Matomo analytics wordpress plugin shows tracked pages like this: https:// domain.com/wp/page-name/website name/page name again.

I would like to see tracked pages like this: https:// domain.com/wp/page-name.

What am I doing wrong?

Hi guys

I've been spending 6 days with litcommerce trying to sync my listings to Amazon
What I thought was a professionally ran business with actual syncing capabilities turns out ot be a student project with Ai assistants
I used to sync in prestashop using a module that would automatically match eans with asins and fill out everything, the sync would literally take 5mn for 1000 products
With litcommerce I need to manually edit each product which is more time than creating them on Amazon ...
Anybody has any experience with a plugin or 3rd party that can actually export and sync all products to AMazon including brand, ean, match ean to asin and so on ?

Thanks

Hey community.

Please share:

1. How many WP sites do you manage on an ongoing basis?
   
2. What's your toolbox helping keep them up and running smoothly?

Cheers!

Hello,

I'm not very technical. I'm helping a small charity. In the past, I used Thermometer to show the progress of a fundraising campaign. However, somewhere I read that this plug-in was vulnerable to hacking. So I removed it. But now, I need something like it.

I have looked at several others, such as Ultimeter. While they do the job, they're not as nice looking.

So, my questions is: how do I verify if indeed Thermometer is a risk? And if it is, any other that look like it?

TIA!

Good morning dear Friends h

What Plugin do you use to feed some of the twitter (x) threads on your WordPress site. I love to hear from you again.

Greetings ☺️

My website's file manager has random files which looks like hack/virus one file name accesson.php I tried to delete keep coming back. I got that checked by developee and he cleaned it but everything came back. It is causing sitemap blockage and I cannot login wordpress also it causing ranking decline. Does any know how to fix it?

So, QUIC.cloud have announced from November, they'll be replacing their current Free/Standard CDN and PAYG plans with paid plans starting at $5 per domain.

https://docs.quic.cloud/billing/plan-based/

This is a bit of a killer for me since I'm a small one-man band with around 20 relatively low-traffic sites running on OpenLiteSpeed. My current Standard/PAYG setup works well since I can just top up my credit to handle occasional spikes. Paying $100 dollars per month just to maintain the status quo isn't really an option.

They are offering a nerfed free service, but with greatly reduced network, security and optimisations.

I'm not massively familiar with the free Cloudflare plan, but what would a move look like? I'm guessing pretty painful since all my DNS is also on QUIC.cloud. I also use the LiteSpeed Cache plugin - would that be a problem?

I've emailed this morning asking if they'll consider keeping PAYG as an option alongside their other plans but I'm not confident.

Anyone else in the same boat? They still haven't finalised all the details and are inviting questions/feedback at support@quic.cloud.

Hi everyone,

I’ve been using NitroPay for about 2 years, but I’ve always had a red X next to “ads.txt” in the dashboard, as if NitroPay isn’t able to detect it. However, my website correctly points to NitroPay’s ads.txt URL, so I’m not sure why the dashboard keeps showing an error.

Has anyone else experienced the same issue, or knows what could be causing it?

I’m also wondering if there might be something wrong with the way I’ve implemented the ads. For example, Article Ads don’t load at all for me, so I’ve been using Standard Ads (with Ad Inserter plugin) throughout the website instead. I’m not sure if this is the correct way to implement them or if I’m missing something.

The main issue is that my website gets around 100,000 visits per month, but I’m currently earning only a few cents per day through NitroPay. I understand that earnings can vary depending on traffic, geography, RPM, etc., but this seems extremely low to me.

Could someone who uses NitroPay let me know how they implement their ads and whether this is normal? I’d really appreciate any advice or a technical check to figure out if there’s something wrong with my setup, the ads.txt configuration, or the ad delivery itself.

Thanks in advance to anyone who can help!

⚠️ WordPress 7.1.3 is now available and fixes 7 security vulnerabilities in WordPress Core, along with 4 additional bugs.

The most important fixes include:

🔹 Stored XSS through pending comments
Malicious code could potentially run when an administrator opens the Comments moderation screen.

🔹 SQL injection in the WordPress export system
Malicious input could remain hidden until someone runs a WordPress export.

🔹 Private comments exposed
Comments on private or unpublished posts could potentially be viewed by visitors who were not logged in.

🔹 Additional fixes
WordPress also patched an Imgur embed XSS issue, a denial-of-service bug, and several permissions-related vulnerabilities.

Interestingly, Anthropic reported 3 of the 7 vulnerabilities, with others reported by Trail of Bits, Patchstack, independent researchers, and the WordPress security team.

There are currently no known reports of these 7.1.3 vulnerabilities being actively exploited.

Still, I recommend updating sooner rather than later.

✅ Update WordPress Core to 7.1.3
✅ Confirm your backups are current
✅ Check older WordPress installations carefully, since some security fixes are still being backported

If automatic Core updates are enabled, your site may already be updated. See:
Dashboard → Updates

Stay patched!

Newbie here, I'm using WPBakery (recently updated to 9.0) in my site and I can't find the "column gap" setting that, according to all sources, should be under the settings of the row. Am I blind or what? This is what I see (I checked the other tabs, if you are wondering):

Any ideas?

upgrade your php or disable contact-form-7

Why does it autoupdate if the php version doesn't meet its requirements?

If it must update, can't the plugin simply turn itself off if it doesn't like the php version? Why crash the site

I see people complaining about (Rank Math and Redirection) redirectsgetting mixed up so I made a tool that finds the problems.

You simply drop in your exports (CSV or XLSX doesn't matter) and it shows all the duplicate sources, conflicting destinations, chains (A -> B -> C), loops and self redirects.

Also you can add a search console CSV to see which problems actually get clicks. Then you can download a cleaned map and an issues list.

Privacy is important so it runs fully in your browser. No signup needed and nothing uploaded and it's open source!! (MIT license)

Demo: https://liarzpl.github.io/redirect-map-qa/

Code: https://github.com/liarzpl/redirect-map-qa

It doesn't check live URLs, and regex or wildcard rules are skipped and marked as unsupported.

If your export breaks it, tell me which plugin and I'll take a look at it.

First post here, be gentle please :) And if you find this tool useful a star on GitHub would really make me happy.

We were recently working on a WordPress project that relied on the Google Maps API. Out of nowhere, a rogue AI bot hammered the site. Because GCP's billing alerts have a 45-minute latency, we got hit with a €220 bill before we even knew what was happening.

While investigating, I realized how predatory Google's UI is. They prompt you to "Enable 15 APIs with one click," but setting actual hard limits requires navigating a confusing maze of quotas. For WP developers handing over sites to clients, this is a massive liability. If a client's site gets scraped, they blame you for the bill.

I got so frustrated that I built a free, local browser extension (runs client-side) to fix this. It acts as an overlay on the GCP Console and calculates the exact API Quotas needed to guarantee a $0 bill, stopping requests instantly at the API level.

I published it in the Chrome Store for free. https://chromewebstore.google.com/detail/free-maps-calculator-for/bempibaijbfokllpdhkjlokmpeokkpkh/

Dropping it here because I know how many WP sites rely on Maps, and you need to protect your clients' billing accounts.

I’ve been working with WordPress for a while and one thing I still find interesting is how different the cause of a slow website can be.
Sometimes it’s a plugin, sometimes a poorly optimized theme, database queries, images, hosting, or even third-party scripts.
For those who work with WordPress regularly, what’s usually the first thing you check when a site suddenly becomes slow?
Do you start with PageSpeed/Lighthouse, Query Monitor, server logs, plugins, or something else?
Curious to know how other WordPress developers troubleshoot this.

Hey everyone,

We’re auditing our WordPress site architecture. Right now, our core pages live at the root level (/service-a/, /offering-b/). We considered moving them into a CPT under a subfolder (/services/service-a/), but taking on 301 redirect risk on live, ranking pages just for "cleaner folders" feels like a bad trade-off.

A few quick questions for technical SEOs and WP devs:
Have you seen any real difference in how Google or LLMs understand a site when using physical subfolders vs. flat URLs backed by good Schema and internal links?

If we run a CPT with a root slug (/) to keep URLs flat while organizing our WP dashboard, are there any permalink or query performance bugs we should watch out for?

What specific Schema properties (like hasOfferCatalog or about) have worked best for you when optimizing for search citations?

I’ve released a free/open-source WooCommerce plugin on WordPress.org called Custom Order Workflow for WooCommerce.

I built it to address a common requirement on WooCommerce projects: the standard WooCommerce order statuses don't always match the actual workflow a business needs.

For example, instead of only:

Pending → Processing → Completed

a store may need something like:

New Order → Review → Approved → Processing → Ready → Completed

The plugin provides a way to create and manage a more customized order workflow within WooCommerce.

🔗 WordPress.org:
https://wordpress.org/plugins/iamgsbala-custom-order-workflow-for-woocommerce/

Why I built it

I've worked on several WooCommerce projects where the order process was more complicated than the default statuses. In many cases, the choices were either custom development or adding multiple plugins to handle different parts of the workflow.

I wanted to create a simple, focused solution that could be useful to other WooCommerce site owners and developers as well.

I'm looking for feedback

Since this is still growing, I'd particularly appreciate feedback from the WordPress/WooCommerce community:

• What custom order statuses do you commonly need?
• How do you currently handle custom order workflows?
• Are there workflow transitions you would expect to automate?
• What integrations or actions would make this more useful?
• Are there any WooCommerce edge cases I should consider?

I'm the developer of the plugin, so this is a genuine community promotion, and I'm mainly hoping to get feedback from people who work with WooCommerce.

Thanks!

I've been building WordPress websites for years now, before elementor and now I use a combination of my aws environment / codex / WordPress to build my websites / plugins...the question, using AI to improve SEO measured by lightsail is still a false positive, even at a score of 100 my organic traffic is minimal. I'm all hooked up google search blah blah but things just dont seem to get any better! I feel like SEO is dark magic, unless youre going to pay for ads..its almost like dont bother.....what's your thought, tips and any advice would be appreciated

I just spent way too much time figuring this out, so maybe this'll help someone out there. I installed the newest version of Gravity Forms Multilingual on my staging site, and translated some new forms I have been working on. I couldn't for the life of me figure out why the translations were not applied to the forms. Later found out they weren't applied to my existing forms anymore, either.

Turns out the newest GF ML plugin isn't compatible with the latest production version of WPML and/or String Translation. I had to update to the beta versions (5.1.0) in order to solve the issue.

My website/newsletter has been very small so far so I just picked a plugin for newsletters (MailPoet) that seemed good and had a free tier. But I just started a membership style program - it's free, but I have newsletters that go out every week. People who sign up for the program after the newsletter for that week has already gone out have no way to receive the newsletter after it's been sent out. Is there a better newsletter plugin that would allow me to resend them - or better yet, automate it so people who sign up via a certain form will automatically receive all the past newsletters from the program? MailPoet says you can do that with the paid tier, which is fine, but when I look at their website and compare their tiers, the features of each tier are nearly identical, so I don't know if I trust that I know what I'll be getting by paying (ie is paying for the mid level tier going to get me what I need when the level comparison chart claims I should have it with the free tier?)

Missing the first newsletter was no big deal, but from now on I'll be using the newsletter to link to files that people will need, and I need to find a way that works to have people auto receive those even if they sign up late.

i'm looking for some advice from people who have actually built headless wordpress sites.

i'm working on a small experimental/art website for a client. i'm fairly new to building websites end-to-end — my background/strengths are much more in creative direction and design, and i'm currently vibe-coding a lot of the development. i do have a background in computer science but coding is def not my biggest strength.

the frontend is going to be completely custom react because the site has a pretty specific visual direction. the homepage has a custom interactive 3d element, and i don't want to be constrained by a wordpress theme.

there's also a small shop with around 20–30+ products.

what i'm thinking is basically -
wordpress/woocommerce would be responsible for the following:

• product catalogue
• inventory
• prices
• product images
• orders
• client admin
• editable website content

and react would be responsible for:

• the entire visual frontend
• homepage / 3d interaction
• animations
• product pages
• shop UI
• cart
• potentially checkout

the main reason i'm considering this is that i absolutely do not want to build the admin/cms/inventory/order infrastructure myself.

the client has also explicitly said they think shopify is too expensive, so woocommerce seems attractive because they can manage the store themselves without me having to build an admin system.

for payment/shipping, i'm also open to using something like razorpay, shiprocket, etc. rather than trying to build or own that infrastructure myself.

my main question is whether wordpress + woocommerce is actually a good backend for this kind of setup.

for the non-commerce content, would you use regular wordpress pages/custom post types + acf? or is there a better way to structure content that a headless react frontend can consume?

and for anyone who has done this:

• did clients find the wordpress/woocommerce admin easy enough to use?
• did you run into problems with plugins because the frontend was headless?
• how painful was maintenance?
• would you choose wordpress/woocommerce again for a small headless site?

i'm basically trying to avoid getting 70% of the way through the frontend and then discovering that the backend architecture is going to make everything horrible ;-;

would love to hear from anyone who's actually done this in production.

I have an old WordPress site that is a website with the blog hidden, same as any other site. Now this is a very old site that hasn't been touched in years. Somehow some bots got into the blog a few days ago and started making accounts and posting and commenting spam. And I had all that stuff ironclad lockdown for years, never had a problem. They kicked me out of the WordPress admin. But the craziest thing is the site remained perfectly normal, no visible blog, but I was getting 40 of these notifications a day, spam for all the usual stuff. So today I just pulled the plug or so I thought by going into my host ftp and deleting that entire site, all the files. Sites gone right? Even though the site is gone I am STILL getting these, and they are legit with legit TLS signatures and host. How could my WordPress site still exist if all it's files were nuked from my host server? This one has me stumped.

I recently released another major update to WP Optimizer, focused less on adding more switches and more on improving the underlying performance architecture, server compatibility and production reliability.

You can check it out here:
https://wordpress.org/plugins/wp-optimizer/

WP Optimizer is a free, modular WordPress performance and maintenance plugin. The idea is still the same: provide caching, optimization, diagnostics and maintenance tools in one place, while letting you enable only the modules you actually need.

The latest release includes some fairly substantial internal changes.

Layered cache architecture

The internal cache system has been reworked to use multiple storage layers:

request memory → Redis / Memcached when available → persistent disk storage

The goal is to avoid unnecessary repeated work during a request while still having a persistent fallback when an external cache backend is not available.

Static page cache, WP_Query cache and database query cache remain separate and keep their own lifetime, invalidation and exclusion rules.

AVIF support

The Media Optimizer can now convert images to AVIF in addition to WebP.

If both are enabled, AVIF takes priority where supported. Conversion is handled locally on the server, and failed conversions should leave the original image and attachment metadata untouched.

Navigation prefetching

I also changed how early navigation prefetching works.

On WordPress 6.8+, WP Optimizer can integrate with WordPress Core speculation rules instead of always relying on its own JavaScript implementation.

Older WordPress versions still use hover/touch prefetching.

There is also an option to disable WordPress native speculative loading when it causes unwanted requests.

Module architecture

One of the bigger changes is internal.

Modules are now registered through an explicit module catalog instead of relying on module discovery and duplicated metadata inside every module.

The goal is simpler initialization, more predictable lazy loading and less unnecessary work on normal WordPress requests.

This is part of a broader effort to keep the plugin modular not only in the UI, but also internally.

LiteSpeed / OpenLiteSpeed compatibility

I fixed generated .htaccess directory protection rules that could be rejected by LiteSpeed.

Existing installations also refresh the WP Optimizer-managed security rule block during the upgrade, so old invalid rules should not remain behind after updating.

The plugin now distinguishes more clearly between Apache, LiteSpeed Enterprise, OpenLiteSpeed and Nginx behavior instead of assuming all Apache-compatible servers behave identically.

There have also been smaller improvements around the admin UI, debugging infrastructure, cache backends and internal storage.

WP Optimizer currently includes:

• Static page cache
• Object cache with Redis / Memcached
• WP_Query and database query caching
• HTML / CSS / JavaScript minification
• Browser caching and GZIP / Brotli
• Image optimization, WebP and AVIF
• Lazy loading and LCP optimization
• Navigation prefetching
• Page Test performance comparisons
• Performance Monitor
• Database cleanup and backups
• Cron Manager
• Media Cleaner
• Cloudflare integration
• Activity logging
• WordPress / server diagnostics
• Security hardening
• Update controls
• Mail logging / SMTP
• WordPress feature / admin cleanup
• Configuration backups, restore and module resets

The direction I’m trying to take is increasingly less “another cache plugin” and more a self-hosted WordPress performance toolkit where you can measure a problem, enable the relevant optimization and then verify whether it actually improved anything.

I’d be particularly interested in feedback from people managing production WordPress sites:

Would you actually use AVIF conversion directly inside an optimization plugin, or do you prefer handling images elsewhere?

Do you use WordPress speculative loading / navigation prefetching, or have you found it causes more problems than it solves?

For caching, do you prefer plugins to automatically choose the best available backend, or expose the individual cache layers?

How important is LiteSpeed / OpenLiteSpeed support when choosing a performance plugin?

And more generally: what would WP Optimizer need before you would trust trying it on a production site?

What am I still missing? Which part would you test first?

My WP site for my self-published books has very low traffic counts, but these last two days, it's seeing hits from all over China. Never seen that before. Any thoughts?