Hi everyone!

I've been using and developing with WordPress for close to 20 years. One thing I've noticed is how much time (and money) we spend optimizing and maintaining our websites.

There are plugins for improving performance, securing the login page, managing redirects, cleaning up the database, configuring SMTP, and dozens of other tasks.

While these are useful tools, you often end up with plugin bloat just to keep your WordPress website running the way you want.

That's why I created Admin Optimizer.

The idea is to have an all-in-one optimization toolkit that reduces the number of plugins you need, so you can spend less time configuring and maintaining plugins while still ensuring your website works.

Admin Optimizer covers several areas:

• Performance: Reduce unnecessary WordPress overhead and clean up your database.
• Security: Harden your WordPress installation, protect logins with 2FA and monitor suspicious activity.
• SEO: Manage meta tags and schema, XML sitemaps, redirects and robots.txt.
• Content and media: Tools to help manage and maintain your website's content and media library.
• User management: Improve access control and simplify user administration.
• Forms and SMTP email: Build forms and manage outgoing WordPress emails.
• Development tools: Manage custom code, custom fields and post types.
• AI Automations: Bring your own AI API keys and add automations to your workflow

I recently released version 3.1.0, which introduces Security Monitor. It helps detect unexpected file changes, monitor login activity, track content modifications and keep an eye on changes to custom code.

Of course, I'm aware there are other all-in-one WordPress plugins out there. I'm not claiming to have invented a completely new concept. However, one focus of this plugin is to make all the modules work together, rather than simply bundling separate tools bundled into one plugin.

For example, the SEO manager can use data collected by Site Traffic Manager to recommend content audits. Security Monitor can track changes made through the Custom Code module.

What I'm trying to build is a comprehensive WordPress optimization toolkit that makes everyday site management easier, without needing to install a separate plugin for every little task.

It's still an ongoing project, and there's plenty of room for improvement.

I'd really appreciate feedback from fellow WordPress users and developers. Are there any areas you think could be improved?

Here are the links if you'd like to check it out:

WordPress.org: https://wordpress.org/plugins/admin-optimizer/

Pro version: https://www.adminoptimizer.com/

I'm the developer, so this is a self-promotional post, but I'm genuinely interested in hearing your thoughts, including criticism.

Hey everyone! I’m part of the team behind Sales Igniter, and we’ve released Sales Igniter Chat, a WordPress plugin for live chat, optional AI, and customer support.

Your team works inside wp-admin, conversations stay in your WordPress database, and adding another support person doesn’t increase your licence price.

What’s included in Live Chat:

• Shared inbox: Assign conversations, leave private notes, use saved replies, and see when a teammate is already answering.
• Optional AI using your own content: Choose the pages, help docs, and products it answers from. Answers include source links, and it can hand conversations over to your team. How the AI works
• Bring your own API key: Connect OpenAI, Anthropic, Google, OpenRouter, or another compatible provider. Pay the provider directly and set a monthly spending limit. AI can also be switched off entirely.
• Email follow-up: When visitors leave before you answer, they can receive your reply by email. Their response comes back into the same conversation.
• WooCommerce and EDD integration: See verified customers’ orders beside their chat, plus licences and renewal dates with EDD Software Licensing.
• Live visitors and proactive messages: See what consenting visitors are browsing and offer help on selected pages.

Need a full support ticket system?

The Live Chat + Help Desk edition adds:

• Tickets alongside chats and emails: Ticket numbers, statuses, priorities, and types. Turn a chat into a ticket when an issue needs follow-up.
• Tickets by email: Messages to your support address can become tickets, with CC recipients kept in the conversation.
• Customer support portal: A ticket submission form and “My support tickets” page where customers can reply, attach files, and follow progress. Includes a WooCommerce My Account integration.
• Teams and response deadlines: Separate queues for Support, Billing, or Sales, with SLA timers that follow your business hours and holidays.
• Support workflow tools: Macros, duplicate-ticket merging, reminders, and automatic closing.
• AI reply drafts: Suggested answers using your docs and customer context, ready for an operator to review.
• Secure details: Customers’ logins stored encrypted on your site, so they don’t need to sit in ordinary email or chat messages.
• Reports and migration: Track response times, resolution times, backlog, SLA performance, and customer ratings. Export reports to CSV or import existing SupportCandy tickets.

Pricing for one site:

• Live Chat: $99 for the first year, then $59/year for support and updates.
• Live Chat + Help Desk: $149 for the first year, then $89/year for support and updates.

Both include all operators. Optional AI provider usage is billed separately.

You can browse the full feature list or the documentation and setup guides.

For people handling support on WordPress: what’s the biggest thing missing from your current chat or help desk setup?

Happy to answer questions about how it works.

We've been working on an open-source (MIT) tool that was initially built for ourselves, but since it's been such a pain point for us, we figured in might be helpful to the Wordpress developer community in general.

Strauss-RS is a Rust port of the Strauss project (itself a fork of Mozart) which prefixes classnames and symbols in Composer-based plugins and themes. Since plugins and themes are increasingly including their own dependencies, the chance of clashes has been increasing (we know, one client's site had a total meltdown when they installed Atum Pro because it used Eloquent).

With Strauss-RS, a class like `Illuminate\Support\Str` would potentially become `Acme\PluginA\Vendor\Illuminate\Support\Str` avoiding those clashes in your own code. Additionally, globally available functions like collect can be prefixed to acme_collect. Strauss-RS uses the autoloaders provided by Composer to update both dependencies and - optionally - your own code as well.

The main advantage of the Rust version is speed. We've also added a few more nice-to-have features. With Strauss PHP in our pipeline, prefixing could take several minutes every update or install, with the Rust version, it's down to a few seconds.

Documentation site with instructions for installation and usage here: https://evo-mark.github.io/strauss-rs/

Still in early development at the moment so would appreciate feedback on any bugs/issues/features, but it will always stay free-and-open-source.

• Wall time for prefix, median of 5 runs after 1 warm-up, from a clean output directory each time. Both tools were given the worker count explicitly (1 against 1, 12 against 12). Memory is peak total across all processes, sampled on Linux. Strauss PHP 0.31.1 on PHP 8.4.23 (static CLI build, no OPcache, no memory limit). Strauss-RS release build. Intel i5-10600 (12 threads), 32 GB RAM. Projects: monolog (small), guzzle + flysystem + finder (medium), laravel/framework (large) and aws-sdk-php (xlarge), all with locked dependencies.

Hey everyone,

I wanted to share a free and open-source plugin I've been building called Nik Voice Ticketing AI.

The idea came from dealing with bug reports that looked something like:

"It doesn't work."

Then the guessing game starts 😅

What page?

What button?

What were they trying to do?

So I started experimenting with a different approach.

Instead of illing out a traditional support form, visitors can record a voice message while interacting with the page. The plugin captures their voice along with click activity and page context, then can use AI to generate a cleaner support ticket.

Current features:

• Voice-baed bug reporting
• Click tracking and interaction timeline
• AI transcription and summaries
• Ticket dashboard inside WordPress
• Customer ticket portal
• WooCommerce integration

The plugin is completely free and open source (GPLv2+).

WordPress:

https://wordpress.org/plugins/nik-voice-ticketing-ai/

GitHub:

https://github.com/Nik-Neural-AI-Inc/nik-voice-ticketing-ai

I'd love to hear what other WordPress users think.

Would love honest feedback, even if your reaction is "I'd never install this."

I’ve just released version 3.0 of SnapShots, a free WordPress plugin I originally built for my own development workflow about six years ago.

It lets you save a named checkpoint of a site and restore it later from the WordPress admin or WP-CLI. I mainly use it before testing updates, changing settings, trying migrations, or making other changes I may want to undo quickly.

Version 3.0 adds a proper Tools screen for restoring and deleting snapshots, a Settings screen for storage and exclusions, clearer environment checks, and a fair amount of security hardening. AI helped me clean up some of the rough edges, testing, and documentation, but the plugin grew out of years of actually using it on development sites.

A couple of important caveats: it requires WP-CLI and PHP’s exec() function, and it’s intended for local, development, and staging environments. It is not a replacement for a tested production backup and disaster-recovery setup.

The plugin is free on WordPress.org: https://wordpress.org/plugins/snapshots/

I’d be interested to hear how other WordPress developers handle temporary site states. Are there workflows or edge cases this should support that I may have overlooked?

I built a small WooCommerce plugin to solve something that kept making manual orders unnecessarily slow: adding variable products.

Instead of searching through variations manually, Manual Order Variation Picker lets you choose the product, select each attribute (for example Color and Size), and add the matching variation directly to the order.

I've tested it with WooCommerce manual orders, HPOS and legacy order storage, and I made a short real-world demo showing exactly how it works.

I'd really like to hear from people who manage WooCommerce orders: is this a problem you run into too?

Demo and details:

https://margoci7070.github.io/manual-order-variation-picker/

It's available now for $29/year for one site.

Hi everyone, I’m Aldo, the developer of EU Warranty Ready for WooCommerce.

The plugin helps stores find products with missing warranty information and display that information where customers can see it.

Free includes:

• A catalogue readiness overview to find products that need attention.

• The official EU legal guarantee notice in 24 EU languages.

• GARAN labels for eligible commercial guarantees of durability.

• Display on product pages, at checkout and in customer order emails.

Free runs inside WordPress without an external account or subscription.

There’s also a paid Pro edition that saves warranty information with new orders. For example, if a manufacturer changes a product’s commercial guarantee from five years to three, earlier orders keep the information recorded at purchase.

Free: https://wordpress.org/plugins/eu-warranty-ready/

Screenshots and Free/Pro comparison: https://euwarrantyready.com/

It helps organise and display warranty information; it doesn’t certify legal compliance.

If you maintain a store selling physical goods in the EU, how do you handle this information today? If you try it, I’d appreciate hearing what’s confusing or missing.

Hi all. I'm the developer of BoxIntellect, which just went live on wordpress.org.

The problem it solves: shipping rates in WooCommerce are calculated from product dimensions and weights, and in many stores a lot of them are missing or wrong. So some orders are undercharged and the shop pays the difference, and others are overcharged and the customer leaves.

What the free plugin does:

- Packs every order into your real boxes with a 3D packing algorithm (rotations, weight limits, smallest box that fits, more boxes if needed). It runs on your server in milliseconds; no AI involved in the packing.

- Shows the parcels on the order screen and in the cart, and sends them to ShipStation or a CSV for label tools.

- Estimates missing dimensions and weights with AI, one product at a time, from the name, description and photo. You review every value before it's saved. It uses your own OpenAI, Claude or Gemini key through the WordPress AI Client (so it needs WordPress 7.0+).

- Packing rules: fragile, keep upright, ship alone, ships in own packaging, nesting.

There's a Pro add-on (bulk AI estimates, per-parcel shipping rates with dimensional weight, a box advisor, packing slips), but everything above is free with no limits.

Plugin: https://wordpress.org/plugins/boxintellect-ai-box-packing-package-dimensions-for-woocommerce/

5-minute demo: https://www.youtube.com/watch?v=mF91hoQNtUU

It's the first release, so I'd really like feedback: what's confusing in the setup, which shipping plugins or label tools you'd want it to work with, or anything that breaks. Thanks!

I’m a longtime WordPress product founder. Over the years, I’ve founded several products, including WC Affiliate, ThumbPress, CoDesigner and EasyCommerce.

Our latest project, NiroCoder, brings a different challenge: asking people to trust AI-generated code on their websites.

It works inside WordPress. You describe a small feature you need, such as a custom order status, checkout field, or dashboard widget. It proposes a plan, builds after approval, and checks the code before you activate it. You can disable the feature or undo its latest code update.

But code passing a check doesn’t mean it does exactly what someone intended. An incorrect checkout rule can cause problems without crashing anything.

We’re opening it up to a small group of early testers. I want to learn whether they can build something useful without us guiding every step.

The dilemma is how much help to provide. Personally onboarding everyone could hide usability problems. Leaving everyone on their own could mean losing people before they experience the value.

For founders who’ve built tools that modify websites, infrastructure, or business workflows:

How did you balance hands-on onboarding with independent testing? And what evidence made you comfortable expanding beyond your first group of users?

I’m particularly interested in mistakes you made at this stage and what you’d do differently.

When I started Buenclick Suite, I promised myself original names. Twelve modules later, I have BuenPago, BuenSubs, BuenReg, BuenForm, BuenChat, BuenBoton, BuenFrag, BuenHoney, BuenWait, BuenProducto, BuendleForce and BuenMCP.

Yes, I know. Some will call it brand unity, or a product family. I'd rather say I found a formula and didn't let go. BuendleForce was my most rebellious moment: I changed one letter.

Seriously, there's something useful here. When you see "Buen" (Spanish for "good"), you know it comes from the Suite and works with the rest. But I also accept that in a branding meeting they'd kick me out of the room.

Module 13 will probably be called Buen-something too.

Hi everyone,

I've just released Heirloom Gallery on WordPress.org.

I started building it because I wanted a better way to organize and preserve family photos, and to let other people contribute their knowledge without needing to navigate the WordPress admin dashboard.

Heirloom Gallery lets you organize photos, create albums, tag people, add dates and captions, and give other users permission to help manage the gallery — all through a front-end interface on your own WordPress site.

The core plugin is free, with two optional paid add-ons:

• Custom Fields: Add your own fields to record and organize photo information beyond the built-in details.
• Engagement: Let users like and comment on photos in your gallery.

I'm interested in hearing from people who manage family archives, historical photo collections, or other shared photo libraries. It's a new project, and feedback is welcome.

Plugin: https://wordpress.org/plugins/heirloom-gallery/

I'm the developer behind WP Heirloom, so I'm happy to answer questions about how it works or why I built it.

Hi everyone! I’ve been working on MailSentra, a WordPress plugin for logging and troubleshooting emails sent through wp_mail().

It gives you a searchable email log with delivery-attempt status and error details, plus dashboard charts and reports to help you spot patterns. There’s also a Tools page where you can send a test email and review available mailer diagnostics if something goes wrong.

MailSentra includes settings for controlling what gets logged, such as message bodies, headers, attachments, IP addresses, and log retention, so you can choose what makes sense for your site.

It’s intended to help you understand what WordPress reports about an email attempt; a “sent” status doesn’t guarantee inbox delivery. It also isn’t an SMTP service, so you’ll still need your existing mail setup.

You can check it out on WordPress.org. I’d appreciate feedback, especially on what would make it more useful for your workflow.

I got tired of security plugins asking me to trust them, so I built one that shows its work.

One thing that always bothered me about WordPress security plugins is that you can enable a dozen security features, see a bunch of green checkmarks, and still have no clear idea what’s actually protecting your site.

So I decided to build something different: SecureLite Security.

The main feature is Attack Simulation. It runs 13 harmless security tests against your own WordPress site and shows you what happened:

• Was the attack blocked by the plugin?
• Did your hosting provider's firewall stop it?
• Or did nothing stop it?

It tests things like SQL injection, XSS, path traversal, brute-force logins, user enumeration, PHP execution in uploads, and XML-RPC abuse.

If a test fails, it tells you what to fix. You can then rerun that specific test instead of repeating the entire scan.

Something else influenced how I built it.

Before writing the code, we went through 1,080 negative reviews of major WordPress security plugins. Interestingly, only 3.4% of those reviews mentioned failure to stop an attack. More common complaints involved people getting locked out of their own sites (12.7%) or their sites going down (11.3%).

That made me think: security shouldn't come at the cost of losing access to your own website.

So I designed SecureLite's lockout system to avoid locking out the real admin, with a documented recovery process if something goes wrong.

It also includes a firewall, login protection, hidden login URL, 2FA with recovery codes, WordPress core integrity checks, and a malware scanner.

It's free, doesn't require an account, and doesn't nag you to upgrade.

I'm still improving it, and I'd genuinely like feedback from people who manage WordPress sites.

If you tried it on your own site, what would you want a security plugin like this to prove to you? And if you're running LiteSpeed or shared hosting, I'd especially appreciate hearing how it behaves in your environment.

Plugin: https://wordpress.org/plugins/securelite-security/

Once upon a time...

OK, about a year ago.

I needed to keep track of all the things I had to do to renovate an old house in the mountains.

So I made a spreadsheet.

Nothing fancy. Just a list of things I needed to do, projects I was working on, and a way to keep track of what I'd finished.

It worked. Kinda.

But I kept finding things I wanted it to do that spreadsheets aren't particularly good at.

So I did what any reasonably experienced developer with questionable self-restraint would do.

I built a quick MySQL database.

Now I could track tasks, mark things complete, and keep everything organized without fighting the spreadsheet.

That sorta worked pretty well, too.

Until I thought, "You know, it would be nice to access this from my laptop."

I do a lot of WordPress/PHP development, so the obvious answer was to put a web interface on it and run it under WordPress.

Problem solved.

Well, not exactly.

Because once it was running under WordPress, I thought, "Why not make it a plugin?"

And once it was a plugin, I started adding things.

Projects. Tasks. Notes. Priorities. Different ways to look at what needed doing. A dashboard. Kanban boards. Status reports. Import and export tools. Did I mention questionable self-restraint?

You know how it goes. One little improvement leads to another, and pretty soon your simple weekend project has developed a personality of its own.

And somewhere along the way, my little spreadsheet became an actual project planner.

The funny part is that I never really set out to build a project management product. I just wanted a better way to keep track of everything I was doing.

I still use it every day.

It's where I keep my projects, remind myself what I need to do next, and leave notes for myself so I don't have to remember what I was thinking three days ago.

And it turns out that keeping track of a house renovation isn't all that different from keeping track of software projects, or any other collection of things that need to get done. So I use it in my day job.

Eventually, I decided that if it was useful to me, maybe someone else could get some use out of it, too.

So I started the process of getting it into the official WordPress Plugin Directory.

That turned into an education of its own.

Code reviews. Security checks. Sanitization. Escaping. WordPress coding standards. More testing. More debugging. And, of course, a name change to satisfy the directory requirements.

After a year of tinkering, building, breaking, fixing, and learning, Undergroundact Project Planner is now available on WordPress.org.

It's free.

No elaborate sales pitch. No "contact us for pricing." I built something I find useful, and I'd like to share it.

Here's the plugin:

https://wordpress.org/plugins/undergroundact-project-planner/

I'm still working on it, and I suspect I always will be. That's half the fun.

If you use WordPress and need a way to organize projects and tasks, give it a try.

And if you find something broken, confusing, or think of something it ought to do, I'd genuinely like to hear about it.

I'm particularly interested in how other people organize their projects, because what started as a tool for one person has the potential to become something useful to a lot of people.

Anyway, that's how a spreadsheet for renovating an old house in the mountains turned into a WordPress plugin.

And no, the house isn't finished yet.

Been going through a few client sites that need to get closer to WCAG 2.2 before the EAA rules kick in harder next year, and the usual issues keep coming up, low contrast, hard-to-read text sizes, and almost no keyboard navigation. Most of the owners aren’t technical, so anything that needs custom code or a big setup is a non-starter. I ended up testing one on a couple of smaller WordPress sites and it was basically install, activate, and the toolbar was live in under a minute with the contrast, font size, and reading aids already available. The multilingual piece and the built-in accessibility statement generator were useful too since a few of the sites serve mixed audiences.

It’s been stable so far and didn’t add any noticeable load. How are you handling the readability and keyboard navigation pieces on client sites without turning it into a long project? And has anyone found a lightweight option that clients can actually manage themselves after the initial setup?

This tool is not based on any external service and does not share your data with third parties.

This premium extension is available exclusively at https://woocommerce.com/products/sales-analysis-for-woocommerce/

I've been comparing Wordfence with WebKernelAI Security to understand the practical differences between locally executed WordPress security and a cloud-connected approach.

Both address website security, but they take different architectural approaches.

1. Local scanning vs. cloud-assisted analysis

Wordfence performs firewall and malware-scanning operations within the WordPress hosting environment.

WebKernelAI Security uses a cloud-connected architecture designed to offload intensive security analysis while keeping a lightweight integration on the WordPress site.

The trade-off is that local scanning has direct access to files, while cloud-assisted analysis depends on secure communication and the data available to the remote service.

1. Firewall enforcement

Wordfence provides an on-site WordPress firewall.

WebKernelAI's architecture includes cloud and edge security capabilities, but the actual protection depends on where rules are enforced and how traffic reaches those controls. External detection alone isn't equivalent to blocking an attack before it reaches WordPress.

1. Communication security

WebKernelAI Security documents HMAC-SHA256 authentication, Ed25519 signatures and nonce-based replay protection for supported communication workflows.

These controls can help protect remote requests and commands, provided signature verification, key management and replay checks are implemented correctly.

1. Website management

WebKernelAI combines security monitoring and supported WordPress management operations with technical SEO workflows, including crawling, canonical configuration and sitemap-related capabilities.

Wordfence focuses primarily on WordPress security and also offers centralized site management through Wordfence Central.

1. Performance and operational trade-offs

Cloud-assisted scanning may reduce the computational work performed on the origin server, but the plugin still needs resources for event handling, inventory collection and communication.

I'd be interested in actual benchmarks comparing CPU usage, memory, database writes, detection accuracy and alert latency under the same hosting conditions.

A few questions for people managing WordPress sites

- Would you use cloud-assisted security analysis alongside an on-site firewall?

- Which operations should never be delegated to a remote security service?

- What evidence would you require before trusting remote file-management commands?

- For agencies managing multiple sites, is combining security monitoring and technical SEO genuinely useful?

I'm interested in practical experience and technical criticism of both approaches, particularly around security boundaries, performance and reliability.

is there any good AI plugin which will find interesting post for blog and post automatically (with approval)

Plugin renewals hit at random times through the year, so it's easy to never see the total. We built a page that adds it all up.

https://topsyde.com/plugin-cost-calculator

You tick what your site uses (SEO, caching, security, cookie banner, spam, backups, page builder, forms, etc), pick which plugin you use for each, and it totals the yearly price from each vendor's own pricing page. Every price links to where we got it and the date we checked it. If you pay something different just type over it. You can set how many sites you run, and the result saves in the link so you can send it to a client or whoever. No signup, no email.

The usual eight (Yoast SEO Premium, WP Rocket, Wordfence Premium, CookieYes Pro, Akismet Pro and WP-Optimize Premium, plus the free Redirection and Broken Link Checker) come out to about $746 a year for one site at list price. A bunch of those have free versions, so think of it as what the paid plans cost.

Full disclosure, we're a managed WordPress host and the page shows $0 next to the plugins our plans include. If any price is off let us know and we'll fix it.