Feed
-
eBay UK is offering grants of up to £200,000 through their Up & Running programme — worth knowing if you run a WooCommerce store alongside an eBay channel. Syncing inventory and orders across both platforms is a real ongoing cost. A grant like this could cover the tooling or resource to automate it properly. #WooCommerce #WordPress #eCommerce #eBay #SmallBusiness https://wpguy.uk/blog/ebay-grants-for-woocommerce-sellers-up-to-200000/
-
A 9.2 CVSS score in WordPress core means an attacker can read server files or execute malicious code with no login required whatsoever. No credentials, no brute force — just an unpatched site and an opportunity. I would not wait on this one. Check your version and update now. #WordPress #WordPressSecurity #SecurityHardening #WebSecurity #CyberSecurity https://wpguy.uk/blog/wordpress-core-flaw-scores-92-patch-your-site-now/
-
If your site runs Elementor 4.3.0 or 4.3.1, I would update immediately. CVE-2026-62062 allows any authenticated user — a subscriber or WooCommerce customer — to escalate their privileges to admin level. Open registration or a membership area makes this a concrete, present risk rather than a theoretical one. #WordPress #Elementor #SecurityHardening #CVE #WordPressSecurity https://wpguy.uk/blog/elementor-privilege-escalation-cve-2026-62062-update-now/
-
Amazon UK now offers Affirm instalment payments, and it raises the bar for every WooCommerce store competing for the same customers. When a buyer can spread the cost on Amazon but not on your site, the checkout decision gets harder. I work with store owners to close that gap with instalment payment options built properly into WooCommerce. #WooCommerce #WordPress #Ecommerce #CartAbandonment #PaymentUX https://wpguy.uk/blog/woocommerce-instalment-payments-reduce-cart-abandonment/
-
Sole trader simplicity has its limits. Once income grows, that structure can cost more in tax than a limited company and leaves personal assets exposed — risks a separate legal entity would prevent. I explore whether incorporation is the right move and what the practical advantages actually look like. #WordPress #SmallBusiness #SoleTrader #LimitedCompany #BusinessStrategy https://wpguy.uk/blog/sole-trader-to-limited-company-is-incorporation-right-for-you/
-
CVE-2026-87902 scored 9.2 out of 10, affected every WordPress version since 2016, and was actively exploited within 24 hours of disclosure — no login required. Most site owners never heard a word about it. That silence is the real vulnerability. Knowing your site runs WordPress is not the same as knowing what is happening to it. #WordPress #WordPressSecurity #CyberSecurity #SecurityHardening https://wpguy.uk/blog/cve-2026-87902-the-wordpress-flaw-most-owners-missed/
-
A critical RCE vulnerability in WordPress core means attackers can execute arbitrary code on your server with zero credentials — no login, no insider access required. Automated scanning began almost immediately after disclosure. If your site is not running 7.1.2, the risk is active right now. Update today. #WordPress #Security #RCE #WordPressSecurity #WebDev https://wpguy.uk/blog/wordpress-712-critical-rce-vulnerability-explained/
-
Two-thirds of UK shoppers go straight to Amazon before they even consider an independent retailer. The real problem is not price — it is that independent stores never enter the consideration set at all. No discount fixes that. In my latest post I look at what UK independent stores can actually do about it. #WordPress #WooCommerce #eCommerce #UKRetail #IndependentRetail https://wpguy.uk/blog/how-uk-independent-stores-can-compete-with-amazon/
-
87% of UK consumers bought secondhand in the past year — making the UK the most active pre-loved market in the world. That is not a niche trend. If you run a WooCommerce store, your product strategy should be responding to it. I have written about what this means practically. #WooCommerce #WordPress #Recommerce #eCommerce #SecondhandUK https://wpguy.uk/blog/woocommerce-for-secondhand-sales-meeting-uk-demand/
-
Manual tracking entries and carrier portal-switching might feel manageable in October. Come November, that friction multiplies across thousands of European orders and the cracks show fast. Shopify has been investing heavily here — WooCommerce stores need to close that gap before peak trading hits. #WooCommerce #WordPress #eCommerce #EuropeanShipping #WordPressdeveloper https://wpguy.uk/blog/woocommerce-european-shipping-closing-the-shopify-gap/
-
If your WooCommerce store runs any version from 9.8.0 to 11.1.x, it is currently exposed to CVE-2026-106608, a CVSS 7.2 vulnerability that allows unauthenticated remote access to your store data and admin functions. I recommend updating to 11.2.0 immediately. #WordPress #WooCommerce #CVE #SecurityHardening #WordPressSecurity https://wpguy.uk/blog/woocommerce-cve-2026-106608-update-to-1120-now/
-
European shoppers are waiting a median of 16 days for refunds from UK online stores, according to ShopReturns research. The delay usually sits inside warehouse processing, not transit — the parcel arrives back quickly, then waits. That distinction matters if you are trying to fix the problem on a WooCommerce store. #WooCommerce #WordPress #Ecommerce #UX #RetailOperations https://wpguy.uk/blog/why-european-refunds-take-16-days-on-woocommerce-stores/
-
Most WordPress site owners have never heard of Ghostscript. I hadn't expected that to matter — until CVE-2025-27830. It processes PDF uploads at OS level, before WordPress even sees the file. A crafted PDF can exploit it silently. If your server runs Ghostscript unpatched, your media library could be a door left open. #WordPress #Security #Ghostscript #WordPressSecurity #CVE https://wpguy.uk/blog/ghostscript-cve-2025-27830-is-your-wordpress-server-safe/
-
The plugin you trust to protect your site can itself become the attack vector. Backuply, installed on over 600,000 WordPress sites, contained a Path Traversal flaw (CVE-2025-2877) that let a basic subscriber account gain full admin access. That is a serious supply chain concern worth understanding. #WordPress #WordPressSecurity #SecurityHardening #WebSecurity https://wpguy.uk/blog/backuply-vulnerability-how-subscribers-gain-admin-access/
-
Every plugin you install carries a measurable cost — HTTP requests, database queries, PHP execution time on every page load. A site with thirty poorly-built plugins is not just slower, it is slower in proportion to how badly they conflict and how often they load where they are not needed. Across dozens of client sites, that compounds fast. #WordPress #WebPerformance #WordPressAgency #PluginOptimisation https://wpguy.uk/blog/how-plugins-are-slowing-down-your-client-sites/
-
Your postcode does not set a ceiling on what you can earn online. The data backs this up — some of Europe's most active small business ecommerce regions are Greater Manchester and the wider North West, not London. A well-configured WooCommerce store is a significant part of that story, and it is something I work on daily. #WooCommerce #WordPress #Ecommerce #SmallBusiness #WordPressGuy https://wpguy.uk/blog/woocommerce-vs-marketplaces-own-your-ecommerce-revenue/
-
Since July 2026, EU supplement shipments from UK warehouses carry flat per-category customs duties. That cost lands somewhere — either in your margin or your conversion rate. If your WooCommerce store is not reflecting this at checkout, you are absorbing it silently. I have been updating pricing logic for affected stores and the fix is not optional. #WooCommerce #WordPress #eCommerce #UKBusiness #Supplements https://wpguy.uk/blog/eu-supplement-duties-fix-your-woocommerce-pricing-now/
-
Two PHP vulnerabilities disclosed July 2025 — CVE-2025-1736 and CVE-2025-1861, collectively PHP2Shell — affect every WordPress site. The worst scores 9.8 CVSS and requires no account to exploit. No plugin or WordPress update fixes this. The patch must be applied at server level by your host. If you manage your own server, check your PHP version now. #WordPress #PHP #Security #WordPressSecurity #WebHosting https://wpguy.uk/blog/php2shell-critical-php-vulnerabilities-affecting-wordpress/
-
Your WordPress site can be taken over without anyone touching it. The PHP2Shell vulnerability class, disclosed in October 2024, exposed how a flaw in the PHP layer alone is enough. No compromised plugin, no login attack. Whether that flaw gets patched depends entirely on your host, not you. Choose carefully. #WordPress #WebSecurity #PHP #WordPressSecurity #Hosting https://wpguy.uk/blog/php2shell-why-your-host-decides-if-youre-protected/
-
“Making” friends, as always
-
Unsure if anyone is in or going to be in LA or planning a trip to Joshua Tree this fall but we’re doing an insane $45/$65/$95 flash day for Friday the 13th in November at Unfurl Collective AND I have some availability coming up in Los Angeles at Angel Kisses Studio November 7th (limited) and am right now planning my other LA dates for November. If you’d like something medieval, folkloric, or intuitive and custom I’d love to draw on my training and framework to develop something beautifully dar...
-
From Thee Grimoire Who’s cool enough for a maggot tattoo? Be honest
-
The rain is divine. We needed this.
-
I had fun with this. All handpoked chalice from my Sympathetic Symbols book.
-
I see a lot of stuff on here (well, less lately since I feel like it’s been quite quiet on this server for a while) about how there is nothing unsafe about witchcraft or any pagan/neopagan practice and that anyone trying to tell you otherwise is some kind of fearmongering grifter. I’ve taken a long, long time to mull over various perspectives on this and have begun to realize a few reasons why I find I just can’t agree with this: 1) Any spiritual practice: be it any Abrahamic religion, any ado...