A “read-only” AI command could print your WordPress DB password with no approval. The gap we found in our own MCP tooling — and the fix.
Tag: WordPress
For one of my clients, WorkCycles.com, I had to add a notification bar to explain the move of the bricks-and-mortar shop to a new location….
Back in the day, a lot of WordPress developers like me started out using existing themes and plugins, scanning Stack Overflow threads, copying snippets from…
Server logs from 1,807 live AI fetches show which pages ChatGPT and Perplexity actually pull — and why your services pages barely register.
In July 2026, Henry Cutler emailed me. Henry owns WorkCycles, a bike shop and manufacturer in Amsterdam that builds cargo bikes and classic Dutch city…
Go looking for a WordPress theme and you will find, over and over, a theme built to sell physical products. Shop grids, cart pages, product…
We wrote the guide on adding llms.txt to WordPress back when the standard was picking up momentum, and imagewize.com has hosted one since. So when…
If you’ve researched Trellis WordPress hosting, compared managed WordPress hosting plans, or gotten a quote from a WordPress agency, you may have run into “Bedrock”…
Every WordPress shop that manages its own servers ends up with the same pile: a database backup script here, a malware scanner there, an Ansible…
Adding a CAPTCHA to a Contact Form 7 form on one of our Bedrock/Trellis sites looked like a two-minute job: drop [captchar captcha-123] into the…
Every SVG icon on our Nynaeve WordPress theme — the icons in service-hero, trust-bar, feature-cards, icon-grid, and contact-section blocks — quietly turned into broken images….
Pull up your WordPress site’s access logs and you’ll find something that wasn’t there two years ago: a parade of AI crawlers working through your…