12 articles
Every article tagged WP-CLI, newest first. Search all articles
Security10 min read
cPGuard supply chain attack: check your server and WordPress sites
The cPGuard supply chain attack put root-level server credentials at risk through a malicious automatic update on November 2, 2026. Check your cPGuard update history first, even if you have already patched the server.
Security11 min read
DreamHost data breach: what to check on your WordPress site now
The DreamHost data breach exposed FTP/SFTP credentials and some webmail accounts, putting affected WordPress sites at risk of unauthorized changes. Start by checking DreamHost's reset notice and securing your file-access and email accounts.
Security12 min read
Ultra Addons for Contact Form 7 vulnerability: check, update and recover
The Ultra Addons for Contact Form 7 vulnerability (CVE-2026-102435) affects plugin versions 3.5.54 and earlier when PDF Generator is enabled and a form uses it. Version 3.5.55 fixes the flaw. Check your installed version and PDF Generator settings first, then update and look for signs of deleted files.
Security12 min read
How to clean a hacked WordPress site and stop it happening again
To clean a hacked WordPress site, contain it and keep a copy of the compromised files and database, then find what changed and replace compromised code from trusted sources. Close the entry point, rotate credentials and salts, clear search warnings and watch for reinfection.
Monitoring7 min read
How to test WordPress plugin updates before they reach production
To test WordPress plugin updates safely, copy production to staging, a private test copy, review what changed, update in controlled batches, and run the site flows that matter before production. Keep a pre-update backup and the previous plugin package or version ready so you can reverse a bad release quickly.
Performance7 min read
WooCommerce Action Scheduler: clear a backlog and keep it healthy
A WooCommerce Action Scheduler backlog means scheduled background work is arriving faster than it is being processed, or processing has stopped. Start by grouping pending and failed actions by hook, fix the hook or cron problem, then drain the queue with WP-CLI instead of deleting unknown jobs.
Performance7 min read
WooCommerce HPOS: migrate to High-Performance Order Storage safely
WooCommerce HPOS moves core order data out of WordPress post storage into dedicated WooCommerce tables. Migrate safely by checking extension compatibility, synchronizing both data stores, verifying them, switching HPOS to authoritative, then testing every order workflow before you disable synchronization.
Monitoring7 min read
WordPress cron monitoring: prove scheduled jobs ran
If WordPress cron not running is delaying posts, emails, imports, or backups, first prove whether WP-Cron can spawn and whether events are already overdue. Then move the trigger to a system scheduler when timing matters, and monitor both overdue events and a success heartbeat from the jobs you care about.
Monitoring8 min read
WordPress plugin vulnerability monitoring: from alert to fix
WordPress vulnerability monitoring works when you keep a current inventory of installed plugins and themes. Compare exact versions with trusted vulnerability data, then record what you did with each match.