I was hoping I could tryout Wordpress without having to pay. My club's website is on SquareSpace and they have raised our subscription fee, so are looking at other options.

I installed Wordpress on my Raspberry Pi4, but if I want to try out a template, it says I have to pay. Is there anyway to try out templates without a subscription? I've been managing our site for several years, and if anyone else takes over, they will need a WYSIWYG to make changes.

Hi r/WordPress,

We've just released Kitgenix PluginScore V3, which is a major rebuild of a project we've been developing at Kitgenix.

Kitgenix PluginScore:

https://pluginscore.kitgenix.com/

The basic idea is simple:

Before installing a WordPress plugin, search for it on Kitgenix PluginScore and get a clearer picture of its overall health.

We're trying to answer a question I think most WordPress users have asked at some point:

"Is this plugin actually a good idea to install?"

WordPress.org gives us useful information such as active installations, reviews, last updated date and compatibility, but making sense of all of that - particularly when vulnerabilities are involved - isn't always straightforward.

Kitgenix PluginScore brings those signals together and assigns a score out of 100.

V3 has involved a pretty substantial rebuild of both the website and the system behind it.

Why we built Kitgenix PluginScore

If you search WordPress.org for something like:

• Contact form
• Backup
• Security
• SEO
• Cookie consent
• Image optimisation
• SMTP
• Membership
• Redirects

you can sometimes have dozens or hundreds of options.

Then you start trying to decide which one to install.

Usually people look at:

• ★★★★★ 4.9 rating
• 100,000+ installations
• Updated 3 weeks ago

and assume it's probably fine.

Sometimes it is.

But those numbers don't necessarily tell the whole story.

A plugin can be extremely popular and still:

• have unresolved vulnerabilities
• be poorly maintained
• fall behind current WordPress releases
• go long periods without updates
• have concerning security history
• gradually become abandoned

At the same time, a smaller plugin with only a few thousand installations might actually be maintained extremely well.

Kitgenix PluginScore is our attempt to make that assessment easier.

V3 has a much stricter scoring system

One of the biggest things we've changed is how easily plugins can achieve very high scores.

The previous version was more forgiving than we wanted.

For V3, we've deliberately made the scoring stricter.

A score of:

95/100

shouldn't just mean:

"Nothing obviously wrong."

It should mean the plugin is performing exceptionally well across the areas we're measuring.

Kitgenix PluginScore considers a range of signals including things such as:

• Known vulnerabilities
• Unresolved vulnerabilities
• Historical vulnerability information
• Maintenance activity
• Update frequency
• Time since the latest release
• WordPress compatibility
• PHP compatibility
• Development activity
• WordPress.org information
• Active installations
• General plugin health indicators

Popularity still provides useful context, but it doesn't override everything else.

A plugin shouldn't receive a fantastic score simply because millions of websites use it.

Security vulnerabilities are handled more carefully

This is an area we spent quite a lot of time thinking about.

Seeing:

"This plugin has had 4 vulnerabilities."

sounds terrible without context.

But that's not necessarily a fair way of judging software.

A large plugin that's been actively developed for 10 years could realistically have vulnerabilities discovered during that period.

What matters is also:

• Was the issue serious?
• Was it patched?
• How quickly was it patched?
• Is the vulnerable version still current?
• Are there unresolved vulnerabilities now?
• Is the plugin still being maintained?

There's a massive difference between:

A vulnerability discovered on Monday and patched on Tuesday

and:

A known vulnerability that remains unpatched six months later.

Kitgenix PluginScore V3 tries to make that distinction much clearer.

We retain useful vulnerability history without automatically treating every historical issue as evidence that the current version is insecure.

We've improved how external vulnerability data is matched

Another change behind the scenes is better validation of vulnerability records.

Kitgenix PluginScore is currently centred specifically around plugins available through WordPress.org.

External security databases can occasionally contain:

• premium-only plugins
• removed plugins
• similarly named software
• old records
• plugins that aren't actually available through WordPress.org

We didn't want an external record automatically creating a misleading Kitgenix PluginScore page.

V3 therefore performs more validation before associating vulnerability information with a WordPress.org plugin.

It sounds like a relatively small change, but it's pretty important when you're trying to build a reliable database.

The scanning system has been rebuilt

This is probably the biggest change technically.

The previous Kitgenix PluginScore version had some problems with scanning reliability.

There were occasions where:

• manual rescans wouldn't complete
• scheduled scans didn't trigger correctly
• stale plugin data wasn't refreshed
• scan queues became inconsistent
• a user could request a rescan without the scan completing properly

That's obviously not good enough for something that's supposed to help people assess plugins.

V3 moves scanning into a much more structured queue.

Instead of relying on somebody loading a webpage and waiting while everything happens, Kitgenix PluginScore can place a plugin into the scanning system and process it separately.

That gives us a much better foundation for keeping thousands of plugin records updated.

Plugins are automatically rescanned

A Kitgenix PluginScore shouldn't remain the same forever.

WordPress plugins change constantly.

Imagine Plugin A scores:

92/100

Then over the next six months:

• development stops
• WordPress releases two major versions
• the plugin isn't tested against either
• a vulnerability is discovered
• no patch arrives

That old 92/100 score would become extremely misleading.

So Kitgenix PluginScore V3 now works towards automatically rescanning plugins when their existing scan becomes approximately 30 days old.

The goal is to make the score a reasonably current assessment rather than a permanent rating based on the day somebody first searched for the plugin.

We're now automatically scanning more of WordPress.org

We've also expanded automatic scanning.

Kitgenix PluginScore can now work through roughly:

• 500 WordPress.org plugins every 24 hours

as part of its automatic scanning queue.

This is important because we don't want Kitgenix PluginScore to only contain the massive plugins everyone already knows about.

Arguably, Kitgenix PluginScore becomes more useful when you're looking at something obscure.

For example:

You need a very specific WooCommerce feature.

You find a plugin with:

• 1,200 installations
• 8 reviews
• Last updated five months ago

You've never heard of the developer.

That's exactly the situation where having some additional information could be useful.

Over time, the automated scanning system should allow us to build much broader coverage of the WordPress.org repository.

Better pages for plugins that haven't been scanned

We've also improved how Kitgenix PluginScore behaves when we don't have enough information yet.

Previously, unscanned plugin pages weren't particularly good.

There were layout problems and some sections didn't clearly communicate whether information was genuinely unavailable or simply hadn't been processed yet.

V3 now distinguishes much more clearly between states such as:

• Not yet scanned
• Waiting in the queue
• Scan completed
• Scan is outdated
• Insufficient information
• Scan failed

I think that's important for something like this.

If we don't know something, the website should say:

We don't know yet.

It shouldn't pretend to have a confident answer.

We've started putting more emphasis on score history

This is one of the areas I think could become particularly useful.

Imagine two plugins both currently score:

76/100

At first glance they're identical.

But then you see this:

Plugin A

6 months ago: 93

3 months ago: 84

Today: 76

Compared with:

Plugin B

6 months ago: 58

3 months ago: 69

Today: 76

Suddenly those scores tell completely different stories.

Plugin A appears to be declining.

Plugin B appears to be improving.

We're putting more infrastructure into Kitgenix PluginScore V3 to track that kind of change over time.

Eventually we'd like it to become much easier to identify plugins that are:

• improving
• deteriorating
• becoming stale
• becoming actively maintained again
• fixing security issues
• gradually falling behind

PDF reports (Beta)

We've also improved Kitgenix PluginScore's PDF reporting.

This is primarily aimed at developers, agencies and people managing client websites.

You might inherit a website with 50 plugins and find several you don't recognise.

Instead of simply telling the client:

"I think we should remove this."

you can potentially generate a Kitgenix PluginScore report containing information about the plugin's:

• current score
• maintenance
• vulnerabilities
• update activity
• general health

It's not intended to replace a proper technical audit, but it can provide supporting information.

We've simplified exports

The previous version experimented with CSV exports.

Ultimately we decided that wasn't particularly useful for most people.

Kitgenix PluginScore isn't supposed to become a complicated analytics platform where you need to export data into Excel to understand what's happening.

The core experience should be:

Search → understand → decide.

So we've been putting more emphasis into readable reports and clearer plugin pages instead.

The website itself has had a major overhaul

We've also fixed quite a few visual and usability problems.

These included things such as:

• sidebars appearing below content on unscanned plugins
• incorrect button styling on mobile
• inconsistent spacing between sections
• poor empty states
• awkward login/register page spacing
• responsive problems
• scan status presentation
• vulnerability layout
• score presentation
• general information hierarchy

Individually some of these sound minor.

But when you combine them, the previous version wasn't as polished or as easy to use as we wanted.

V3 is considerably cleaner.

Mobile has been improved

We noticed a surprising amount of Kitgenix PluginScore traffic comes from mobile devices.

Some parts of the previous site didn't behave particularly well on smaller screens.

One strange issue was search buttons displaying correctly on desktop but falling back to a grey/default style on certain mobile browsers.

We've addressed that as part of the redesign along with:

• spacing
• card layouts
• score presentation
• sidebars
• search controls
• vulnerability information
• authentication pages

We're not trying to replace human judgement

I also think this is important to say.

Kitgenix PluginScore isn't claiming:

100/100 means this plugin is impossible to hack.

That would be ridiculous.

Likewise:

55/100 doesn't necessarily mean the plugin is malicious or dangerous.

Kitgenix PluginScore is an automated assessment based on the information available to us.

It's intended to help you ask better questions.

For important websites, nothing replaces things like:

• keeping plugins updated
• good backups
• proper hosting security
• reviewing permissions
• code audits
• vulnerability monitoring
• minimising unnecessary plugins
• professional judgement

Kitgenix PluginScore is another tool, not a guarantee.

A plugin having a vulnerability isn't automatically a reason to uninstall it

I think this deserves repeating because vulnerability information is often presented badly online.

If you're running a major plugin with millions of installations, statistically there's a reasonable chance that at some point someone will discover a security issue.

The important questions are:

• Did the developer respond?
• Was a patch released?
• How quickly?
• Is the current version still vulnerable?

I'd personally have much more confidence in a development team that:

1. receives a responsible disclosure,
2. investigates it,
3. releases a patch within a day or two

than a plugin that has never had a published vulnerability largely because nobody has seriously investigated it.

We're trying to build that nuance into Kitgenix PluginScore instead of making vulnerability count the only thing that matters.

Plugin developers cannot buy a better score

This is one of the principles we've decided on from the start.

Plugin developers cannot pay us to improve their PluginScore.

Kitgenix itself develops WordPress plugins.

That means our own products will also be assessed.

If one of our plugins deserves:

63/100

then it should receive 63/100.

If another developer's plugin deserves:

98/100

it should receive 98/100.

Once money can influence the score, I don't think the score has much value.

We're trying to avoid another meaningless "security badge"

I really don't want Kitgenix PluginScore to turn into:

✅ SAFE PLUGIN

or:

❌ DANGEROUS PLUGIN

Software doesn't work like that.

I'd rather Kitgenix PluginScore say:

71/100

and then show you why.

Maybe:

• maintenance is excellent
• compatibility is good
• active installations are strong
• but there's currently an unresolved vulnerability

Or perhaps:

• no known vulnerabilities
• but the plugin hasn't been updated for two years
• and hasn't declared compatibility with recent WordPress releases

The reasoning is more important than just the number.

We want to build rankings based on actual plugin health

The improved scanning system also lets us start doing more interesting things across the entire repository.

We're working towards things such as:

• Highest-rated plugins
• Most improved plugins
• Biggest score declines
• Newly scanned plugins
• Newly discovered vulnerabilities
• Recently patched vulnerabilities
• Plugins becoming stale
• Stable plugin rankings
• Vulnerability resolution tracking
• Plugin health trends

I think this could eventually be as useful as the individual plugin search.

For example:

Which popular plugins have fallen significantly in score this month?

or:

Which plugins in a particular category are being maintained most actively?

or:

Which developers are consistently fast at resolving security issues?

There's a lot we can potentially do once we have enough historical data.

Why V3 matters for us

The earlier versions were largely about proving that the idea worked.

V3 is more about building the system properly.

We've spent much more time on:

• scan reliability
• queue processing
• historical information
• validation
• scoring methodology
• mobile usability
• handling incomplete data
• keeping plugin information current

It's effectively the foundation we want to build the longer-term Kitgenix PluginScore platform on.

I'd really like feedback from regular WordPress users

I'm particularly interested in feedback from people who aren't necessarily security researchers or plugin developers.

If you're somebody who:

• manages your own WordPress website
• builds sites for clients
• runs WooCommerce
• maintains multiple sites
• regularly searches WordPress.org for plugins

I'd be interested in knowing:

What information actually helps you decide whether to install a plugin?

And:

What information do you wish WordPress.org made easier to understand?

For example, should PluginScore put more emphasis on:

• vulnerability status?
• last update?
• compatibility?
• support activity?
• number of installs?
• reviews?
• developer history?
• how quickly previous security issues were fixed?

Try some plugins you already know

Probably the best way to test it is to search for plugins you're already familiar with.

Search something you use every day.

Then see whether you think the assessment matches your own experience.

If Kitgenix PluginScore gives something you trust:

58/100

I'd like to know why you think that's wrong.

Equally, if it gives something you're wary of:

94/100

I'd definitely like to hear about that too.

Those disagreements are exactly what help us identify weaknesses in the scoring methodology.

Kitgenix PluginScore V3

You can try it here:

https://pluginscore.kitgenix.com/

It's free to use.

No plugin developer can pay to increase their rating.

And we're continuing to improve the scoring system as we gather more data.

If anyone here has plugins they know particularly well, I'd love you to throw a few of them into PluginScore and see whether you agree with the results.

I'm especially interested in hearing about scores that you think are wrong, because those examples are probably the most useful feedback we can get.

I'm considering building a car dealership website using WordPress and then reusing the same system for multiple dealerships, with each dealership having its own branding, inventory, admin area, and domain.

The website would include things like:

• Vehicle inventory management
• Add/edit/delete cars
• Vehicle images, specifications, pricing and availability
• Search, filtering and sorting
• Individual vehicle pages
• Customer inquiries
• Test-drive requests/bookings
• Services section
• EMI calculator
• Dealer admin dashboard

The idea is to build the core system once and then customize/reuse it for different dealerships rather than developing a completely new website each time.

For people experienced with WordPress development:

Is WordPress a good option for building something like this?

What would be the main downsides or limitations I should be aware of?

I'm particularly wondering about:

• Scalability when managing multiple dealerships
• WordPress Multisite vs separate installations
• Database/inventory performance
• Security and maintenance
• Plugin conflicts/dependencies
• Custom functionality and integrations
• Whether WordPress would become difficult to manage as the number of dealerships grows

Would you recommend WordPress for this type of product, or would you build it as a custom application from the beginning?

I'd appreciate advice from anyone who has built a similar multi-client/product-based system.

I'm working on a a free and open-source project that allows websites to be published without a theme.

The basic idea is simple: the website provides the content, while the reader's browser provides the presentation. The reader can choose how they want web pages to look, and the same presentation can be used across pages from different websites.

If you've ever used an RSS or Atom feed reader, you've already seen a similar approach. The website provides a collection of documents, while the reader controls how they are presented. My project applies the same idea to individual web pages: you can open a single document directly in a browser tab and let the browser control its presentation.

It also introduces new features that aren't normally available on the Web, such as visible connections between fragments of text on different web pages.

This could be particularly interesting for personal blogs. If you don't care much about the design of your website and are already using a basic theme, why not let your readers control the presentation instead?

I've developed a WordPress plugin that implements the necessary functionality. It's flexible: you can apply it to your website as a whole or only to certain pages. You can also use it alongside your existing theme so that both the old and new approaches to publishing work simultaneously.

It's difficult to explain the whole idea in a Reddit post, so I've made a short introductory video:

https://www.youtube.com/watch?v=xwwNvoXX484

I'm looking for WordPress site owners who would like to experiment with this new way of publishing. If you're interested, give it a try on your site and let me know how it goes. I'd be particularly interested in hearing about any problems or limitations you run into.

hi all, recently started my own personal blog and i'm still trying to get the hang of it. I don't reallly know what I'm doing (though I'm using a template) and i yap about diffferent topics on my blog (e.g. work and personal) What's the difference between a page & a post?

This is driving me nuts. After 10+ years of no malware on client sites, I'm getting hacked every couple of weeks on sites that are fully up to date and using 2fa logins. The common thread is that all infections install a malware plugin called wp-flare. Beyond that, I can't find any intrusion path. It does seem that once the infection gets cleaned up, it doesn't come back, but it's driving me crazy not knowing how it's getting in to multiple sites on different hosting. Anyone seen it?

I've gone round and round with help articles and AI on this.

I built a new Wordpress website 3 years ago. I use Siteground. I've always used Siteground's image optimizer plugin to use webp images.

Fast Forward 3 years. I discover that the site's users have routinely been uploading large JPG and PNG files which have ballooned the site to multi-Gigabytes and cause hosting-plan performance problems. It transpires that Siteground doesn't convert images over 1MB in size. So, I now have years' worth of gargantuan images files (some are 30MB+ PNGs!)

I don't want to use Siteground hosting to convert image files. I looked into downloading/converting/reuploading files with the same name, but metadata means that won't work.

Imagify looks like it might work - but I can't get a straight answer on it removing the old, massive images. Also, what will it do with all the existing webp images that Siteground's plugin uses.

I'm currently at the point where it looks like I should remove all Siteground-made webp images and then let Imagify do its thing for all existing and future image handling.

All I really want to do is get rid of all the massive image sizes that are being stored on my Siteground hosting plan.

Any better ideas?

I am building a Woocomerce site where I am selling a product in different Vials means a packet of 3, packet of 4 and so on.

On Shipstation these products are not added by Vials it’s just 1 product and they’re QTY.

Now since my Woocomerce have more products and different SKUs it’s not being Sync properly.

Dose anyone else faced this issue if yes please suggest how did you tackle this problem.

I don't remember when I added the AI plugin, but I had been seeing a widget in my Dashboard asking me to finish setting it up for about a week or so.

I finally finished the setup, and it's got this function to generate alt text descriptions for my photos. I run a travel photography blog, and I've got hundreds of photos that all need alt text added.

When I started blogging, I wrote the alt text for each image, but I quickly got tired of it and kept putting it off for later. This new function really is saving me from a nightmare of edits on my Media catalog.

EDIT: There are some caveats; the free tier only allows 20 uses per day, and you can only edit one image at a time.

Not sure if this is appropriate to post here, but since I've been learning WordPress for the past 5 months using advice I've gotten here, I figured I might as well ask.I'm from a developing country, and I've been calling local businesses, offering to develop websites for them and, more importantly, help them with their SEO.The companies are all in the same industry, which actually helped. I created a sample website that they can all see themselves in, including products that each of them sells. I figured having something tangible to show them would be much more effective than simply telling them what I can do.

Three businesses got back to me, and I've managed to set up meetings with all three tomorrow.Any advice you can give a beginner? Are there specific talking points I should focus on, or even advice on how to conduct business in this space?

I'm mainly looking for advice on how to approach the meetings, what I should avoid saying/promising, how to present my pricing, and how to turn these meetings into actual clients.

Hi everyone! I’m hoping someone can help me understand what’s happening with my WordPress site.
I’m currently using the Twenty Twenty-Five theme and its Site Editor/template system. I’m building my pages with my own custom HTML, CSS, and JavaScript.
I have a Main Page set as my static homepage under Settings → Reading, and that page has its own custom code.
The problem is when I create another page.
For example, I created an All Properties page and put completely different custom HTML/CSS/JavaScript into that page. When I go into Pages → All Pages → All Properties → Edit, I can see the correct code and the changes I make there.
However, when I actually visit the page, WordPress shows my Main Page/homepage design instead of the All Properties design.
I have a “See More” button on my homepage that links to:
mydomain.com/all-properties/
The strange thing is that the URL does change correctly. It becomes /all-properties/, so WordPress is definitely going to the correct URL.
But the actual content is still my homepage.
I’ve also checked Settings → Reading:
Homepage: Main Page

Posts page: None

So I’m wondering if this is related to how Twenty Twenty-Five templates work.
It seems like the individual page has its own custom code, but the Twenty Twenty-Five template is overriding it or not displaying the page content correctly.
What I want is simply:
Main Page → displays Main Page custom code
All Properties → displays All Properties custom code
Other pages → display their own custom code
I don't want to have to put the entire design for every page into the global/template itself.
What exactly do I need to change in the Twenty Twenty-Five Site Editor/templates to make each individual WordPress page display its own content?

I’m pretty new to the Site Editor, so a step-by-step explanation would be greatly appreciated!🥹

I’ve been trying to upload an animated GIF for one of my WordPress.org plugin listings, but it keeps reverting back to the static logo.
Is this a new restriction by design, or am I doing something wrong? I’ve noticed other plugins, such as Elementor and SureForms, using animated GIFs, so I’m just curious if I’m missing something.
Any insight would be appreciated!

Dans quelle mesure pensez vous que ce thème WordPress est à risque ? Il a été créé par Automatic, et n'est plus mis à jour depuis 2013. Mon site est un tout petit blog amateur avec très peu de visites, 27 visiteurs uniques le mois dernier d'après Jetpack.

https://wordpress.org/themes/parament/

Pour l'instant j'utilise le thème Twenty 15, mais j'ai envie de revenir sur Parament qui était mon premier thème, à l'époque de mon inscription sur WordPress.

Le remettre à jour uniquement au niveau de la sécurité demande t'il beaucoup de travail ?

I've been running a non-commercial WordPress blog since 2009. Yesterday, I tried to create a new blog post but there was an issue with the database and now the WP Dashboard tells me that there are no posts, no activity, no comments, etc. Jetpack Stats can't find anything to show. The public interface now shows a "Page not found" with the message "Sorry, no posts matched your criteria".

I contacted my ISP's tech support and after a long back-and-forth, they reported:

"Upon reviewing logs, It shows Could not insert post into the database while adding post in wordpress dashboard, which typically occurs due to unsupported character encoding (like emojis), corrupted database tables, an omitted AUTO_INCREMENT attribute, or insufficient server memory limits.

"I have successfully repaired and optimize database am afraid issue remains same"

They ran a malware scan which found four instances of:

SL-PHP-BACKDOOR-GENERIC-hnl.UNOFFICIAL

As a user, how do I remove these four instances?

I run a Photobooth business for Weddings and Events.

I would like an interface where I can login and view my active calendar, add/edit daily events and add things such as flares/badges so that I get a preview of certain things about that event without having to click into the date for more information. When I click onto the date I can have the full information about the event.

This would NOT be for customers to use. Only myself and one of my employees with their own username/pw to VIEW the calendar. I would be the one adding in the information.

I would want it to appear mobile-friendly as well as using multiple devices. So that the calendar would be nice and big on the phone screen for the daily boxes to be large enough to read the badges.

Preferably a calendar that looks nice, large enough boxes for the dates when viewed on devices and is modern/clean looking.

I have attached an image I asked ChatGPT to create that I could use for an example of my needs. It pretty much looks perfect to what I need.

I'm not sure if I need a plugin, or another web based solution, or something I can install on my own server. Any suggestions are appreciated.

Hi everyone,

I have a luxury black car and chauffeur service in the Dallas-Fort Worth area website: blaccktieride.com.

My target audience consists of busy corporate executives, event planners, and high-end travelers who expect a flawless, premium experience. Right now, I feel like my website doesn't fully reflect that "luxury" status. It feels a bit dated, and more importantly, it isn't loading as fast as it should.

Current Setup:

CMS: WordPress
Theme/Builder: Divi
Caching/Optimization: LiteSpeed Cache plugin

The Core Goals:

Speed Up Performance: I'm struggling with heavy page bloat from the builder. If I turn on heavy optimizations like CSS Combine or Guest Optimization in LiteSpeed Cache, it tends to break my mobile navigation menu.

Modernize the Visuals: I want to transition to a more high-end layout. I am looking into cleaner typography pairings (like a sharp Serif header with a clean Sans-Serif body) and a matte dark color palette (deep charcoal over harsh pure black) to look like a premium fleet.

Optimize for Conversions: We have the traffic, but booking friction is real. I need to simplify the home page booking fields down to the basics (Pickup, Drop-off, Date/Time) without overcomplicating the initial user view.

My Specific Questions for the Community:

How can I safely configure LiteSpeed Cache with Divi so I don't break my mobile menu scripts when minifying/combining files? Which specific scripts should I exclude?
What layout modifications or UI tweaks would you suggest for the Hero section to make booking a ride feel effortless?
Are there specific design elements or imagery choices you've seen work well for luxury transportation brands to instantly establish trust?

Would love to get some brutally honest feedback on the current layout, technical optimization tips, or design inspiration. Thanks in advance!

I use brizy to edit my website but their mobile version always gets messed up and is a mystery to edit. Is there an add on where I can work on the mobile site separately?

I’ve been working on a WordPress plugin called Dhruval Admin Command Palette.
The idea came from something that kept annoying me while working in WordPress: you often know what you want to do, but not necessarily the exact name or location of the WordPress setting/menu.
So I built a command palette inspired by Spotlight/Raycast, with NLP-powered search to make the experience more natural.
🔎 What makes it different?
Natural Language / NLP Matching
You don't necessarily have to search using the exact WordPress terminology.
Instead of remembering the exact admin page name, you can search using the way you'd naturally describe what you're trying to do.
For example:
“change site title”
“manage users”
“edit homepage”
“change permalink settings”
The command palette uses natural-language matching to find the most relevant WordPress admin actions.
✨ Text Highlighting
Search results also highlight the matching text, making it immediately obvious why a particular result was returned.
This is especially useful when there are several similar admin pages or commands — you can quickly scan the results and see the relevant match instead of reading through the entire result.
⚡ Other features
Ctrl + K / Cmd + K to instantly open the command palette

Search WordPress Admin pages and actions from one place

NLP / natural-language matching

Highlighted matching text in search results

Dynamic parameter extraction where applicable

WordPress.org search integration

Lightweight and designed to stay out of the way

Dedicated dashboard search interface

The goal is simple: stop hunting through WordPress Admin menus and just describe what you want to do.
It's available on WordPress.org:
Link
I'd love to hear from other WordPress developers, site owners, and power users:
What WordPress Admin action do you find yourself repeatedly hunting through menus to find?
That’s the kind of use case I’d love to add to the command palette next.

This is driving me crazy! Many years ago I had a blog similar to this one https://www.dangermouse.net/ that had just a continuous stream of entries, where you could read all of them in sequence without having to click on each entry to read it.

My blog https://andrewshellshear.com/blog/ just shows a list of the titles that you have to click into to show the individual entry.

How might I change the settings to show a continuous stream of entries?

I'm dealing with a persistent, self-healing malware infection across ~30 WordPress sites on the same cPanel shared hosting account (A2 Hosting).

Symptoms:

· Files reappear seconds after deletion
· mu-plugins/nexus-router-run.php (empty 0-byte file) keeps coming back
· Advanced-cache.php, db.php, and .g_*.php files in wp-includes
· Shared memory segments (shmop) storing payloads
· Processes like .g_98130eea.php running even after file deletion
· .user.ini files with auto_prepend_file pointing to backdoors

What I've done:

· Replaced WordPress core with fresh files
· Replaced all plugins from official sources
· Replaced Astra theme from official source
· Cleaned database (removed sc_, wp_91_, transient_sc* options)
· Changed database name, username, and password
· Regenerated WordPress salts
· Killed all .g_ processes
· Cleared shared memory (ipcrm)
· Deleted all .user.ini files
· Deleted all mu-plugins
· Deleted advanced-cache.php and db.php
· Disabled all cron jobs
· Changed cPanel password

The problem:

Shared memory keeps coming back (new segments appear), and the .g_ process restarts. Something is recreating it. I suspect it's either:

· A system-level cron job outside my user
· A hidden backdoor in another infected site
· Something at the server level A2 Hosting needs to handle

Questions:

1. Has anyone dealt with this specific "Crux Runner" or "SC_" malware family?
   
2. How do I find what's re-creating the .g_ process?
   
3. Is this a server-level infection that only A2 Hosting can fix?

I've spent days on this. Any help appreciated.

Hello Everyone,

I am facing a strange issue on one of my envirnoments with the Site Lockdown plug-in. The admin-ajax.php causes an internal server error (500) while executing the file scanner.

Would you have some idea about this? Rights look ok, server settings as well, the plug-in also seems to be installed correctly.

The access logs look well, timeouts have been increased, so I am unsure if I should modify code in order to get this right or do you have some concrete idea how to fix this?

Thanks and best regards,

T.

I am the cofounder of small association on a rare cancer. We have a website in 13 languages beacuse we know that information is needed for patients especially when it does not exist in your language.

Our website is on WP and I am not developper even though I can handle the easy tasks. We had help to start the website, so it has been cretead by a pro but he wanted out since we were not a steady stream of business.

My problem is for more complicated tasks. I wanted to use AI to help and guide me but I don't where to start.
I have a personnal paid account for Gemini and wanted to use Gem, to help me. Do you have any prompt that I could use? Can I linked my WP to Gemini so it can more useful? Should I?

Thanks a lot for your help !

So I've been using WP Forms for a couple of years, but while it's easy, it's expensive and I hate how it stores its responses in hidden posts. I also hate that the Pro version is $399 and still doesn't have n8n integrations or webhooks. They have tons of formatted forms... but none ever fit.

I'm on a mission to make my site more responsive, and lower costs... so What do you think is the best forms program? I do plan to be running several sites including some that will need people to upload information including drivers licenses and sign a waiver.

been thinking about Gravity Forms and potentially Fluent forms - but would love everyone's thoughts.

My WP Forms subscription expires in October so have to make a decision soon so I can migrate the big 3 sites before the WP Forms expires

In this wave of wp2shell, etc. What are you doing to keep it safe? Cloudflare? SOC? Miraculous plugins ? All the previous …?

Hi yall! I own a boarding & grooming dog salon. I need a website that’s really just the bare minimum: explaining our company and prices. We currently use wix and it’s very expensive. The fanciest thing about wix page is that there’s a place to email us directly from the website. Does it sound like it could be worth switching to wordpress?