4 min read
WordPress Core CVE-2026-63030: patch 7.0.1 and older branches now
Critical unauthenticated RCE (wp2shell) hits WordPress 7.0.0–7.0.1 and 6.9.0–6.9.4. What the CVEs mean, which versions are fixed, and what SMBs should do today.
Hosting
9 articles
2 min read
When to stop self-hosting email (and when to keep it)
A straight take on leaving on-prem or cPanel mail for Microsoft 365 / Google Workspace, and the few cases where self-hosting still makes sense.
1 min readTutorial
Inventory your public websites before the next CVE
You cannot patch what you forgot existed. A quick method to find shadow WordPress and forgotten subdomains.
1 min read
Web form spam and fake leads
Bot leads waste sales time and can hide phishing callbacks.
1 min readTutorial
Website TLS certificates: expiration discipline
Auto-renew usually works until it does not. A lightweight checklist so HTTPS does not expire on a holiday.
1 min read
Website care: updates, plugins, and PHP versions
How small business sites get owned, and a maintenance rhythm that prevents most of it.
1 min read
Choosing managed DNS wisely
Registrar default DNS is fine until you need fast changes, DNSSEC, or failover. What to evaluate.
1 min read
Legacy TLS and payment tools
Old TLS versions linger in niche payment and LOB software. Plan the break.
3 min read
5 Must-Have Plugins for Every WordPress Installation
A practical shortlist of WordPress plugins for security, Google insights, SEO, legal pages, and caching: what each one does and when Premium is worth it.