Archive
Past newsletter issues built for retrieval, not just memory.
Browse weekly WordPress fixes by topic so old issues stay useful when you need them, not just when they were sent.
Issue library
security issues
5 issues available in security.
Issue 20
Your backups are fine. Have you ever restored one?
Most WordPress sites have a backup running and have never once been restored from it. The difference matters only on the worst day, when it is too late to find out. What "I have backups" usually hides, the 4 ways a backup quietly fails and how to prove yours works before you need it.
Issue 19
A critical PHP flaw was announced. Is your site covered?
Two critical PHP vulnerabilities announced on 21 October 2026 let attackers run code on a web server without logging in. WordPress, theme and plugin updates do not fix them. How to check your PHP version, why the version number alone can mislead and what to do on managed, shared and self-managed hosting.
Issue 16
An hour a month is enough (if it's the right hour)
Not every site needs a care plan, but every site needs a routine. The failures that take WordPress sites down are never sophisticated: an untested backup, a plugin abandoned two years ago, an admin account belonging to someone who left. The monthly hour that catches them, and the checklist pack.
Issue 8
The app I built so the vendor can't see your data
A slight detour from the usual weekly fix. Most software you rent can read everything you put into it, and can lock your data away the day you stop paying. I built NomadWealth — a self-hosted personal net-worth app — on the opposite principle.
Issue 6
97% of WordPress hacks come from one place
Almost all WordPress vulnerabilities come from plugins and themes, not core. A 20-minute audit to find the abandoned and risky plugins on your site — and why a maintained site is a safe one.