Backuply SQL Injection (CVE-2026-93953): Update & Check Your Site
Backuply 1.5.8 and older lets subscribers become admins via a backup restore. Update to 1.5.9 and check your site with these WP-CLI and SQL commands.
wp-content
💡 The wp-content folder is where themes, plugins and other uploads are stored.
Here you can find up-to-date guides for the most popular WordPress plugins and discover new themes.
Rank Math PRO 3.0.123 Malware: How to Check and Clean Your Site
Rank Math PRO 3.0.123 shipped a backdoor. Check if you’re affected, remove the malicious options, rogue admins and cron jobs, and rotate secrets.
Bricksforge RCE (CVE-2026-85097) exploited: patch and check your site
Bricksforge 3.1.8.9 and older lets anyone upload and run PHP (CVE-2026-85097), and it’s exploited now. How to patch, block it and check if you were hit.
How to safely remove database tables after plugin deactivation
After a plugin is deinstalled from a WordPress website it will either remove all its data from the database or leave it in case the plugin is installed again. Upon deactivation, if the plugin’s data isn’t removed from the database you should manually remove it in order to optimize the database and get rid of … Read full article →
If there is only one search result, skip the results page and jump directly to the content 🔧
Add the following to your theme functions.php file: Source: WordPress搜索功能结果只有一个时直接跳转到结果文章页面
Different Ways to Change active WordPress theme
Here are a few ways you can change the active theme in WordPress: Using WP Dashboard Using the WordPress Administration Screens: You can change the active theme by going to the “Appearance” -> “Themes” page in the WordPress Administration Screens and selecting a new theme. Using functions.php or a custom plugin Using the wp_set_theme function: … Read full article →
❌ PHP Fatal error: Unknown: Failed opening required wordfence-waf.php
After migrating a WordPress website ot another cPanel account, the website displayed 500 error, and the following was recorded inside the error_log file: [17-Aug-2022 12:46:18 Europe/Belgrade] PHP Fatal error: Unknown: Failed opening required ‘/home/XXXXX/XXXXX.com/wordfence-waf.php’ (include_path=’.:/opt/alt/php74/usr/share/pear’) in Unknown on line 0 WordFence adds rules to .htaccess file to include the wordfence-waf.php file by full path: php_value … Read full article →
How to Add Custom CSS Code to WordPress
Although you can change almost every aspect of WordPress themes, to design your site exactly how you want it, you may occasionally need to add some custom CSS. In WordPress 4.7, a new way to add CSS to your site was added inside the Customizer which you can find in Customize > Additional CSS. However, CSS … Read full article →
How to force your WordPress theme or plugin users to use PHP 8.0
At the time of writing this article (December 03.2022), PHP8 is no longer actively supported and will only receive security support for the next 1 year. New PHP versions offer better optimization and security, but not all plugins, themes, or even WordPress itself is NOT fully compatible with PHP 8.0 How to force your WordPress … Read full article →
Redis connection down? Stop the “Error Establishing a Redis Connection” crash on WordPress
If you’re running the Redis Object Cache plugin on a client site, you’ve probably seen this ugly white-screen error at some point: Error establishing a Redis connection To disable Redis, delete the object-cache.php file in the /wp-content/ directory. By default, if Redis becomes unreachable (server restart, memory limit hit, network hiccup, provider maintenance..) the plugin throws a fatal error … Read full article →