admin-ajax.php is the file in wp-admin that every WordPress plugin is allowed to phone. It boots the whole site, reads one action parameter, runs whatever function claimed that name, and hangs up. The name says “admin” but the front end uses it just as freely, so the file shows up in two places site owners…

A chatbot plugin is a web form that spends your money when someone types into it. That is the whole product: a visitor writes a sentence, the plugin sends it to an AI vendor with your API key attached, and the vendor bills you per token. For a customer it is support. For a script…

Search Console has a status called Discovered – currently not indexed. It means Google knows a URL exists and has chosen not to fetch it yet. The report tells you which URLs are in that state and nothing else: not when Google learned about them, not what it fetched instead, not whether it is coming…

On 25 August, Eric Mann published a proposal on Make WordPress Core for a Secrets API in WordPress 7.2: four functions, a WP_Secret object, and encryption that cannot be switched off. The opening line of the case for it is the one every plugin author already knows: WordPress has no first-class way to store a…

Google shipped Gemini 3.8 Flash on 2 September at $0.75 per million input tokens and $3.75 per million output. That is the figure in every one of the fifteen results I pulled this morning for Gemini 3.8 Flash pricing, and every one of them is correct. It is also the same figure Gemini 3.7 Flash…

There is a small switch on your Plugins screen labelled “Enable auto-updates”. I pulled the first fifteen results for WordPress plugin auto update this morning and every one of them is a tutorial for finding that switch. Not one headline or summary in that set mentions that the switch has three completely different meanings depending…

If your company already has an AWS account, routing your WordPress chatbot through Amazon Bedrock instead of calling Anthropic or OpenAI directly looks like free tidiness. One vendor, one invoice, one set of IAM roles. The obvious worry is that the convenience carries a markup. It mostly doesn’t. I read four price feeds at source…

Claude Opus 4.6 and Claude Opus 5 cost exactly the same on paper: $5 per million input tokens, $25 per million output. Same numbers, same billing page. Swap one for the other in a WordPress chatbot and your monthly bill goes up by roughly a third. Nothing was repriced. The models count tokens differently. This…

At the end of August, a developer looked inside one of the most widely installed SEO plugins on WordPress and found that opening its help panel handed out a working key to the site. Not a token scoped to one job. A WordPress application password carrying whatever permissions the person clicking already had — which,…

An accessibility widget is the little circular icon in the corner of a website that opens a panel of toggles: bigger text, higher contrast, a dyslexia-friendly font, sometimes a “screen reader mode”. If you run a WordPress site and you have ever worried about an ADA demand letter, you have almost certainly been sold one….