File inclusion vulnerabilities allow an attacker to read (and sometimes execute) files on the WordPress website, gain unauthorized access to sensitive information and inject malicious files through the “include” functionality. This can be very dangerous because if the webserver is misconfigured the attacker may gain access to sensitive user information and even execute arbitrary commands. There … Read full article →
Full path disclosure (FPD) is a software bug that results in the full path to the webroot directory of the server being exposed. This is not necessarily a security risk, but can be used in combination with other vulnerabilities to create a real issue. In this guide We will explain the importance of Full Path … Read full article →
Yoast SEO is compatible with PHP 8 and PHP 8.1 but the Composer that YoastSEO is using doesn’t yes support PHP 8.0 so you might experience problems when editing posts&pages in WordPress. According to this comment there are still 19 other PHP version incompatibilities remaining to be fixed. 😲 So turns out that YoastSEO is … Read full article →
WordPress.com has a list of all the blocks that are available inside the Gutenberg editor, and for self-hosted WordPress websites you can run the following command in the browser console when using the editor to get a list of all available blocks. The output:
The principle of WPCLI is to add install it on the server, add it to path so that it can be accessed from any folder and then enter the installation folder of the website for which you want to run commands. The basic use of WP-CLI is: wp [COMMAND], e.g. wp config list will show … Read full article →
This is a simple solution to automatically change the copyright year in the WordPress footer, using the date(). php function and specifying just Y will display the current year. I use it on this site:
There are several ways to disable comments in WordPress: From the WordPress administration panel This will disable comments on all new posts and pages. If you want to disable comments on existing posts and pages, you can do so by editing each post or page and unchecking the “Allow comments” option. Using a plugin There … Read full article →
Export WordPress posts to XML an then convert it into Markdown files suitable for a static site generator such as Gridsome, Gatsby, Hugo, Jekyll, etc. Step 1. Export WordPress to XML Navigate to Tools > Export and Select “All Content” File will be saved as [website].WordPress. [DATE].xml Step 3. Install NodeJS & Git Make sure … Read full article →
From September 30, 2021, WordPress websites that use Let’s Encrypt certificates are having issues with HTTP API requests. For example, here is an example that will cause this error: $res = wp_remote_get( ‘https://abcdef.com/’ ); if( is_wp_error( $res ) ){ echo $res->get_error_message(); } the error message: cURL error 60: SSL certificate problem: certificate has expired What causes this error? … Read full article →
When installing new plugins the error is displayed: Installation failed: Could not create directory. How to fix the Installation failed: Could not create directory. error OPTION 1: Change File permissions This error usually occurs because WordPress doesn’t have writing permissions for the folder. To make sure this is the case, navigate to Tools > Site … Read full article →