Feed
-
Most WordPress site owners have never heard of Ghostscript. I hadn't expected that to matter — until CVE-2025-27830. It processes PDF uploads at OS level, before WordPress even sees the file. A crafted PDF can exploit it silently. If your server runs Ghostscript unpatched, your media library could be a door left open. #WordPress #Security #Ghostscript #WordPressSecurity #CVE https://wpguy.uk/blog/ghostscript-cve-2025-27830-is-your-wordpress-server-safe/
-
The plugin you trust to protect your site can itself become the attack vector. Backuply, installed on over 600,000 WordPress sites, contained a Path Traversal flaw (CVE-2025-2877) that let a basic subscriber account gain full admin access. That is a serious supply chain concern worth understanding. #WordPress #WordPressSecurity #SecurityHardening #WebSecurity https://wpguy.uk/blog/backuply-vulnerability-how-subscribers-gain-admin-access/
-
Every plugin you install carries a measurable cost — HTTP requests, database queries, PHP execution time on every page load. A site with thirty poorly-built plugins is not just slower, it is slower in proportion to how badly they conflict and how often they load where they are not needed. Across dozens of client sites, that compounds fast. #WordPress #WebPerformance #WordPressAgency #PluginOptimisation https://wpguy.uk/blog/how-plugins-are-slowing-down-your-client-sites/
-
Your postcode does not set a ceiling on what you can earn online. The data backs this up — some of Europe's most active small business ecommerce regions are Greater Manchester and the wider North West, not London. A well-configured WooCommerce store is a significant part of that story, and it is something I work on daily. #WooCommerce #WordPress #Ecommerce #SmallBusiness #WordPressGuy https://wpguy.uk/blog/woocommerce-vs-marketplaces-own-your-ecommerce-revenue/
-
Since July 2026, EU supplement shipments from UK warehouses carry flat per-category customs duties. That cost lands somewhere — either in your margin or your conversion rate. If your WooCommerce store is not reflecting this at checkout, you are absorbing it silently. I have been updating pricing logic for affected stores and the fix is not optional. #WooCommerce #WordPress #eCommerce #UKBusiness #Supplements https://wpguy.uk/blog/eu-supplement-duties-fix-your-woocommerce-pricing-now/
-
Two PHP vulnerabilities disclosed July 2025 — CVE-2025-1736 and CVE-2025-1861, collectively PHP2Shell — affect every WordPress site. The worst scores 9.8 CVSS and requires no account to exploit. No plugin or WordPress update fixes this. The patch must be applied at server level by your host. If you manage your own server, check your PHP version now. #WordPress #PHP #Security #WordPressSecurity #WebHosting https://wpguy.uk/blog/php2shell-critical-php-vulnerabilities-affecting-wordpress/
-
Your WordPress site can be taken over without anyone touching it. The PHP2Shell vulnerability class, disclosed in October 2024, exposed how a flaw in the PHP layer alone is enough. No compromised plugin, no login attack. Whether that flaw gets patched depends entirely on your host, not you. Choose carefully. #WordPress #WebSecurity #PHP #WordPressSecurity #Hosting https://wpguy.uk/blog/php2shell-why-your-host-decides-if-youre-protected/
-
“Making” friends, as always
-
Unsure if anyone is in or going to be in LA or planning a trip to Joshua Tree this fall but we’re doing an insane $45/$65/$95 flash day for Friday the 13th in November at Unfurl Collective AND I have some availability coming up in Los Angeles at Angel Kisses Studio November 7th (limited) and am right now planning my other LA dates for November. If you’d like something medieval, folkloric, or intuitive and custom I’d love to draw on my training and framework to develop something beautifully dar...
-
From Thee Grimoire Who’s cool enough for a maggot tattoo? Be honest
-
The rain is divine. We needed this.
-
I had fun with this. All handpoked chalice from my Sympathetic Symbols book.
-
I see a lot of stuff on here (well, less lately since I feel like it’s been quite quiet on this server for a while) about how there is nothing unsafe about witchcraft or any pagan/neopagan practice and that anyone trying to tell you otherwise is some kind of fearmongering grifter. I’ve taken a long, long time to mull over various perspectives on this and have begun to realize a few reasons why I find I just can’t agree with this: 1) Any spiritual practice: be it any Abrahamic religion, any ado...
-
Super silly but some tattooers were mean to me on the internet today and for some reason it’s bothering me. How do we walk the line of humility when we have to perform for profit? How can we acknowledge our own lack and garner support rather than backlash? Social media is just not the place, but how are other artists who are also on mainstream social navigating imposter syndrome, negative feedback, and just generally a culture very geared towards conflict when it happens?
-
猫们最近热爱观鸟，因为除了时不时会出现的白头鹎之外，露台上的访客多了一只斑鸠 对俺来说两者没什么差别，都是同样的喧哗 #猫与树懒的故事
-
感觉有三种爱好的人应该非常容易在刑侦罪案文里发现尸体 养狗遛狗的人，钓鱼佬，观鸟爱好者 希望作者们创作时能多考虑考虑他们，特别能干，真的
-
Cette mise en examen pourrait désormais permettre à l’instruction de s’achever et d’ouvrir la voie à un procès https://rue89bordeaux.com/2026/10/mort-de-quentin-ruot-apres-huit-ans-de-combat-judiciaire-apf-france-handicap-mise-en-examen/ #Bordeaux
-
60000 personnes, selon les organisateurs, ont répondu présent https://rue89bordeaux.com/2026/10/des-dizaines-de-milliers-de-personnes-bravent-linterdiction-de-manifester-a-bordeaux/ #Bordeaux
-
À travers plus de 250 œuvres, l'exposition raconte comment des femmes libres sont devenues des boucs émissaires, avant que la sorcière ne se transforme en figure de résistance à l’ordre patriarcal https://rue89bordeaux.com/2026/10/des-magiciennes-aux-ecofeministes-les-sorcieres-sous-toutes-leurs-coutures-a-bordeaux/ #Bordeaux
-
Ils ont dénoncé la banalisation des discours xénophobes et islamophobes par l’extrême droite https://rue89bordeaux.com/2026/10/attentat-de-trappes-plus-dun-millier-de-personnes-reunies-a-bordeaux-pour-dire-stop-au-racisme/ #Bordeaux
-
Scoop today on how the secret French malware team hacked EncroChathttps://www.computerweekly.com/news/366649396/Revealed-Cyber-spies-used-malware-from-GitHub-to-hack-EncroChat-cryptophone-network
-
Serious news - not reported until now. In the week the UK and NATO accused Russia of armed drone attacks in Leipzig, Britain's nuclear deterrent backup link was destroyed over the Yorkshire. Our story is here. https://bylinetimes.com/2026/09/08/key-uk-nuclear-deterrent-link-destroyed-over-yorkshire/
-
https://www.theferret.scot/trident-balloon-accident/
-
If the universe isn't locally real, have we already made all our choices? If everything around us is happening on a global scale, and none of it is locally real, then have we already made all our choices? And are we just now trying to understand them?
-
Can I poison my codebase for LLM agents with malicious comments? Rather than adding an agents.md file written to stop LLM agents, I’m thinking about putting random comments into my code telling the agent to stop and warn the user, also some comments that are just word salads/non-sequiturs.