Feed
-
Starting to get emails that make it clear the person basically told AI “Make and app that does this, and then email anyone that might be vaguely related to this about some sort of co-venture”.
-
Starting to get emails that make it clear the person basically told AI “Make and app that does this, and then email anyone that might be vaguely related to this about some sort of co-venture”.
-
Starting to get emails that make it clear the person basically told AI “Make and app that does this, and then email anyone that might be vaguely related to this about some sort of co-venture”.
-
Achievement Unlocked: Watch a bird fly overhead carrying a coat hanger.
-
eBay UK is offering grants of up to £200,000 through their Up & Running programme — worth knowing if you run a WooCommerce store alongside an eBay channel. Syncing inventory and orders across both platforms is a real ongoing cost. A grant like this could cover the tooling or resource to automate it properly. #WooCommerce #WordPress #eCommerce #eBay #SmallBusiness https://wpguy.uk/blog/ebay-grants-for-woocommerce-sellers-up-to-200000/
-
A 9.2 CVSS score in WordPress core means an attacker can read server files or execute malicious code with no login required whatsoever. No credentials, no brute force — just an unpatched site and an opportunity. I would not wait on this one. Check your version and update now. #WordPress #WordPressSecurity #SecurityHardening #WebSecurity #CyberSecurity https://wpguy.uk/blog/wordpress-core-flaw-scores-92-patch-your-site-now/
-
If your site runs Elementor 4.3.0 or 4.3.1, I would update immediately. CVE-2026-62062 allows any authenticated user — a subscriber or WooCommerce customer — to escalate their privileges to admin level. Open registration or a membership area makes this a concrete, present risk rather than a theoretical one. #WordPress #Elementor #SecurityHardening #CVE #WordPressSecurity https://wpguy.uk/blog/elementor-privilege-escalation-cve-2026-62062-update-now/
-
Amazon UK now offers Affirm instalment payments, and it raises the bar for every WooCommerce store competing for the same customers. When a buyer can spread the cost on Amazon but not on your site, the checkout decision gets harder. I work with store owners to close that gap with instalment payment options built properly into WooCommerce. #WooCommerce #WordPress #Ecommerce #CartAbandonment #PaymentUX https://wpguy.uk/blog/woocommerce-instalment-payments-reduce-cart-abandonment/
-
Sole trader simplicity has its limits. Once income grows, that structure can cost more in tax than a limited company and leaves personal assets exposed — risks a separate legal entity would prevent. I explore whether incorporation is the right move and what the practical advantages actually look like. #WordPress #SmallBusiness #SoleTrader #LimitedCompany #BusinessStrategy https://wpguy.uk/blog/sole-trader-to-limited-company-is-incorporation-right-for-you/
-
CVE-2026-87902 scored 9.2 out of 10, affected every WordPress version since 2016, and was actively exploited within 24 hours of disclosure — no login required. Most site owners never heard a word about it. That silence is the real vulnerability. Knowing your site runs WordPress is not the same as knowing what is happening to it. #WordPress #WordPressSecurity #CyberSecurity #SecurityHardening https://wpguy.uk/blog/cve-2026-87902-the-wordpress-flaw-most-owners-missed/
-
A critical RCE vulnerability in WordPress core means attackers can execute arbitrary code on your server with zero credentials — no login, no insider access required. Automated scanning began almost immediately after disclosure. If your site is not running 7.1.2, the risk is active right now. Update today. #WordPress #Security #RCE #WordPressSecurity #WebDev https://wpguy.uk/blog/wordpress-712-critical-rce-vulnerability-explained/
-
Two-thirds of UK shoppers go straight to Amazon before they even consider an independent retailer. The real problem is not price — it is that independent stores never enter the consideration set at all. No discount fixes that. In my latest post I look at what UK independent stores can actually do about it. #WordPress #WooCommerce #eCommerce #UKRetail #IndependentRetail https://wpguy.uk/blog/how-uk-independent-stores-can-compete-with-amazon/
-
87% of UK consumers bought secondhand in the past year — making the UK the most active pre-loved market in the world. That is not a niche trend. If you run a WooCommerce store, your product strategy should be responding to it. I have written about what this means practically. #WooCommerce #WordPress #Recommerce #eCommerce #SecondhandUK https://wpguy.uk/blog/woocommerce-for-secondhand-sales-meeting-uk-demand/
-
Manual tracking entries and carrier portal-switching might feel manageable in October. Come November, that friction multiplies across thousands of European orders and the cracks show fast. Shopify has been investing heavily here — WooCommerce stores need to close that gap before peak trading hits. #WooCommerce #WordPress #eCommerce #EuropeanShipping #WordPressdeveloper https://wpguy.uk/blog/woocommerce-european-shipping-closing-the-shopify-gap/
-
If your WooCommerce store runs any version from 9.8.0 to 11.1.x, it is currently exposed to CVE-2026-106608, a CVSS 7.2 vulnerability that allows unauthenticated remote access to your store data and admin functions. I recommend updating to 11.2.0 immediately. #WordPress #WooCommerce #CVE #SecurityHardening #WordPressSecurity https://wpguy.uk/blog/woocommerce-cve-2026-106608-update-to-1120-now/
-
European shoppers are waiting a median of 16 days for refunds from UK online stores, according to ShopReturns research. The delay usually sits inside warehouse processing, not transit — the parcel arrives back quickly, then waits. That distinction matters if you are trying to fix the problem on a WooCommerce store. #WooCommerce #WordPress #Ecommerce #UX #RetailOperations https://wpguy.uk/blog/why-european-refunds-take-16-days-on-woocommerce-stores/
-
Most WordPress site owners have never heard of Ghostscript. I hadn't expected that to matter — until CVE-2025-27830. It processes PDF uploads at OS level, before WordPress even sees the file. A crafted PDF can exploit it silently. If your server runs Ghostscript unpatched, your media library could be a door left open. #WordPress #Security #Ghostscript #WordPressSecurity #CVE https://wpguy.uk/blog/ghostscript-cve-2025-27830-is-your-wordpress-server-safe/
-
The plugin you trust to protect your site can itself become the attack vector. Backuply, installed on over 600,000 WordPress sites, contained a Path Traversal flaw (CVE-2025-2877) that let a basic subscriber account gain full admin access. That is a serious supply chain concern worth understanding. #WordPress #WordPressSecurity #SecurityHardening #WebSecurity https://wpguy.uk/blog/backuply-vulnerability-how-subscribers-gain-admin-access/
-
Every plugin you install carries a measurable cost — HTTP requests, database queries, PHP execution time on every page load. A site with thirty poorly-built plugins is not just slower, it is slower in proportion to how badly they conflict and how often they load where they are not needed. Across dozens of client sites, that compounds fast. #WordPress #WebPerformance #WordPressAgency #PluginOptimisation https://wpguy.uk/blog/how-plugins-are-slowing-down-your-client-sites/
-
Your postcode does not set a ceiling on what you can earn online. The data backs this up — some of Europe's most active small business ecommerce regions are Greater Manchester and the wider North West, not London. A well-configured WooCommerce store is a significant part of that story, and it is something I work on daily. #WooCommerce #WordPress #Ecommerce #SmallBusiness #WordPressGuy https://wpguy.uk/blog/woocommerce-vs-marketplaces-own-your-ecommerce-revenue/
-
Since July 2026, EU supplement shipments from UK warehouses carry flat per-category customs duties. That cost lands somewhere — either in your margin or your conversion rate. If your WooCommerce store is not reflecting this at checkout, you are absorbing it silently. I have been updating pricing logic for affected stores and the fix is not optional. #WooCommerce #WordPress #eCommerce #UKBusiness #Supplements https://wpguy.uk/blog/eu-supplement-duties-fix-your-woocommerce-pricing-now/
-
Two PHP vulnerabilities disclosed July 2025 — CVE-2025-1736 and CVE-2025-1861, collectively PHP2Shell — affect every WordPress site. The worst scores 9.8 CVSS and requires no account to exploit. No plugin or WordPress update fixes this. The patch must be applied at server level by your host. If you manage your own server, check your PHP version now. #WordPress #PHP #Security #WordPressSecurity #WebHosting https://wpguy.uk/blog/php2shell-critical-php-vulnerabilities-affecting-wordpress/
-
Your WordPress site can be taken over without anyone touching it. The PHP2Shell vulnerability class, disclosed in October 2024, exposed how a flaw in the PHP layer alone is enough. No compromised plugin, no login attack. Whether that flaw gets patched depends entirely on your host, not you. Choose carefully. #WordPress #WebSecurity #PHP #WordPressSecurity #Hosting https://wpguy.uk/blog/php2shell-why-your-host-decides-if-youre-protected/
-
“Making” friends, as always
-
Unsure if anyone is in or going to be in LA or planning a trip to Joshua Tree this fall but we’re doing an insane $45/$65/$95 flash day for Friday the 13th in November at Unfurl Collective AND I have some availability coming up in Los Angeles at Angel Kisses Studio November 7th (limited) and am right now planning my other LA dates for November. If you’d like something medieval, folkloric, or intuitive and custom I’d love to draw on my training and framework to develop something beautifully dar...