Sign in

Tim Nash

@tna.sh
203 followers 278 following 169 posts

Doomspeaker and Security Consultant for WordPress ecosystem. 🔗 tna.sh 🏠 timnash.co.uk 🎓 wpsecurity101.com 👔 agencystreamline.co.uk

PostsRepliesMedia
Reposted by Tim Nash
Rob Cairns @robcairns.bsky.social · 03/11/2025
Talking Security and Trust with @tna.sh stunningdigitalmarketing.com/episode-610-...
stunningdigitalmarketing.com
Episode 610 Digital Security, Trust, and WordPress Updates With Tim Nash - Stunning Digital Marketing
Show Highlights The source is an excerpt from “The SDM Show,” hosted by Rob Cairns, featuring guest Tim Nash, a security expert. The discussion centers on various cybersecurity topics, including recen...
011
Tim Nash @tna.sh · 30/10/2025
Still time for you to get on a train/plane/automobile and get to London for WPLDN this evening and come and be scared with WordPress horror tales! Want a sneak peek here is my opening slide for tonight horror tale.
011
Reposted by Tim Nash
Birgit Pauli-Haack @bph.social · 20/10/2025
Today 🎉Join us Nathan Wrigley, Michelle Frechette, Tim Nash and me @nathanwrigley.com @michellefrechette.bsky.social @bsky.app/profile/tna.sh #TWiW #WordPress at 15:00 CEST (13:00 UTC) wpbuilds.com/live
wpbuilds.com
WP Builds LIVE - Watch us live!
Watch us LIVE over at WP Builds. Something WordPress related coming your way!
063
Tim Nash @tna.sh · 15/10/2025
Come join myself and the rest of the folks @wpldn.uk for a spooky Haloween special... www.meetup.com/london-wordp...
meetup.com
#WPLDN - October 2025: WP Halloween Horror Stories & AI Open Topics, Thu, Oct 30, 2025, 6:00 PM | Meetup
🎃 **Happy (almost) Halloween, #WPLDN!** 🎃 October brings our annual tradition: Tim Nash returns to spread WordPress horror stories just in time for Halloween. But this y
000
Tim Nash @tna.sh · 09/10/2025
What does Wapuu do? Nothing. Absolutely nothing. It doesn’t boost SEO. It doesn’t compress images. It doesn’t even have a block editor opinion. It just sits there, hugging its WordPress orb like it knows the secret to the custom post type apocalypse. I would point to wordpress.org/plugins/wapu...
wordpress.org
Wapuu Dashboard Pet
Wapuu Dashboard Pet is a virtual pet for your WordPress admin dashboard. The more you fail to update your site, the sicker Wapuu becomes.
041
Reposted by Tim Nash
Nathan Wrigley @nathanwrigley.com · 06/10/2025
Join us LIVE for the 'This Week in #WordPress' show. It's fun, and we'd love your comments, really! Starts in a couple of hours, so 2pm UK time. wpbuilds.com/live This week, I'm with Michelle Frechette, Tim Nash and Courtney Robertson. @michellefrechette.bsky.social @tna.sh @courtneyr.dev #TWiW
wpbuilds.com
WP Builds LIVE - Watch us live!
Watch us LIVE over at WP Builds. Something WordPress related coming your way!
143
Tim Nash @tna.sh · 06/10/2025
Ever wondered how random wp_rand() really is? No? I'm not surprised I would be more surprised if you knew this function even existed in WordPress. Now you do, are you curious? So was I let's go on a random adventure! timnash.co.uk/nothing-is-t...
timnash.co.uk
Nothing is truly random by Tim Nash
A deep dive into how WordPress’s wp_rand() works, what a CSPRNG is, and why some warnings about it are misplaced.
020
Tim Nash @tna.sh · 05/10/2025
Want something to read on your Sunday afternoon? Come join me on a random adventure into wp-rand() timnash.co.uk/nothing-is-t... #wordpress
timnash.co.uk
Nothing is truly random by Tim Nash
A deep dive into how WordPress’s wp_rand() works, what a CSPRNG is, and why some warnings about it are misplaced.
221
Reposted by Tim Nash
Mike McAlister @mikemcalister.com · 29/09/2025
It's here! Menu Designer has landed at WP.org! Menu Designer is a powerful new way to build beautiful mobile menus and dropdown menus in the @WordPress block editor — no coding required. And now it's available right in your dashboard. wordpress.org/plugins/oll...
1145
Reposted by Tim Nash
WordPress @wordpress.org · 01/10/2025
WordPress 6.8.3 is here! This crucial security release addresses vulnerabilities to keep your site safe. Update now and ensure your site is secure! Learn more about the updates and download it here: wp.me/pZhYe-4ZK.
wp.me
053
Tim Nash @tna.sh · 01/10/2025
I was lucky to present at #WCGdynia on automatic updates. Even if you don't use them I encourage you to watch this talk, not to convince you, but to see what things you can do around updates in general to make them safer and more reliable. (Hint it's testing) wordpress.tv/2025/09/30/t...
wordpress.tv
The Dark Side of Automatic Updates: Securing WordPress Supply Chains in CI/CD
Automatic updates in WordPress are a safety net, ensuring that sites are always running the latest code. But for development teams working with continuous integration and delivery (CI/CD), the real…
100
Tim Nash @tna.sh · 01/10/2025
Has yours? If not what a sucky morning you must be having clicking an update button. Coincidentally my talk on automatic updates just dropped on @wordpress.org TV wordpress.tv/2025/09/30/t...
021
Reposted by Tim Nash
Rhys Wynne @rhys.wales · 29/09/2025
NEW POST: On being inspired at #loopconf and hitting publish on a blog post I had half written....
rhyswynne.co.uk
Comment.
Like. Comment. Subscribe. That’s what the YouTubers say isn’t it? I miss folks commenting on blog posts really. At my peak I’d post a blog post at home, walk the half a mile from my student digs to university, and then be greeted with 4 or 5 comments. Now? I think I’ve had one comment … Continue reading
033
Tim Nash @tna.sh · 28/09/2025
Taking @ohhelloana.blog talk seriously and hit publish... The long way to WordCamp Gdynia 🚀 Leeds → London (WPLDN + LoopConf) → Poland 🇵🇱 Turns out it’s quicker to get to Gdynia than London. timnash.co.uk/the-long-way... #loopconf #WCGdynia
timnash.co.uk
The Long Way to WordCamp Gdynia: LoopConf, WPLDN and a Lot of Coffee by Tim Nash
From Leeds to London for WPLDN and LoopConf, then on to WordCamp Gdynia — turns out Poland is easier to reach than the capital. A week of security talks, AI debates, community, and flight delays.
131
Tim Nash @tna.sh · 24/09/2025
Coming to #WPLDN but worried you don't know anyone? Events can be intimidating! I really want to say Hi and I can hopefully gently introduce you to people. If the idea of coming up to me is scary then just drop me a message and I will come to you even if it's outside of the venue. This is me:
Tim Nash in a coffee shop wearing a pink shirt.
411
Tim Nash @tna.sh · 09/09/2025
The wonderful @mwug.uk is back! Very excited to be here in Stockport which is totally Manchester... But so happy to see it happening congrats to @rhys.wales @jwo.ng on re-launch.
MWUG in full swing.
030
Tim Nash @tna.sh · 09/09/2025
Heads up! If you make use of NPM there has been multiple packages compromised and distributing malware. List of effected packages github.com/advisories?q... including big ones like debug and chalk. Some commentary on the event including from the Chalk dev news.ycombinator.com/item?id=4516...
github.com
GitHub Advisory Database
A database of software vulnerabilities, using data from maintainer-submitted advisories and from other vulnerability databases.
101
Tim Nash @tna.sh · 15/08/2025
The folks @weareag.bsky.social have rolled an update of one of my favourite features in their payment gateways, their Payment Failure Traffic Light system. Making it so easy to understand payment issues, and identify potential fraud issues. weareag.co.uk/tls-2-0-beca...
weareag.co.uk
TLS 2.0 - Because “Address Failed” Just Isn’t Good Enough Anymore – We are AG
Remember our original Traffic Light System? You know, the one that gave you a few coloured circles and told you things like “Address failed”? It was useful, sure, but… it was basically the equivalent ...
000
Reposted by Tim Nash
Post Status @poststatus.com · 07/08/2025
Join us live in 15 minutes for a discussion about accessibility with Piccia Neri and Michelle Frechette. This week's topic is Layout. Future topics include: Legislation, Captions, Social Posts, Data Visualization, and Animations. www.youtube.com/watch?v=fkfNIMQnQME
Get It Seen: The simplest way to accessible design.
Limited series podcast with Michelle Frechette and Piccia Neri

Beginning July 10
9am ET // 3pm CEST
On the Post Status YouTube Channel

Image includes black and white headshots for Michelle and Piccia, and the Post Status logo.
022
Tim Nash @tna.sh · 05/08/2025
Setting up a new blog/article section of a site, do you add comments on posts yay or nay?
201
Reposted by Tim Nash
Nathan Wrigley @nathanwrigley.com · 04/08/2025
We shall be LIVE, so very, very LIVE in about 90 mins for 'This Week in #WordPress'. This week I'm with Mark Westguard, Jesse Friedman, Marc Benzakein. Starts at 2pm UK time. See you there? wpbuilds.com/live
wpbuilds.com
WP Builds LIVE - Watch us live!
Watch us LIVE over at WP Builds. Something WordPress related coming your way!
111
Reposted by Tim Nash
Simon Harper @srhdesign.co.uk · 04/08/2025
"All About Email", Issue 201 is out now! My guest author Sarah Gallardo takes us on a hugely comprehensive journey. Accessibility isn’t just compliance; it’s clarity, usability, and better results. Start building better emails with small, meaningful changes. You can read the full newsletter now. 👇
newsletter.allabout.email
Issue #201 All About Email
Accessibility isn’t just compliance; it’s clarity, usability, and better results. Start building better emails with small, meaningful changes.
123
Reposted by Tim Nash
Rob Cairns @robcairns.bsky.social · 14/07/2025
@tna.sh and I talk about laws that impact cell phone privacy and his new course. stunningdigitalmarketing.com/episode-571-...
stunningdigitalmarketing.com
Episode 571 Security With Tim Nash Cell Phone Privacy and Tim's New Course - Stunning Digital Marketing
Show Summary This audio transcript features an interview with Tim Nash, a WordPress security expert, on the SDM Show, hosted by Rob Cairns. The discussion initially explores cell phone privacy and the...
011
Tim Nash @tna.sh · 14/07/2025
What is a WordPress User? wpsecurity101.com/lesson/what-... Check out the free lesson from the wpsecurity101.com course No signup, no email gate straight access to the lesson. You can check out the other free lessons as well.
wpsecurity101.com
What is a user?
Summary Transcript Resources What is a user? Let us unpack what a user really is in WordPress, not just a person, but a collection of database records stored across two key tables: Quick question.
110
Reposted by Tim Nash
Simon Harper @srhdesign.co.uk · 10/07/2025
This week's Top 3 Links from Loop WP, Issue 165: 1) Personalize WP Pro - personalizewp.com/blog/announc... 2) WP Security 101 - wpsecurity101.com/?utm_source=... 3) WordPress Legal Updates - www.delta.blog/wordpress-le... Feel free to read the full newsletter. 👇
newsletter.loopwp.com
Issue #165 Loop WP
Ollie Pro turns 1, PersonalizeWP Pro goes free, and WP Security 101 launches, and there are significant updates in WordPress tools and resources this week!
132
Tim Nash @tna.sh · 10/07/2025
I really don't want a games company to be collecting my official documentation :/ the only person to DM me is @nathanwrigley.com so I think I will just pass and let him message me on Slack instead. www.theverge.com/news/704468/...
theverge.com
Bluesky is rolling out age verification in the UK
Bluesky users in the UK can verify their age using their face, ID, or payment card.
220
Reposted by Tim Nash
Simon Harper @srhdesign.co.uk · 09/07/2025
🚨 Issue 165 of "Loop WP", my newsletter about WordPress, is out now! This week: Ollie Pro turns 1, PersonalizeWP Pro goes free, and WP Security 101 launches, and there are significant updates in WordPress tools and resources this week! Feel free to read the newsletter. 👇
newsletter.loopwp.com
Issue #165 Loop WP
Ollie Pro turns 1, PersonalizeWP Pro goes free, and WP Security 101 launches, and there are significant updates in WordPress tools and resources this week!
266
Tim Nash @tna.sh · 09/07/2025
Calling all WordPress professionals be you a site admin, Developer or SysAdmin. Tomorrow is the release of Module 2 of WPsecurity101 all about USERS! That means today is the last chance to bag yourself a bargain and get the course for £145 instead of £195.
131
Reposted by Tim Nash
Elliott Richmond @elliottrichmond.co.uk · 09/07/2025
Kate & Tom’s WordPress Block Theme Rebuild – Part 5: Bug Tracking, Block Patterns & WP-CLI Imports youtu.be/mKdVaZEVV8I
youtu.be
Kate & Tom’s WordPress Block Theme Rebuild – Part 5: Bug Tracking, Block Patterns & WP-CLI Imports
YouTube video by Elliott Richmond
021
Tim Nash @tna.sh · 08/07/2025
One of the big things about deciding not to use an existing LMS and building something is I get to rethink the "norms" Why do Membership and LMS make WordPress users, what is the benefits. So wpsecurity101.com uses @auth0byokta.bsky.social to provide an authentication and session management.
130
Tim Nash @tna.sh · 08/07/2025
Awwwh Thanks Ross, really excited to launch on Thursday.
010
Reposted by Tim Nash
Nathan Wrigley @nathanwrigley.com · 08/07/2025
This Week in WordPress #339 In "This Week in WordPress #339," Nathan Wrigley is joined by Zach Stepek, Tim Nash, and Remkus de Vries to discuss new educational WordPress courses on security and performance, as well as Nathan’s new Podcaster Plus plugin seeking beta te wpbuilds.com/2025/07/08/t...
021
Reposted by Tim Nash
Daniel Post @danielpost.com · 02/07/2025
I've added a pretty steep launch discount to Better Loop (almost 40% off!). It' also the lowest price it'll ever be. I want to reward early customers for their support. As a bonus, early customers get to shape future updates with your feedback and ideas. I want to build Better Loop for you!
Screenshot of the Better Loop pricing page showing discounted prices
264
Reposted by Tim Nash
Nathan Wrigley @nathanwrigley.com · 04/07/2025
I mentioned the other day that I'm about to launch a #podcasting / #Podcast plugin for #WordPress. If you're interested in beta testing that, and finding out more, there's more here: www.podcasterplus.com/beta/
podcasterplus.com
Beta - Podcaster Plus
Join the Podcaster Plus beta list. Stop wrestling with generic players and clunky workflows. It's time to make your podcast website as impressive as your audio.
053
Tim Nash @tna.sh · 07/07/2025
The first module of WPSecurity101.com is released on Thursday. If you pre-register today you can get £50 off the course launch price!
wpsecurity101.com
WP Security 101 with Professional Doomspeaker Tim Nash
Join Tim as he teaches you and many others the WordPress Security Fundementals in this brand new WP Security Course.
022
Reposted by Tim Nash
Nathan Wrigley @nathanwrigley.com · 04/07/2025
I mentioned the other day that I'm about to launch a #podcasting / #podcast plugin for #WordPress. If you're interested in beta testing that, and finding out more, there's more here: www.podcasterplus.com/beta
podcasterplus.com
Beta - Podcaster Plus
Join the Podcaster Plus beta list. Stop wrestling with generic players and clunky workflows. It's time to make your podcast website as impressive as your audio.
296
Tim Nash @tna.sh · 29/06/2025
If you were starting with a fresh build, what code editor IDE would you go with and why? It can include fancy new AI ones as well as trusted old school ones.
110
Reposted by Tim Nash
Simon Harper @srhdesign.co.uk · 28/05/2025
My newsletter about WordPres, "Loop WP", Issue 159 is out now! This week - Shopify Horizons raises significant questions for WooCommerce. Is open-source enough? Can Woo keep up with AI and Shopify’s rapid e-commerce evolution? 👇
newsletter.loopwp.com
Issue #159 Loop WP
Shopify Horizons raises significant questions for WooCommerce. Is open-source enough? Can Woo keep up with AI and Shopify’s rapid e-commerce evolution?
142
Reposted by Tim Nash
WP Cafe Show @wpcafe.show · 23/05/2025
Today is episode 121 of the show. Lots to chat about including - Blocks API v3 and ACF compatibility - Updates to offline.kids - Position sticky (it'll become clear) - Pitching via video call - And more Join @keithdevon.com & @markwilkinson.dev at 13:30 (UK time) 👇 bit.ly/45ulXPY
bit.ly
WP Café #121 | position: sticky; fixed!
Follow us: X / https://twitter.com/highrisedigital | https://twitter.com/wpcafeshow Linkedin / https://www.linkedin.com/company/highrisedigital/ Website: https://highrise.digital/ | https://wpcafe.show Checkout our products: JobRelay: https://jobrelay.io Integrate your WordPress website with popular job posting and distribution software. RecPress: https://recpress.com Better WordPress job board, done for you. Highrise Digital is a 2 person WordPress development team based in the UK. They primarily work with Recruitment Agencies to build integrations with WordPress. They also build WordPress recruitment websites as well as sites for companies in other selected sectors. On this channel we provide WordPress development and business advice for solo and small WordPress teams. We help you to level up your development and business skills with quick tips, live coding and chats with other industry professionals. There's an overwhelming amount of information out there and lots of people telling you the 'best' way to do things. At Highrise Digital, we strip away the guilt and show you practical, pragmatic ways that developers can improve. This is how WE do things, warts and all!
044
Reposted by Tim Nash
Keith Devon @keithdevon.com · 22/05/2025
Hi parents and carers! 👋 I’m looking for feedback on a new project I’ve built: offline.kids — a collection of screen-free activity ideas for families. If you’re willing to share your thoughts in a short 15-minute call, I’d REALLY appreciate it. Just reply or DM me and I’ll send over the details.
offline.kids
Offline Kids – Screen-Free Activities for Kids
211
Reposted by Tim Nash
Nathan Wrigley @nathanwrigley.com · 20/05/2025
This Week in WordPress #334 The WordPress news from the last week which commenced Monday 12th May 2025. Join Nathan Wrigley, Remkus de Vries, Tim Nash, Corey Maass as we discuss the news from the last 7 days. We dive into speed optimisation, with Remkus de Vries shari wpbuilds.com/2025/05/20/t...
021
Tim Nash @tna.sh · 14/05/2025
When I see someone talking about MCP, I can't help but in the back of my mind see the spectre of XML-RPC. I wonder how long it will before we find these half abandoned nearly forgotten endpoints littering the web, being abused by bad bots.
A illustration of a cartoon stylised server hardware and the letters MCP behind it a ghostly second image with XML-RPC.
030
Tim Nash @tna.sh · 07/05/2025
This is a handy reference php-operators.com
php-operators.com
PHP Operators
050
Tim Nash @tna.sh · 07/05/2025
120
Tim Nash @tna.sh · 06/05/2025
Bit of a perfect storm, a misconfiguration causing WooCommerce sites to fatal, right during an uptick of really good phishing attack. Suddenly that "patch" makes sense after all you can't get in to WordPress admin area. If you have WooCommerce clients who manage their own sites, check in on them.
123
Tim Nash @tna.sh · 06/05/2025
Sending out an email on a new email platform is always a scary feeling. Will it go into spam? Did the formatting look ok? Email is such a weird medium, its so hard to get right, but is also one of the most personal ways to connect. Now I wait and see if anyone opens the email!
010
Tim Nash @tna.sh · 05/05/2025
The response and feedback for the launch of wpsecurity101.com has been amazing. Thank you! I'm busy getting the next batch of filming ready. You can still pre-register for exclusive discount and free content.
wpsecurity101.com
WP Security 101 with Professional Doomspeaker Tim Nash
Join Tim as he teaches you and many others the WordPress Security Fundementals in this brand new WP Security Course.
132
Reposted by Tim Nash
The WP Weekly @thewpweekly.bsky.social · 05/05/2025
WP Weekly 241 – Tools > See Contribution History > New Hosting .com > WP Security & Dev Courses thewpweekly.com/issue-241/
thewpweekly.com
WP Weekly 241 - Tools - See Contribution History, Hosting .com, WP Security Course
Check the WordPress contribution history online, A2 Hosting rebranded to Hosting .com, new courses on WordPress Security and modern WordPress development. New Plugin releases: Virtual Reviews, Diff f...
012
Tim Nash @tna.sh · 04/05/2025
Marketing folks @gravityforms.com this morning does this mean we can say we power part the of US security infrastructure... www.telemessage.com/developer/pr... props to @unicornriot.bsky.social unicornriot.ninja/2025/signalg...
010