Latest insights

WordPress Development Blog

Expert tips, tutorials, and insights for WordPress developers.

Four plugin backdoors in a month: WordPress supply chain in 2026

Four plugin backdoors in a month: WordPress supply chain in 2026

Austin Ginder disclosed four WordPress.org plugin backdoors in 30 days, plus an author who ran a hidden update server for five years. What it means for NIS2 and DORA dependency maps.

Cyber Resilience Act + NIS2 + DORA: the 2026 compliance stack for headless WordPress

CRA covers products with digital elements. NIS2 covers entities. DORA covers financial entities. When all three apply at once, headless WordPress sits at the intersection. I sketch what the joint evidence package looks like in 2026.

DORA Article 28 ICT third-party risk: WordPress hosting and WAF supplier audit

Article 28 of Regulation 2022/2554 makes financial entities responsible for the ICT risk of every third-party they touch. I walk through the supplier due-diligence checklist I ship with WordPress engagements for banks and insurers in 2026.

DORA Register of Information for WordPress vendors: required fields

DORA Register of Information for WordPress vendors: required fields

Article 28(3) of Regulation 2022/2554 obliges financial entities to keep a Register of Information on every ICT third-party arrangement. The fields a WordPress agency must populate to be entered.

Harnessing Tailwind CSS for WordPress development in 2026

Harnessing Tailwind CSS for WordPress development in 2026

How to ship a Tailwind v4 design system inside WordPress 6.7+ block themes without breaking editor parity, theme.json tokens or JIT compilation. A practitioner playbook covering setup, block patterns, and the gotchas.

How to create an SEO-optimized WordPress site in 2026

How to create an SEO-optimized WordPress site in 2026

A practitioner walkthrough to ship a WordPress site that ranks in 2026. Technical SEO, Core Web Vitals, schema, AEO, GEO, hreflang and the sequence that gets it right the first time.

More Articles

NIS2 and DORA on WordPress: what a site must meet in 2026

NIS2 and DORA on WordPress: what a site must meet in 2026

The NIS2 Directive (2022/2555) was to be transposed into national law by 2024-10-17. The DORA Regulation (2022/2554) applies directly from 2025-01-17. For a WordPress site operator this means specific obligations if the site relates to a regulated entity. We explain it without panic, with references to the texts of the acts.

Core pathways

Start from the strongest topic pillar

This section routes users and crawlers into the service pages and topic archives that carry the strongest WordPress, SEO, and performance clusters.