I have a horoscope site that runs on a strict calendar. Daily, weekly and monthly content needs to go up on time every time or readers notice immediately.

Started by building a few plugins using Lovable and Claude to handle the repetitive stuff. One checks the whole site regularly, fixes broken links, handles SEO issues on older posts, flags speed problems. Basically a full audit running in the background without me thinking about it.

The publishing side I solved differently. I connected the site to an external tool that handles research, drafting and scheduling. I still review everything before it goes live but I stopped being the bottleneck.

The whole thing runs mostly on its own now. I check in, review drafts, hit publish. Maybe 30 minutes a day for a site that used to eat my entire Sunday.

Anyone else building custom plugins to automate parts of their WordPress sites? Curious what people are using for the publishing side specifically.

Hello! sorry if I seem dumb, I'm new to wordpress. I'm making a website for a taxi company for a uni internship.

their old website included a field where you could type a specific number you wanted, then pay via mollie (which popped up on a new tab, where you verified your set amount and paid with the method of your choice). i was told they have no log in access to that site anymore, which was apparently made using python.

i tried a number of plugins, but i was unable to find one similar to that. i found mollie for woocommerce, but i haven't been able to find a way to connect it, as the company has no products they sell for a set amount, since they're a taxi company, the prices are obviously going to vary.

does anyone have any idea how i could do this? thanks a ton in advance!!!

EDIT: wow, thanks for all the replies! i know where to come back with dumb questions lol. i did check every recommendation, thank you for all the help! what i found to be working best was a plugin called Kudos Donations. so, while not exactly Gravity Forms, it did end up working fine.

My wife and i started up a subscription box and officially launched it on June 1st, we managed to sell a total of 12 boxes, but seem lately traffic to our site has been in the low 20s per day, we've recieved positive review and try to be active on social media with posting about the business, our sales market is Canada only for the time being until business picks up and becomes consistent. any help would be great as our budget is getting tighter the longer we go.

It has been a long time since Cloudflare launched EmDash. Is anyone here currently using it? Is it worth trying?

I evaluated it once when it was initially launched.

Have they added additional features and addressed bugs?

Is it sufficiently mature to develop a client's website using it? What are your opinions?

Why does WordPress not offer 2FA, at least via email?
Isn’t this the most basic security precaution to protect user profiles… I always feels like having the client on the website as an admin is the highest security risk there is…

EDIT:
Thank you for all the replies! I understand it is a big deal to make this a core feature etc, and I am also aware I can use plugins for this 🤣
My thought is just that I know NO APPLICATION, that does not use one way of 2FA, so i see no harm in adding it to core, but then I probably have not enough dev experience to make that decision…

I have a custom post type with a column structure containing two columns.

The left column is 75% width, and contains an image.
I want the image to maintain its proportions and have a height no taller than 75% vh.

So far, I haven't been able to get this to work...

Any suggestions?

thanks

Recently some of my clients got hacked, they had free versions of Sucuri and Wordfence (very good plugins) but that did not stop the malware. (I think paid ones might have). The malware got it via few plugins (mostly via OptinMonster, TrustPulse or PushEngage) even if they were disabled

I understand it can't be just one service and there are multiple points of failure, but still... Experience sys guys, which free service do you trust the most?

Also yeah, I know almost impossible for free ones to be very very good! But maybe some open source project out there that many don't know of?

Hey r/WordPress,

Just launched Addifect — a free WordPress plugin that adds live WebGL shader effects to any site.

Works with Elementor, Divi, Gutenberg, Bricks, any theme. No coding required. You create your effect in the Studio, then drop one line anywhere in your editor:

<div data-addifect-block="hero"></div> The free version includes several shaders to get started. Everything runs at native WebGL performance — no Three.js, no bloat. Would love feedback from the community on the concept and implementation.

🔌 wordpress.org/plugins/addifect

https://preview.redd.it/i0hjtpxwgbbh1.png?width=722&format=png&auto=webp&s=1ef3310b835d47584a1c3786335ffa9e2d60c629

Do check please! Over 1.2 million wordpress websites compromised. Hackers made admin accounts and are sitting silently. On some sites they activated Cloudflare/ClearFake malware.

Please search your admin accounts and make sure you don't spot something new/unknow. Check all your folders (esp Plugins) for random PHP files and codes.

Free version of Wordfence didn't detect it!!

Hope this helps someone. Our clients had to learn the hard way! (Plugins weren't even enabled. They come bundled with Monsterinsight Pro)

I've tried searching Google, I also tried searching on Reddit, but I can't seem to find others running into the same issue.

I'm using Wordpress version 7.0. As part of trying to figure it out, I disabled all of my plugins. I also tried changing my theme from Neve to Twenty Nineteen and the issue persists.

I can copy and paste content with spaces in it onto the page just fine, but that's a really hackey way of editing and I would prefer to figure out what's wrong.

My website has been compromised by malware associated with Cloudflare. Does anyone have a guide on how to properly remove it?

I’ve attempted to delete some files under the mu-plugins directory, but there seems to be a cron job that automatically updates this content, causing the malware to return.

Can anyone assist me with this?

I manage small B2B Websites (usually less nach 50 pages, sometimes no blogposts at all)
Should I disable the WordPress Rest API or Not?

What drawbacks can I expect?

My site updated Jetpack to version 15.9 on June 11th, and unbeknownst to me, it also enabled the "Newsletter" product at the same time. I found it today in my activity log as "Enabled user subscriptions to posts and comments." So, all of my users received embarrassing, poorly-formatted emails upon my next few posts. How can they charge so much for their product but allow stuff like this to happen?

Hey everyone. I run a couple of niche content sites targeting the US/UK market. Lately, my team's publishing workflow has slowed down significantly due to a minor but annoying technical bottleneck.

When copying long-form drafts out of Claude or ChatGPT directly into the WordPress Gutenberg editor, the text spacing breaks completely (massive double/triple empty line gaps between paragraphs), and things like smart/curly quotes cause formatting glitches in our layouts.

Right now, our writers are manually dropping the text into a local Notepad file first, cleaning up spaces line-by-line, and then manually fixing the headers. It takes about 5-10 minutes per article, which adds up massively when pushing 20+ articles a week.

Are you guys using a specific lightweight standalone utility to completely sanitize raw LLM text formatting before pasting, or is everyone just stuck fixing this manually? Curious to know how high-volume publishers are streamlining this. Thanks!