iiinova — where your digital self keeps evolving

The attacker failed, but the experience still raised concerns about an overlooked entry point.🤔 Another real-world experience from our Wall of Security Stories👇 melapress.com/security-stories/when…

000

Melapress @melapress.bsky.social · 06/10/2026

For many WordPress developers, “who manages security?” has a very simple answer: they do. In our 2026 Developer Security Benchmark, 62.6% of developers said they manage WordPress security themselves. The full report: melapress.com/wordpress-developer-s…

000

Melapress @melapress.bsky.social · 01/10/2026

New episode of The Melapress Show is out today 🎙️ Robert Abela speaks with Milana Cap about why code alone is not documentation, how to document software more effectively, and where AI can help in the process.

youtube.com

Code is not documentation: How to document software properly | Milana Cap (XWP)

Documentation is often treated as something to do at the end. In th...

010

Melapress @melapress.bsky.social · 30/09/2026

Documentation shouldn’t be something you leave until the end. In Episode 60 of The Melapress Show, Milana Cap joins Robert Abela to discuss why code is not documentation, how WordPress handles docs, and where AI can help.

youtube.com

Code is not documentation: How to document software properly | Milana Cap (XWP)

Documentation is often treated as something to do at the end. In th...

001

Melapress @melapress.bsky.social · 29/09/2026

What can the 2026 WordPress Security Survey tell us about the current state of WordPress security? Watch the full panel discussion for more context behind the 2026 survey findings: www.youtube.com/watch?v=HG6oCfuZE9U #WordPress

youtube.com

2026 Melapress Security Survey Panel Discussion – State of WordPress Security

What does the state of WordPress security look like in 2026? Join R...

000

Melapress @melapress.bsky.social · 28/09/2026

What does the state of WordPress security look like in 2026? Tomorrow, we’re publishing a recorded panel discussion with Robert Abela, Thomas Raef, @stealthcopter.bsky.social, Kathy Zant & Daniele Besana on the findings of our 2026 Security Survey: www.youtube.com/watch?v=HG6oCfuZE9U

000

Melapress @melapress.bsky.social · 26/09/2026

Once Rick Curran investigated the website defacement further, he found malicious PHP files scattered throughout the WordPress installation and across other sites on the same server. The full story: melapress.com/security-stories/the-…

010

Melapress @melapress.bsky.social · 24/09/2026

Attackers do not always need one major target. Kathy Zant explains how attackers work at scale, targeting sites with weaker security and using them for spam, malware distribution, server resources, or further attacks. 👉 Watch the full episode: www.youtube.com/watch?v=eGgOfmnbGGo #WordPress

000

Melapress @melapress.bsky.social · 23/09/2026

What's most underestimated in a security incident: recovery, lost work, or personal impact? After a client's site was hacked, an agency sacrificed nights and weekends to manage it: melapress.com/security-stories/the-…

000

Melapress @melapress.bsky.social · 23/09/2026

How do you manage access when hundreds or thousands of users can log into the same WordPress site? For membership sites, role-based access control stands out. 🧑‍💻 Check our new benchmark report: melapress.com/wordpress-membership-… #WordPress

000

Melapress @melapress.bsky.social · 22/09/2026

Not every WordPress site has the same security priorities. Our 2026 survey found content sites focus more on availability, while membership and ecommerce sites show stronger concern around data loss, reputation, and financial impact. Full report: melapress.com/wordpress-security-su…

000

Melapress @melapress.bsky.social · 21/09/2026

What happens after a WordPress plugin vulnerability is reported? Francisco Torres from the WordPress Plugins Team explains why reaching the plugin author matters and when a plugin may be closed to limit exposure. 👉 Full episode: www.youtube.com/watch?v=ka0Pp2jroKo #WordPress

000

Melapress @melapress.bsky.social · 18/09/2026

This Security Story involved 40 sites, 6,000+ infected files, questionable admin accounts, outdated plugins, and no backups. Cleaning the files was only the beginning. Read the full story: melapress.com/security-stories/what…

020

Melapress @melapress.bsky.social · 17/09/2026

Even a low-traffic website has server resources that can be used to send spam, redirect visitors, distribute malware, or support other attacks. Watch the premiere today:

youtube.com

Why Every Website Is a Target: WordPress Security for Small Businesses | Kathy Zant

A small website may not look valuable, but attackers are not necess...

000

Melapress @melapress.bsky.social · 15/09/2026

The cost of a WordPress security incident rarely ends with malware removal. 68.4% reported downtime, 34.9% reputational damage, and 16.3% lost revenue. Explore the full picture behind these numbers: melapress.com/wordpress-security-su… #WordPress

000

Melapress @melapress.bsky.social · 14/09/2026

Your website doesn’t need high traffic to be valuable to an attacker. In episode 59, Kathy Zant explains what small businesses should know about WordPress security, access, sessions, and AI keys. Watch on YouTube on September 17 at 4:00 PM CET:

youtube.com

Why Every Website Is a Target: WordPress Security for Small Businesses | Kathy Zant

A small website may not look valuable, but attackers are not necess...

000

Melapress @melapress.bsky.social · 11/09/2026

The client blames you for a security incident since you just got access, but you haven't logged in. Our contributor didn't expect this until it happened. 👉 melapress.com/security-stories/when…

000

Melapress @melapress.bsky.social · 07/09/2026

You can now add extra verification before users change their password or email on your WordPress site. That's one of several updates in Melapress Login Security 2.4.0. 👉 Full release notes: melapress.com/wordpress-login-secur… #WordPress

000

Melapress @melapress.bsky.social · 03/09/2026

Half of all new WordPress plugin submissions never get approved, not because they're rejected, but because the author never replies to the first review. 🎥 Watch the premiere today:

youtube.com

Behind the WordPress.org Plugin Review Process | Francisco Torres (WordPress Plugins Team)

In this recorded episode of the Melapress Show, we're joined by Fra...

000

Melapress @melapress.bsky.social · 02/09/2026

Wall of Security Stories has launched! ⚡ Security data tells us what happened. These stories show what it was actually like for the people dealing with it. 🔐 Explore first-hand accounts of real incidents, their impact, recovery, and lessons learned. melapress.com/security-stories

000

Melapress @melapress.bsky.social · 01/09/2026

@frantorres.es from the WordPress Plugins Team joins us to explain what goes on behind the scenes and what it takes for a plugin to actually get approved or closed. Watch this Thursday👇

youtube.com

Behind the WordPress.org Plugin Review Process | Francisco Torres (WordPress Plugins Team)

In this recorded episode of the Melapress Show, we're joined by Fra...

012

Melapress @melapress.bsky.social · 25/08/2026

Do you know what your shop managers are changing in your WooCommerce orders? 🛒 An agency owner shared a case where one of his clients noticed suspicious orders with 100% discounts. Once activity logging was in place, the store owner could see which shop managers were making changes.

000

Melapress @melapress.bsky.social · 24/08/2026

Last week at WordCamp US, our CEO and founder, Robert Abela, gave a talk about session hijacking, stolen cookies, and the blind spot in WordPress security. 🎥 Watch Robert’s full WordCamp US session: www.youtube.com/watch?v=z5_hxy2ET8Y #WordPress

youtube.com

Session Hijacking, Stolen Cookies, and the Blind Spot in WordPress Security | Robert Abela

They didn’t guess the password. They didn’t break 2FA, bypass the f...

010

Melapress @melapress.bsky.social · 21/08/2026

We’ve got some great conversations coming up on The Melapress Show 🎙️ 🔌 Francisco Torres, WordPress.org Plugins team 🔐 Kathy Zant, security consultant 📚 Milana Cap, WordPress.org Documentation team Have a question for any of them? Send it our way and we’ll bring it into the conversation.

000

Melapress @melapress.bsky.social · 20/08/2026

Episode 57 of the Melapress Show, with Josh Hall (founder of Web Designer Pro), is coming today. Recurring revenue, maintenance plans, and how to sell them without the hard sell. Watch the premiere soon:

youtube.com

Recurring Revenue Playbook: Selling and Scaling WordPress Maintenance Plans | Josh Hall

In this episode of the Melapress Show, we're joined by @JoshHallco,...

001

Melapress @melapress.bsky.social · 18/08/2026

Selling a maintenance plan too early can feel pushy. Waiting too long can mean losing the recurring revenue entirely. This Thursday, Josh Hall shares the framework he used to turn one-off builds into predictable monthly revenue.

youtube.com

Recurring Revenue Playbook: Selling and Scaling WordPress Maintenance Plans | Josh Hall

In this episode of the Melapress Show, we're joined by @JoshHallco,...

000

Melapress @melapress.bsky.social · 12/08/2026

When a client’s WordPress site breaks, knowing where to look saves time. 🔎 Imran Siddiq, Director & Trainer at Web Squadron, installs WP Activity Log on every client site to pinpoint what happened and fix issues faster. Thanks for sharing, Imran! 🙌 #WordPress

000

Melapress @melapress.bsky.social · 05/08/2026

🎤 Our CEO and Founder, Robert Abela, will be speaking at WordCamp US in Phoenix. Attending #WCUS? Join Robert’s session to learn how these attacks work and what your team can do to reduce the risk. 📍 Phoenix, Arizona 🎟️ us.wordcamp.org/2026/speaker/robert…

010

Melapress @melapress.bsky.social · 30/07/2026

Marcus Wilson, Director at @pookaco.bsky.social, shares how WP Activity Log helps the agency see who logged in, what they changed, and when. Thank you for sharing your experience with us at WordCamp Europe 2026, Marcus! 🎥 #WordPress

021

Melapress @melapress.bsky.social · 23/07/2026

Coming today 📅 Kyle Van Deusen joins us to talk about pricing website projects without guessing and how he hands off admin access so clients don't accidentally break their own site. Tune in 👇

youtube.com

From Inquiry Form to Signed Client: An Agency's Real Qualification Process | Kyle Van Deusen

Do you quote a website project price after one 30-minute call? Kyle...

000

Melapress @melapress.bsky.social · 22/07/2026

Getting started with the new WP 2FA interface? Our new video guide covers the setup wizard, Google Authenticator, email codes, backup codes, key settings, and Premium installation. 👉 Watch the full guide:

youtube.com

WordPress 2FA Setup Guide: Secure Your Login with WP 2FA

Learn how to install, configure, and use WP 2FA to add two-factor a...

000

Melapress @melapress.bsky.social · 14/07/2026

Have you tried the new WP 2FA interface yet? Here’s a quick before-and-after look at the refreshed UI. 👇 If you’ve already updated, we’d appreciate your feedback. What’s your first impression of the new UI? Anything you’d change? 💬 #WordPress

000

Melapress @melapress.bsky.social · 08/07/2026

WP 2FA has a fresh new UI. 🎉 The update makes it easier to set up 2FA, manage policies, review authentication methods, and find key settings without having to scroll through long pages. See what changed: melapress.com/a-fresh-new-ui-for-wp…

000

Melapress @melapress.bsky.social · 02/07/2026

Still treating accessibility as a compliance checkbox? In this episode, we’ll talk about why “WCAG compliant” doesn’t always mean usable, where accessibility debt starts in WordPress projects, and how agencies can connect it to real business value. 👇

youtube.com

Accessibility, Revenue, and the Mistakes Most Agencies Keep Making | Anne-Mieke Bovelett

In this live episode of the Melapress Show, we're joined by Anne-Mi...

000

Melapress @melapress.bsky.social · 29/06/2026

WordPress supply chain attacks are not new. 🔗 In this clip, Austin Ginder breaks down a deliberate case involving 30 compromised plugins, force-updates from WordPress.org, and lessons for plugin integrity. Full livestream 👇 www.youtube.com/watch?v=5DljfkqGtlo #WordPress

000

Melapress @melapress.bsky.social · 25/06/2026

We're going live with Mike Miler, Founder of WebChange Detector, to talk website testing, QA, and regression testing for WordPress agencies. Join us and bring your questions👇 www.youtube.com/watch?v=AF278GJorgE #WordPress

youtube.com

Regression Testing, Visual Testing, QA: What WordPress Pros Need? | Mike Miler (WebChange Detector)

In this live episode of the Melapress Show, we're joined by Mike Mi...

000

Melapress @melapress.bsky.social · 24/06/2026

In this clip, Jonathan Bossenger explains why spending limits should be part of your AI security checklist. A simple step that can help limit the impact if an API key is ever exposed. 🎥 www.youtube.com/live/842K7xSD1TA

000

Melapress @melapress.bsky.social · 22/06/2026

Melapress Role Editor 1.3.0 release adds support for Secondary Roles for invited network users, making user management in WordPress Multisite more flexible. Download the latest version: 👉https://wordpress.org/plugins/melapress-role-editor/

000

Melapress @melapress.bsky.social · 18/06/2026

Setting up WordPress to try one plugin shouldn't take 20 minutes. That's the problem WordPress Playground was built to fix. Adam Zieliński (Playground architect) joins Robert live to cover how agencies, educators, and contributors are using it today. 👇

youtube.com

WordPress Playground Deep Dive: Easier Learning, Testing & Contribution| Adam Zielinski (Automattic)

In this live episode of the Melapress Show, Robert is joined by Ada...

010

Melapress @melapress.bsky.social · 18/06/2026

WP 2FA is getting a fresh new look. Cleaner navigation, easier onboarding, and a more modern interface are on the way. Read the full announcement 👇 melapress.com/a-fresh-new-ui-for-wp…

010

Melapress @melapress.bsky.social · 17/06/2026

If someone installs an AI-related plugin, connects a model, or changes a configuration, would you know about it? The latest WP Activity Log update helps answer that question by adding support for monitoring AI Connector activity in WordPress. 👉https://wordpress.org/plugins/wp-security-audit-log/

000

Melapress @melapress.bsky.social · 11/06/2026

We couldn't stay away from this topic. 🎙 Austin Ginder joins us to discuss plugin supply chain attacks, the common patterns behind them, how AI is helping researchers work faster, and why this issue matters to every WordPress professional.

youtube.com

WordPress Plugin Supply Chain Attacks: Hunting for Backdoors with AI | Austin Ginder (WP Beacon)

WordPress plugin supply chain attacks are becoming a growing concer...

000

Melapress @melapress.bsky.social · 10/06/2026

At #WCEU, many attendees stopped by our booth and entered our raffle 🎁 The good news? Our WordPress Security Survey is still open 👀 Complete the survey for a chance to win one of 3 prizes while helping us better understand the real security challenges you face: melapress.com/survey

000

Melapress @melapress.bsky.social · 08/06/2026

Thank you, #WCEU2026! 🙌 What an incredible few days in Krakow 🇵🇱 We’ve put together a few moments from the event below. 📸 See you next time! 👋 #WCEU

000

Melapress @melapress.bsky.social · 06/06/2026

WordCamp Europe was amazing! 🎉 We are still reflecting on an incredible experience we had. It was fantastic meeting so many people, sharing ideas, and learning from the community. See you in Spain next year! 🇪🇸 #WCEU

000

Melapress @melapress.bsky.social · 06/06/2026

And we have a winner 🎉 Congratulations to the winner of our giveaway at #WCEU2026 🎁 A big thank you to everyone who stopped by our booth, took part in the survey, and joined the raffle over the last few days 🙌 #WCEU

000

Melapress @melapress.bsky.social · 06/06/2026

⏰ We’re getting closer to the prize draw! 🎁 There’s still a bit of time left to enter and win an ASUS ZenScreen portable monitor. So stop by the booth, fill out the survey, and join the fun! Come to the Melapress booth at 14:40 for the prize draw. 🙌 #WCEU #WCEU2026

000

Melapress @melapress.bsky.social · 05/06/2026

🎉 Stop by the Melapress booth at #WCEU2026 and take part in our raffle to win an ASUS ZenScreen portable monitor! Taking part is quick and easy. Just visit our booth and fill out our security survey 📝 Good luck and see you! #WCEU

000

Melapress @melapress.bsky.social · 04/06/2026

Looking for the Melapress booth at #WCEU2026? 👀 We’ve put together a quick video to help you find us easily once you’re at the venue 🎥 Stop by to chat WordPress security, meet the team, grab some swag, and maybe even win an ASUS ZenScreen portable monitor 😉 See you tomorrow! 🇵🇱 #WCEU #WCEU2026

000

Melapress @melapress.bsky.social · 02/06/2026

When was the last time you checked the OWASP Top 10? Kevin Beaver explains why it still matters and how developers can use it to build more secure applications without adding cost or complexity. 🎥 Watch the full episode: www.youtube.com/watch?v=hHpGgk_1hXQ #WordPress

010