Site Editor Blank in WordPress 7.1? Fix Promise.withResolvers
Blank Site Editor after updating to WordPress 7.1? Confirm the old-browser cause in 30 seconds, then fix it or add a safe mu-plugin polyfill.
Action Scheduler Past-Due Actions Notice: Fix It With WP-CLI
Fix the “Action Scheduler: past-due actions found” notice: update the bundled library, clear the queue with WP-CLI and move it to a real server cron.
WordPress 7.2 Removes load-scripts.php: Clean Up wp-config.php
WordPress 7.2 drops admin script concatenation. Find and remove CONCATENATE_SCRIPTS, old load-scripts.php rules and deprecated calls before you update.
Updating Failed: Not a Valid JSON Response in WordPress (Fix)
Fix the WordPress editor’s “Updating failed. The response is not a valid JSON response” error: find the cause, then fix notices, 404s, WAF, redirects.
Prime Mover CVE-2026-115806: Update and Purge Planted Comments
Prime Mover 2.2.1 and older can unserialize a payload hidden in a comment. Update to 2.2.2, find planted comments with SQL, and check whether it fired.
Duplicator CVE-2026-82814: Patch Before Your Next Migration
Duplicator 1.5.17 and Pro 4.6.10 are vulnerable to object injection via comments. Update to 5.0.0, clean installers and check comments with WP-CLI.
UpdraftCentral Key Compromise: Check & Clean Your WordPress Site
Stolen UpdraftCentral keys are backdooring WordPress sites. Delete leftover keys, find the hidden plugins and admin users, and clean up with WP-CLI.
PHP RCE CVE-2026-109618 & 109619: Patch PHP for WordPress
PHP fixed two unauthenticated RCE bugs on Oct 21, 2026. See which PHP versions are safe, how to patch and restart PHP, and the stopgaps to use meanwhile.
Backuply SQL Injection (CVE-2026-93953): Update & Check Your Site
Backuply 1.5.8 and older lets subscribers become admins via a backup restore. Update to 1.5.9 and check your site with these WP-CLI and SQL commands.
Rank Math PRO 3.0.123 Malware: How to Check and Clean Your Site
Rank Math PRO 3.0.123 shipped a backdoor. Check if you’re affected, remove the malicious options, rogue admins and cron jobs, and rotate secrets.