.

622 WordPress agency owners across 51 countries shared their revenue, pricing, growth barriers, and AI adoption data. Here are the most important takeaways from The Admin Bar's 2026 survey.

Headless WooCommerce shifts cost and complexity. It pays back when mobile Core Web Vitals are tied to revenue, when the catalogue stabilises, and when a senior front-end engineer is in the loop. It does not pay back for tiny shops or for sites where the bottleneck is not the front.

Headless WordPress shifts cost from one column to another, it does not delete it. Migration cost, edge runtime, and senior engineering time form the new bill. Here is the framework we use with clients to decide if the trade pays back.

When to migrate from Magento Adobe Commerce to WooCommerce headless in 2026: the criteria, the technical path and the mistakes that quietly cost international retailers money.

Headless WordPress migrations rank well when they preserve seven specific signals: canonical URLs, hreflang, sitemap output, structured data, redirect history, robots.txt parity, and image search.

When a website rebuild makes sense: technical, business, and SEO signals that show further patching is costing more than a planned rebuild.

Next.js and Astro both sit in the Adopt ring of our Tech Radar Q4 2026. Deciding between them for a WordPress headless front end is not a taste question. It is a question about interactive surface area, build cost, and whose hiring market you are in.

WordPress 7.0 with AI Client vs Astro 6 after Cloudflare acquisition. Speed, cost, SEO and security comparison. My take after 20 years as a WP developer - when to migrate and when to stay.

A detailed comparison table of EmDash CMS and WordPress across architecture, security, plugins, AI features, content model, hosting, and ecosystem maturity.

EmDash is a new open-source TypeScript CMS built on Astro by Cloudflare. It promises sandboxed plugins, serverless architecture, and AI-native features. What does it mean for WordPress?

WordPress 7.0 RC1 launches amid core committer concerns, market share drops below 43% for the first time since 2022 as AI-built sites surge, and Elementor launches Angie - the week's biggest WordPress news.

Gutenberg blocks, synced patterns, full site editing, custom templates, and block plugins for teams that want a cleaner WordPress editing system.

A comprehensive WordPress security hardening guide for 2026 covering server configuration, authentication with Passkeys, WAF setup, CSP headers, database protection, headless security, and a 25-point audit checklist.

Practical notes on WordPress Multisite for enterprise deployments. Learn architecture patterns, scaling to 1000+ sites, security hardening, domain mapping, user management, and cost optimization for franchise, university, and government networks.

Master every aspect of WooCommerce performance optimization - from database tuning and Redis caching to cart fragment fixes and headless architecture. Practical steps with measurable results.

How to register, discover and execute WordPress abilities with JSON Schema, permission callbacks and authenticated REST endpoints.

Astro 5 or Next.js 15 - which framework should you choose in 2026? In-depth comparison of performance, architecture, use cases, and when to use each for WordPress Headless projects.

Which Schema.org types matter for AI search engines? Practical guide to AEO and GEO optimization - making your content discoverable by ChatGPT, Perplexity, Google AI Mode, and answer engines.

How to optimize Interaction to Next Paint (INP) on WordPress sites. Practical fixes for the newest Core Web Vital metric that directly impacts Google rankings.

Architecture for a WooCommerce catalog on Astro 7. What stays in wp-admin, which plugins die with the theme, Store API versus GraphQL, and why checkout stays on WooCommerce.

WordPress Playground now supports MCP (Model Context Protocol), letting AI agents like Claude and Gemini install plugins, run PHP, and manage WordPress directly in the browser. What this means for developers and agencies.

How to migrate your website to Next.js or Astro? Complete migration guide from WordPress, Joomla, Drupal and legacy frameworks. PageSpeed 95-100, SEO preservation, zero downtime.

Roots launched WP Packages, an open source Composer repository for WordPress plugins and themes. Here is what it means for Bedrock, Sage, and Trellis workflows in 2026.

WordPress Playground is no longer just a demo tool. An analysis of how Adam Zielinski's vision connects testing, private workspaces, AI, and new WordPress workflows in 2026.

Migrate from Shopify to WooCommerce without losing data, customers, or SEO rankings. Covers product transfer, 301 redirects, URL mapping, WP-CLI automation, and post-migration checklist.

CloudFest Hackathon 2026 breaks records with the number of projects and a new schedule. Learn about the details of the largest event for the open source and WordPress community in Europe.

Discover how Nick Hamze is transforming the way millions of WordPress users find quality plugins. Learn about the Hidden Gems initiative that could revolutionize the plugin ecosystem.

Compare the best image optimisation plugins for WordPress, configure WebP/AVIF delivery, extract critical CSS, and set up LiteSpeed Cache for maximum PageSpeed scores.

Yoast introduces breakthrough Schema Aggregation feature in collaboration with Microsoft NLWeb. Learn how the new technology will change the way AI and search engines interpret WordPress content.

Set up WooCommerce for the UK market with the right payment gateways, Royal Mail shipping integration, VAT configuration, and Making Tax Digital compliance. Practical code examples included.

What is a WordPress developer, what does one do, and will AI replace the role? Honest look at rates, skills, and the real impact of AI on WordPress development in 2026.

WordPress 7.0 codenamed Armstrong shipped in May 2026 with foundational AI infrastructure (Abilities API, AI Services Registry, AI Client), a modernised dashboard, Command Palette everywhere, block-level custom CSS and the Icons block. Real-time collaboration was removed during the release-candidate cycle. This guide is the post-release recap of what changed, what to test, and what to wire up.

A practical notes covering essential WordPress best practices for security, SEO, and performance using only core features.

Protect your business data by choosing Open Source CMS over closed SaaS platforms in the era of AI. Learn about data ownership, GDPR compliance, and vendor lock-in risks.

A hands-on guide to auditing WordPress sites for WCAG 2.2 compliance using automated tools and manual testing. Complete workflow from assessment to remediation.

Technical guide on using WordPress as a Headless CMS for React Native and Expo mobile applications.

Learn how to use WordPress Playground to run WP in the browser via WebAssembly. A complete guide for 2026 testing and demos.

Join the 24th meeting of WordPress enthusiasts in Gdynia. Three days of workshops, presentations, and networking with experts from across Poland. Registration now open!

Learn when Astro DB and WordPress make sense together, how the hybrid architecture works, and what trade-offs matter for performance and editorial workflows.

Master GEO strategies to get your content cited by AI engines like ChatGPT, Perplexity, and Gemini. Learn how to optimize for the future of search.

Understand the EU CSRD requirements and how to optimize WordPress for digital sustainability and low carbon footprint.

Learn how to build a WordPress community for business growth with BuddyBoss, FluentCommunity, and proven monetization strategies. Own your audience and escape algorithm changes.

I've been building WordPress sites for over a decade, and one thing never changes: the 'out of the box' setup is too heavy. Here is how I prune the unnecessary scripts and styles safely.

A comprehensive guide to WordPress mental models that help developers compress complexity, make better architectural decisions, and debug more effectively.

Germany's Barrierefreiheitsstärkungsgesetz applied from 28 June 2025. It transposes EAA Directive 2019/882 into national law. I unpack how it affects WooCommerce stores in DE and the four plugin failure patterns I see in audits.

Technical guide to speeding up WordPress sites: hosting, caching, PHP-FPM, Redis, CDN, database optimization, and Core Web Vitals improvement.

Moving your WordPress website can be daunting, but with the right knowledge and preparation, it becomes manageable. Whether changing domains, upgrading hosting, or restructuring site architecture, this comprehensive guide covers every step.

The European Accessibility Act has applied since June 28, 2025. What it means for a WordPress site: who is in scope, which exemptions are real, and where WCAG 2.1 AA actually bites in practice.

Critical analysis of the official WordPress in 2025 report - what was included, what was omitted, and why the community deserves more transparency.

Old methods (ua.js) no longer work. How to properly add GA4 tracking in WordPress? Plugin, GTM, or code? Plus Consent Mode v2 and Server-Side Tracking.

Comprehensive summary of WordCamp Europe 2023 in Athens - over 3000 participants, 64 sessions, WordPress Playground demo, and insights from the Polish delegation.

Why you should regularly update WordPress - security, performance, new features. What happens if you don't update and how to do it safely.

Update crashed your site? Don't panic. See 3 proven ways to rollback WordPress core, plugins, or themes to a previous version.

Comprehensive guide to safely restoring WordPress after failed updates. Learn backup strategies, manual recovery via FTP/phpMyAdmin, plugin-based restoration, and prevention techniques.

Practical notes on WordPress SEO - key optimization aspects, plugins, practical positioning steps, and beginner's guide to ranking improvement.

WordPress 4.9 Tipton was the last major release before Gutenberg. Here is what it changed, and why it still matters in hindsight.

WordPress 4.9 was "the calm before the storm." We analyze this pivotal moment in WP history that prepared the ground for the block editor. What changed since? How did the ecosystem evolve?

Learn how to reduce fake bot traffic in WordPress analytics with server rules, log review, and safer filtering practices.

Blogging is not dead. In the AI era, an authentic human voice is more valuable than ever. See how to build a personal brand on WP.

Compare the best WordPress plugins in 2026 for security, SEO, cache, backups, and image optimisation, with practical advice on what to install and what to avoid.

Slow loading site? Here's the optimization roadmap: Database, HTTP/3, Cache and Script Defer. Speed up your service effectively.

Master the WordPress admin panel like a pro. Complete dashboard walkthrough, customization techniques, user role capabilities, and client-proofing strategies.

How to safely move a site to new hosting? When is it worth enabling a network (Multisite)? Guide for administrators.

Comprehensive WordPress admin guide. Learn how to secure your site without plugins, configure Google Search Console and speed up loading.

Master Apache mod_rewrite with this comprehensive guide. Learn 301 vs 302 redirects, fix redirect loops, optimize performance, and implement secure URL redirections for WordPress.

A practical WordPress snippet for adding parent and ancestor page slugs to body_class(), so you can target site sections with cleaner CSS.

Hide the WordPress admin bar for subscribers, customers, and other non-admin users with a simple PHP snippet for cleaner frontend UX.

Where did widgets go in the new WordPress? Guide to adding elements to sidebar and footer in the Block Themes era.

How to properly import and display video in WordPress? Why don't .mov files from After Effects work? Guide to codecs and compression for the web.

Compare WordPress block themes and classic themes in 2026. See when FSE makes sense, when classic PHP themes still win, and how theme.json changes theme development.

Old methods (ua.js) no longer work. How to correctly add GA4 tracking in WordPress? Plugin, GTM, or code? Plus Consent Mode v2 and Server-Side Tracking.

How to retrieve and display a list of posts from a specific category in WordPress? Learn WP_Query, get_posts and custom loops. Code examples and optimization.

Quick PHP snippet: How to display just the category name without the anchor tag (link)? Explanation of get_the_category() and separators.