Duplicator CVE-2026-82814: Patch Before Your Next Migration
Duplicator 1.5.17 and Pro 4.6.10 are vulnerable to object injection via comments. Update to 5.0.0, clean installers and check comments with WP-CLI.
UpdraftCentral Key Compromise: Check & Clean Your WordPress Site
Stolen UpdraftCentral keys are backdooring WordPress sites. Delete leftover keys, find the hidden plugins and admin users, and clean up with WP-CLI.
PHP RCE CVE-2026-109618 & 109619: Patch PHP for WordPress
PHP fixed two unauthenticated RCE bugs on Oct 21, 2026. See which PHP versions are safe, how to patch and restart PHP, and the stopgaps to use meanwhile.
Backuply SQL Injection (CVE-2026-93953): Update & Check Your Site
Backuply 1.5.8 and older lets subscribers become admins via a backup restore. Update to 1.5.9 and check your site with these WP-CLI and SQL commands.
Rank Math PRO 3.0.123 Malware: How to Check and Clean Your Site
Rank Math PRO 3.0.123 shipped a backdoor. Check if you’re affected, remove the malicious options, rogue admins and cron jobs, and rotate secrets.
Bricksforge RCE (CVE-2026-85097) exploited: patch and check your site
Bricksforge 3.1.8.9 and older lets anyone upload and run PHP (CVE-2026-85097), and it’s exploited now. How to patch, block it and check if you were hit.
Optimize WordPress Database Tables
There are several ways you can optimize the MySQL database used by your WordPress site: Optimize tables Optimize all tables in your database: OPTIMIZE TABLE wp_posts, wp_comments, wp_options, wp_usermeta, wp_term_relationships, wp_term_taxonomy, wp_termmeta; Replace wp_ with the database prefix that you are using for your WordPress installation. Repair tables Repair any damaged tables in your database: … Read full article →
How to safely remove database tables after plugin deactivation
After a plugin is deinstalled from a WordPress website it will either remove all its data from the database or leave it in case the plugin is installed again. Upon deactivation, if the plugin’s data isn’t removed from the database you should manually remove it in order to optimize the database and get rid of … Read full article →
WordPress Missed Schedule Error
WordPress Missed Schedule error means that the Scheduled post was not published for some reason: There are a few possible reasons for the WordPress Missed Schedule Error: 12.12.2022 UPDATE: There is a bug in WordPress 6.1 that causes this error WordPress Timezone Settings WordPress Timezone Settings are located under Settings → General From there, make … Read full article →
How to bypass cache and always view uncached content in WordPress
In most cases, the cache can be “tricked” by adding a random variable to the URL during testing, for example https://wpxss.com/wp-includes/how-to-bypass-cache-and-always-view-uncached-content-in-wordpress/?a=123 In this case, a new cache page is generated and does not load cached content that already exists.