WP2Shell: the WordPress flaw that needs no login
On 17 July WordPress closed WP2Shell, a two-CVE chain giving unauthenticated code execution on a clean install, and the first attempts landed within hours. What we checked across the sites we maintain, and why patched does not mean clean.
Headless WordPress in 2025: still alive? Yes, but differently
Two years ago we were sceptical. Today headless WP is a more mature practice with better tools and a clearer scope. What changed and what did not.
WordPress 6.8: zoom out, stronger pattern library, what to fix first
WordPress' latest major polishes the Site Editor. What landed well, what breaks, what to test in staging.
WordPress 6.6: mature block themes and what changes for site builders
Section styles, overrides in synced patterns, view transitions: WordPress 6.6 is the most solid block editor release to date. Here is what is worth adopting.
WordPress 6.5: the Block Bindings API is the missing piece
Connect blocks to custom fields without writing PHP. For editorial site builders, a small revolution.
WooCommerce and ERP: integrating e-commerce and back-office without losing your mind
Catalogue, orders, warehouse, invoicing: the sore spot of every Italian e-commerce. The integration patterns we actually use in production.
Headless WordPress: pros, cons and when it actually makes sense
Decoupling WordPress from the frontend is trendy, but it is not the universal answer. Here is when it pays off, when it does not, and what we have learned on the job.
