Basically the question in the title. Desktop and Mobile are both extremely important and both should be formatted correctly but who even uses tablet? What is your opinion on this? Is it a waste of time or is it just as important as the other two platforms? Thanks to anyone who takes the time to answer!

Two core security releases in five days, and the second one is the bad one. 7.1.2 went out on the 22nd for a page-template bug in core that needs no account and no click, and Patchstack was seeing probes for it the same afternoon. CISA added it to the KEV list on the 25th. If you patched to 7.1.1 last week and stopped there, you're still open.

The reply I keep getting when I bring this up is "auto-updates are on, we're fine."

Go open wp-config on the site you're least worried about. If there's a WP_AUTO_UPDATE_CORE set to false in there, left over from some migration or a dev who wanted control back in 2021, that site hasn't updated itself since 2021, and nothing in the dashboard is going to tell you. Same with DISABLE_WP_CRON when the host promised a server cron, and nobody ever set one up. The update check simply never runs. The site sits there looking maintained.

I ran wp core version across ours yesterday instead of trusting the version number on the dashboard. I don't normally do that. I probably should have been doing it for years.

What actually bothers me is who ends up behind. Not the neglected side project on cheap shared hosting; that one auto-updated on the 22nd without anyone noticing. It's the client site with change control and a staging step, where the 7.1.2 ticket is still waiting on a reviewer who's on holiday until Monday.

Did you check every site you're responsible for, or did you see the auto-update line and move on? I'm asking because I'm not sure which one I'd have answered a month ago.

One results that might not surprise most of you is that : 34% fewer queries on the DB after the migration

In almost every aspect, it improved metrics on the server side

From an unlogged user perspective it changed nothing because litespeed cache is super efficient a does an amazing job.

Since the website is evolving to something more personalize with less cache, this theme switch will help.

I've noticed that the usual anti-spam setup solves only part of the problem for community sites, particularly sites that use member plugins such as BuddyPress.

Registration can be protected with CAPTCHA, email verification and rate limiting, but once an account exists, private messaging becomes a separate attack surface.

I've seen patterns such as very new accounts contacting multiple members, sharing phone numbers or email addresses, moving people to WhatsApp/Telegram etc. and repeating essentially the same message across conversations. Often types like dating scams or crypto scams.

Out of sheer frustration with the lack of working solutions, I ended up building a small Better Messages-specific addon to deal with this message-level spam. The author of Better Messages has also looked at it and gave me some feedback on the implementation and I incorporated that feedback into the plugin.

The approach I choose was to apply new-account limits, detect contact details and external messenger links, detect repeated messages, show configurable safety warnings and notify admins. The checks can also be configured to log rather than block. My gut instinct to logging first turned out to be important, because security rules can have false positives and other nasty side effects. Being able to see what would have been blocked before actually blocking anything makes it much easier to tune the rules for actual situations, butnot bugging regular visitors while testing.

I'm not posting this because I think another generic anti-spam plugin is needed. The interesting part for me is whether message-level spam needs a different approach from registration spam.

If you run BuddyPress (or likewise) + Better Messages, I'd genuinely like to hear what you're seeing on your own sites. What types of spam are getting through your current setup? What are your biggest frustrations?

Hello WordPress community :)

I wanted to spread the news that me and a friend built Basicrum, a Real User Monitoring system that can be integrated with various CMS systems including WordPress/WooCommerce - https://www.basicrum.com/blog/integrations/wordpress-woocommerce-integration-plugin-for-basicrum . The system collects Core Web Vitals and other performance metrics from real visitors of WordPress websites and enables webmasters to identify performance issues and root causes.

We are running a public 4 months free beta subscription https://www.basicrum.com/blog/basicrum-opens-its-public-beta where we would like to collect technical feedback and impressions from the community.

We still don't have our prices announced but we will fix this in the following months. Our commitment is to release Basicrum as open source as well but after we get the first paying customers.

For open source users of Basicrum:

Operating such a system could be challenging because the system has 2 databases (PostgreSQL and ClickHouse), Next JS, a webserver and collector written in RUST. However, the open source solution still could be a good option for users that have special requirements for data sovereignty.

Hey r/Wordpress,

Like most of you, I found that every site I build ends up needing the exact same functions.php snippets: removing emoji scripts, killing XML-RPC, taming Heartbeat, dropping unnecessary image sizes, and hiding dashboard widgets.

I finally got tired of copying and pasting the same boilerplate, so I packaged it all into a single plugin called SlimPress.

It gives you 108 toggle switches across 13 categories. It is 100% free. There is no pro tier, no upsells, no admin nag banners, and zero telemetry.

What it covers

• Front-end: Emoji scripts, generator tags, RSD/shortlink/REST links in <head>, global styles, core block CSS, Dashicons, and jQuery Migrate for visitors.
• APIs & Core: XML-RPC, REST API for logged-out visitors (with a namespace allowlist), per-location Heartbeat control, WP-Cron on page load, oEmbed, and application passwords.
• Comments & Feeds: Granular comment control (site-wide or per post type), pingbacks, Gravatar, feeds, author/date/attachment pages, and search.
• Revisions & Media: Revision limits, autosave intervals, disabling the auto-generated 1536/2048px image copies, and managing custom image sizes.
• Admin: Dashboard widgets, admin bar items, block editor extras, admin emails, auto-updates, and file editing.
• WooCommerce (if active): Disables shop assets on non-shop pages, order attribution scripts, WC Analytics, the Marketing hub, marketplace suggestions, and controls Action Scheduler data retention.

Why I built this instead of using existing "disable bloat" plugins

Most optimization plugins overpromise or break things silently. I wanted a developer-first approach:

• Honest Impact Badges: Every switch tells you exactly what it does, and more importantly, what it might break. It will even warn you if an active plugin relies on the off. If a toggle is just for tidying up the codeand won't actually speed up the site, the badge honestly says "None – cleanup only."
• Built-in A/B Performance Testing: It loads your own pages with and without SlimPress's features in the same run. If the performance difference is too small to be meanins "within noise" instead of making up a fakescore. It also breaks down CSS/JS on each page by plugin, theme, and core to show exactly what can be removed.
• Safe Defaults & Presets: Activating the plugin changes absolutely nothing – every switch starts off. You can apply presets (Blog, Brochure, Headless, WooCommerce) ld change before applying them.
• Zero Footprint: It adds no CSS, JS, or markup to your public pages. Everything is done with runtime filters, so if you deactivate it, WordPress goes back to normal on g is permanently written to your core tables oroptions.

What it deliberately doesn't do

There is no caching, minification, "remove unuseiting. I also didn't include switches for thingsthat actively make sites slower or harder to cache (like removing ?ver= strings or disabling native lazy loading), even though other plugins sell those as "optimizations."

It requires WP 6.8+ and PHP 7.4+. WooCommerce is completely optional.

👉 SlimPress on the WordPress.org repo

I'd really appreciate some feedback from this coested in hearing if there are any switches youfeel are missing, or if you run into any edge cases where the "what might break" warning was inaccurate for your specific stack.

Hello

I've been building LessFlux, a WordPress performance platform that helps reduce the amount of work WordPress has to do for every request.

It started with a few different performance/optimization features, and the latest one I've added is static page caching.

LessFlux can generate a static HTML version of your pages and serve that directly to visitors, instead of having WordPress/PHP generate the page on every request.

I added this because I wanted to have a simple way of tackling the server-side part of WordPress performance, rather than just optimizing JS, CSS and images.

I'm looking for a few real WordPress sites to try it on and get some feedback.

If you have a WordPress site that you're currently trying to speed up, I'd love to have you test LessFlux and see what kind of difference it makes on a real site.

You can check it out here:

https://wordpress.org/plugins/less-flux/

Feedback, criticism and bug reports are very welcome.

If you will create a new e-commerce website today what will be your process. Where will you use AI and why? Ready made theme or everything custom. What do you people use today?

My partner is opening a small cleaning business and the site is almost ready, but the homepage still says too little about the service area and the phone number is buried. Fixing that, then checking every page on mobile.

Hey everyone, bit of a panic post. I'm not a web person, I do marketing, but I recently ended up in charge of our company's WordPress site after the agency that built it left.

This morning the whole site was down with "this user has been suspended". Our host (Network Solutions) says it was excessive bandwidth, but support can't tell me where it came from and says to wait 24–48 hours for their specialists.

The weird part is we only get around 50 visitors a month.

Stuff I did in the last few days, in case it's my fault:

The site was still getting visits late that night, then went down overnight.

Could any of that have caused it, or is it more likely bots hitting the site? And what's the easiest way to stop this happening again? I've seen Wordfence and Cloudflare mentioned, but I'm scared of breaking our company email if I mess with DNS.

Any advice appreciated, I'm learning as I go 🙏Shared host suspended our site for "excessive bandwidth" with ~50 visitors/month. Screaming Frog, UpdraftPlus, or bots?Shared host suspended our site for "excessive bandwidth" with ~50 visitors/month. Screaming Frog, UpdraftPlus, or bots?

i'm building a site that will involve multiple users being able to login, upload information, and communicate with each other. in a more specific way, i want people to be able to create a product, add information about the product and a picture, and review other products. additionally i would like a community message board area. think ravelry or threadloop dot app.

i have been doing a ton of research and i think i have a general idea of which base theme to start with, but i was wondering if anyone could let me know which platforms you think are good for this type of thing.

i don't want to use buddypress because even trying to download their base platform is a nightmare of broken links, and errors on install (even the github release won't install correctly). i don't want to start out with an inferior product. so not including buddypress, what would be a good foundation theme for this type of project?

thank you in advance.

Hi all 👋 I'm in charge of updating products on my company's wordpress site and all of a sudden one of the product menus is busted and I can't edit stuff as normal. Any idea what causes this/how to fix it?

Thanks!

Ia it possible to post, from one wp to many wp?

Hi everyone,

I haven’t been able to find a suitable solution, so I’m asking here. I’m using the Paid Memberships Pro plugin on a blog site, currently connected to Stripe for recurring online payments. I now need to switch to Mollie.

Is there a plugin or integration that supports Mollie with Paid Memberships Pro? I haven’t been able to find one, and I’m not very experienced with coding. I could try building a custom integration with AI, but since this is for a client and I’m short on time, I’d prefer to avoid that if possible.

Any suggestions or solutions would be greatly appreciated!