Podcast: Play in new window | Download | Embed
Subscribe to WPPlugins A to Z on Apple Podcasts | Podcast Index | Email | RSS
Good morning, good afternoon, good evening, wherever you happen to be hiding out there on the globe today! Coming to you LIVE from…
We’ve got a couple of great in-depth plugins to cover for you: WPProAtoZ CPT Selector for Elementor, a lightweight WordPress Plugin that lets you select multiple Custom Post Types from a central Settings Page, and StaticDelivr: Free CDN, Image Optimization & Speed – a lightweight CDN plugin designed to improve your WordPress site’s performance!
And of course we’ve also got some recent news in both the WordPress World and the Tech World in general with additional WordPress Tips!
If you haven’t already, be sure to get out there and mow the lawn – waiting much longer and you will have to pull out a weed wacker to get that grass down!
A few reminders before we start the show today….
Reminders:
-
Join us here in person every Monday at 12:00 pm Pacific Time to enjoy our show!
-
Show notes are added to wppluginsatoz.com within 24 hours of the show airing; you can find them either on the home page, or in the Podcast Vaults!
-
This is a value for value show dear listeners, help us get some loven’ by hitting some like buttons, sharing an episode or two, or just turn our show on really loudly. We will catch somebodies attention!
If you stick around until the end, you will have a chance to hear some good questions – sometimes meant for the greenies, sometimes meant for the very experienced – and sometimes the questions are just completely random. Stick around and have a listen, might help! Or at least entertain!
(Don’t feel shy about sending in a message just to say hi! Send along suggestions, questions, recommendations, news, art – we always love to hear from our listeners!)
Let’s start the show with this weeks Featured Artist:
Artist:
Who is our artist today?!?
Today is…. Grok! Looks like they gave back his artistic & creativity skills.
We would love some new art from our Producers out there! If you are so inclined, you can send it into us at amber@wppro.ca or john@wppro.ca. If you need some inspiration, you can always go to our site wppluginsatoz.com and check out our Art Vaults – you will find the link for it on the left hand menu.
We can NEVER have too much art!
Breaking News in the WordPress World at large!!
If you have anything you think should be added please send it into me at amber@wppro.ca!
News this week:
WordPress Vulnerability Report
(https://solidwp.com/blog/wordpress-vulnerability-report-april-22-2026/) – In this report there are 216 vulnerabilities. 187 are plugins this week, with 29 Theme.
Plugins: 159 patched, 28 left to go!
Themes: 28 patched, 1 left to go!
WordPress Vulnerability Report from PatchStack
(https://patchstack.com/database/) – These guys always have the latest information on what is going on regarding the latest in vulnerabilities.
WordPress 7.0 gets a new May 20 release date
(https://www.therepository.email/wordpress-7-0-gets-a-new-may-20-release-date) – Latest update was delayed due to performance issues with its new real-time collaboration feature, so the team is now asking hosting providers to help test four different database/storage options to make sure it turns smoothly and efficiently on real shared hosting environments. The new betas are coming in early to mid May before the final launch for those interested in testing it out.
Woo to notify WooCommerce Subscriptions customers after four bugs silently broke renewals
(https://www.therepository.email/woo-to-notify-woocommerce-subscriptions-customers-after-four-bugs-silently-broke-renewals) – Four serious bugs were quietly switching WooCommerce Subscriptions from automatic to manual renewal mode during checkout, HPOS syncs, and plan changes. This caused automatic payments to stop without any failure emails or notifications to merchants or customers — sometimes for years. Woo has now patched the issues and will be emailing affected stores this week. If you use Subscriptions (especially with HPOS enabled), update right away and check your subscriptions.
WordPress.org closes 31 plugins after backdoor planted across Flippa Portfolio
(https://www.therepository.email/wordpress-org-closes-31-plugins-after-backdoor-planted-across-flippa-portfolio) – I believe this is the case we were talking about last show, although it is important enough to bring to everyone’s attention again. The WordPress Team were able to move quickly to close a suite of 31 plugins after a buyer who acquired them on Flippa activated a backdoor that was planted eight months ago. If you use any Essential Plugin/WP Online Support plugins (sliders, galleries, countdown timers, etc.), update immediately if you have not already, and be sure to check your wp-config.php for suspicious entries.
Pressable launches MCP integration, letting customers manage WordPress Hosting from Claude, ChatGPT, and Gemini
(https://www.therepository.email/pressable-launches-mcp-integration-letting-customers-manage-wordpress-hosting-from-claude-chatgpt-and-gemini) – This is neat – customers can now create sites, update PHP, and audit their hosting accounts by prompting Claude, ChatGPT, or Gemini with natural language prompts, bypassing the MyPressable dashboard. This integration also covers plugins, themes, backups, performance metrics, activity and error logs, domains, collaborators, and SFTP accounts. What this means for the average WordPress user is that the non-techy people can now manage their hosting – or at least they think they can… This is going to be fantastic and nightmarish both I think. I am looking forward to see who else winds up adopting this!
Brian Solis, Liza Adams to headline an AI-heavy DE{CODE} 2026
(https://www.therepository.email/brian-solis-liza-adams-to-headline-an-ai-heavy-decode-2026) – For those who are interested WP Engine’s seventh annual DE{CODE} returns on May 6 with a speaker lineup and three-track agenda focused exclusively on AI’s impact across the web. The event is completely virtual, so you can attend this from anywhere- and this is totally free, with registration now open!
A solar system in the making? Two planets spotted forming in disc around young star
(https://www.eso.org/public/news/eso2604/) – Astronomers have directly imaged two baby gas-giant planets forming right now in the protoplanetary disk around a young sun-like star called WISPIT 2 (about 437 light-years away).
This is only the second time we’ve ever caught planets in the act of forming — and this system looks like it could end up resembling our own early Solar System, with gaps and rings suggesting more planets are forming. It’s a rare real-time look at how systems like ours come together.
(Go visit WP Shout Comics OR Word Chronicles OR MonkeyUser.com for a fantastic brain break – my favourite today is this one!)
Some Extras – check out our Facebook or Twitter!
Can’t make it to Palermo? Checkout Summit is going online in May
Wooships Google for WooCommerce 3.6, making YouTube shopping a direct sales channel
WordCamp Europe 2026 schedule now live, with new extended workshop format
Matt Mullenweg calls for rethink on WordPress contributions, says Five for the Future Data is ‘worse than useless’
Matt Mullenweg overrules Core Committers to put Akismet on WordPress 7.0’s connectors screen
PressConf 2026 recap: the clarity that comes from challenge and discomfort
WordCamp Asia 2026 wrpas up in Mumbai with record attendance and a fourth flagship announced
Matt Mullenweg says ‘the wheels have fallen off’ in wide-ranging WordPress critique
Rogue’s Corner News and Extras
Be sure to go and check out the new and unique plugins now available from WPProAtoz.com!
Rogues Corner & Tip of the day
WordPress and Related News
This Shows Featured Promotion
I will be promoting a premium plugin I’d like to help get others to buy it.
This week it is
Toggle WP
The Lowdown:
The All-in-One Modular Plugin for WordPress Profitability.Stop firefighting support tickets and start scaling your margins. ToggleWP combines “Client-Proof” site locks with on-brand AI content creation to turn your maintenance plans into high-growth assets – all without the plugin bloat.
-
Agency Site Sync: Save hours with bulk site registration and settings sync across your entire portfolio.
-
White-label: ToggleWP is your secret sauce, brand it your way.
-
Admin Guardrails: Lock down critical plugins so clients can’t accidentally “deactivate” your hard work.
-
BYOK AI Content Hub: Upsell on-brand AI text services with zero monthly API markups. You keep 100% of the profit.
-
Revenue Retention: Give clients “sticky” features they can’t get from a budget host, drastically reducing your churn.
-
V1.1 includes 7 modules for free: What you get with ToggleWP free.
WordPress Items:
Prepare your plugins for WP 7.0
info on how to fix you WP site
Showoff your WordPress website
Small Guys People to follow on X:
V for V for the show
If you get any value out of this show then donate that value back to the show. You can do so through time, talent, or treasure – or all 3!! – through our website wppluginsatoz.com.
Click on the ‘Treasure Donations’ link on the left-hand menu, or on the ‘Time, or Talent‘ pages to find out more!
Note to our listeners out there using Overcast you are the winners for the most downloads.
Security Stuff:
Building a security.txt file and using it
Steps to Fix “Security.txt Not Configured”
-
Generate the File: Use the securitytxt.org generator to create a compliant file with your security contact information (email, security page, or phone number).
-
Create the Path: Create a directory named
.well-knownin your website’s root directory. -
Place the File: Save the text file as
security.txtinside the.well-knownfolder. -
Verify Requirements: Ensure the file is served over HTTPS and has a
text/plaincontent type. -
Optional – Sign the File: For enhanced authenticity, you can create a detached signature for your
security.txtfile using GPG
Alternative Methods
-
Cloudflare Users: You can generate and manage this directly through the Cloudflare dashboard under Security > Settings.
-
Apache Servers: You can configure your server to serve it automatically using a rewrite rule to the
/.well-known/path.
Why You Should Fix This
-
Vulnerability Reporting: It provides a clear, accessible channel for ethical hackers to report vulnerabilities before they are exploited.
-
Standardization: Adheres to emerging security best practices, showing a proactive commitment to security.
A security.txt file is an important component of modern website security because it provides a standardized, easy-to-find way for security researchers, ethical hackers, and bug bounty hunters to contact the site owners about vulnerabilities.
Placed at https://example.com/.well-known/security.txt (or /security.txt), it follows a simple, machine-readable format (similar to robots.txt) that lists preferred contact methods (email, PGP key, bug bounty program URL, etc.), disclosure policy, and expiration date. Without it, researchers often waste time hunting for the right email, trying generic addresses like security@ or abuse@, or even resorting to public social media — which can delay reports or push them toward less responsible disclosure channels.
By making responsible reporting frictionless, security.txt dramatically improves the chances that vulnerabilities are reported privately and fixed quickly before malicious actors discover and exploit them. It signals that the organization takes security seriously, encourages coordinated vulnerability disclosure, and ultimately reduces the overall attack surface of the website. Major organizations (including Google, GitHub, and many governments) already publish them, and adoption is growing as a best practice.
Tip of The Day:
Talk about us WPProAtoZ.com as an agency and what we do
Follow WP Plugins A-Z on X @wppluginsatoz and Facebook WordPressPluginsA2Z
Upcoming Interviews:
Reminder that we have more interviews coming up in the coming weeks with more developers and community members https://wppluginsatoz.com/book-an-interview-on-wp-plugins-a-to-z-podcast/
Available dates: May 4 & 18, June 1, 15 & 29, 2026.
Other Shows and places to get WP Info & Training
The WP Builds Podcast
WP Roads
WP-Tonic
Worlds Worst Web Developer
WP Mayor
wp Minute
Dragon Rating Time with John!
John’s Plugin
WPProAtoZ CPT Selector for Elementor
The Lowdown:
A lightweight WordPress plugin that lets you select multiple Custom Post Types from a central settings page and display them as a clean, automatically linked list using a simple shortcode. Fully compatible with Elementor and respects custom Archive Slugs set in ACF Post Types.
Rating 5 Dragons
WordPress Tips
We would love to hear some tid bit tips from some of our producers out there – what did you figure out by breaking something? Or what did you need to learn in order to help someone? You can send these tid bits into me at amber@wppro.ca
My tip to you today…
If you are a coffee drinker, I highly recommend you start making iced coffee for the upcoming hot mornings. Currently if you have any coffee leftover from your morning routine, pour that coffee into ice cube trays, and freeze them – this way you have coffee ice cubes that you can use to cool down your coffee and you don’t end up losing any of the coffee flavour!
Also, when making iced coffee try using a can of milk instead of regular milk – it’s a little thicker and adds a really good flavour.
Also, be sure to drink water at some point. ;)
Dragon Rating Time with Amber!
Amber’s Plugin
StaticDelivr: Free CDN, Image Optimization & Speed
The Lowdown:
This was sent into us by Coozy Wana back in February – we really are working through a bit of a backlog so if you have sent your plugin into us and have not heard it on the show, we are getting to you we are just a little slow. Everyone sent in something in January and February, so we are still working through those.😉
This plugin is a Free CDN with oepn-source and no premium to worry about. They offer pricacy-focused Google Fonts proxying so as to ensure GDPR compliance, and automated Image Compression. They are compatible with all WordPress theems and plugins – both from wordpress.org and custom/premium sources.
They do cite that this plugin does automatic URL rewriting, where URLs of enqueued styles, scripts, and core files for themes, plugins and WordPress itself so as to use the StaticDelivr CDN. This is something to be aware of.
Once downloaded and activated you can find the dashboard for this plugin under ‘settings’>’StaticDelivr CDN’. Here you see a very well laid out dashboard showing you your WordPress version at the top with ‘Assets CDN’, ‘Images’, ‘Google Fonts’, ‘Quality’, and ‘Format’. These things tell you whether they are enabled, percentage, and my site has ‘WEBP’ format.
You also see your Themes, Local Themes, Plugins via CDN, and Plugins that are local – these are listed out so that you can see what the ‘smart decision’ aspect of this plugin has decided to do for you to help you the most.
Under ‘Image Optimization’ you can choose to enable CDN for images, and choose the quality level alongside the Image Format. Google Fonts has the option to be activated or not as well, and then at the bottom there are Development & Debugging Dev Tools. You can toss on ‘Debug Mode’, and you can also ‘Bypass Localhost Detection’, this allows CDN to rewrite for localhost/development URLs. When this last is enabled, image URLs will be rewritten to CDN format, but the CDN cannot actually fetch images from localhost. You will see errors which helps identify which images are being processed and which might have issues on production.
And at the very bottom, you can see ‘CDN Failure Statistics’ – both images and assets are listed here. There is also a ‘Clear Failure Cache’ button for when you have dealt with anything listed there.
The layout is simple, clean, easy to understand, and well done!
And I can tell you this – my site is full of images, and I have a lot running and the site was absolutely going kinda slow – but turning this on got the entire site running a lot better! This works very well, plays nice with others and is indeed lightweight! The back end is not slower at all – actually I found the entire site to be faster than expected from one single plugin.
I think this is a fantastic little plugin! Definitely go give this a try if you need a simple lightweight plugin to help out your site!
Rating: 4 Dragon
***Transitioning into MISC ANNOUNCEMENTS***
Miscellaneous Announcements from all:
Have an announcement like a meetup, or to announce you’ll be on stage at a WordCamp? Let us know and we will add it here and help get your news out to the world!
WordPress Campus Connect Rajshahi – December 11 – April 30
WordPress Campus Connect Ribera del Duero – January 30 – June 17
WordPress Campus Connect Universitat de Lleida – February 18 – May 6
WordPress Campus Connect Masaka – April 11 – May 31
To see the entire list you can follow the link here in the show notes, then click on ‘More WordCamps’ right below the list of the next 5. https://central.wordcamp.org/
If you are interested in finding a WordPress Meetup somewhere around the world you can go check out the places here: https://www.meetup.com/pro/wordpress/
Keep checking back every week to find out what else is going on!
V for V for the show
If this show saves you time, headaches, or helps level up your WordPress game, or if we have showcased a plugin you never knew you needed that wound up saving you hours of time – go out and plug people in!
Consider giving back through our V4V model: Time, Talent, or Treasure (or all three!). Head over to our site wppluginsatoz.com.
Click on the ‘Treasure Donations’ link on the left-hand menu, or on the ‘Time, or Talent‘ pages to find out more!
This show is supported by the V4V plan which means Time, Talent or Treasure.
How to Support the Show
Submit your Art work! Submit your art work or the best AI slop you can create submit it here https://wppluginsatoz.com/submit-plugin-review/
Donate Cash to the show this is our favourite way to get support
Book yourself an interview, https://wppluginsatoz.com/book-an-interview-on-wp-plugins-a-to-z-podcast/
Get us to make your announcement for you, let the world know you have something to say or a company worth checking out!
Today’s Plugins we covered were:
John’s Plugin:
WPProAtoZ CPT Selector for Elementor by Ahkonsu – John Overall
-
lightweight WordPress Plugin & plays well with others
-
Multiple Custom Post Types from a central settings page
-
Automatically linked using simple shortcode
Rating: 5 Dragons
Amber’s Plugin:
StaticDelivr: Free CDN, Image Optimization & Speed by By coozywana
-
Smart Asset Detection
-
WordPress Theme and Plugin compatibility – wordpress.org and private
-
Image Optimization
Rating: 4 Dragons
How to reach us:
Feel like sending us something through the snail mail system? You can do that thanks to our brick and mortar address that we provide for you!
You can also reach us the more common way of the internets – have both of our internets available down below for ya!
Brick & Mortar Address
WP Plugins A to Z
C/O John Overall
306 – 855 Ellery Rd.
Victoria, BC V9A 6X6
Canada
Internets Addresses
John:
-
My website: http://www.johnoverall.com/
-
WordPress Emergency Support: http://wppro.ca/wpemergency
-
email: john@wppro.ca
Amber:
-
email: amber@wppro.ca
Q & A Time with Amber – Catch this info on our YouTube Channel
If you have questions you would like to have asked on the show, send them in to me at Amber@WPPro.ca – !
-
You transitioned into this from a rather physical job as a mechanic – what was the hardest thing for you to adjust to during that transition – and do you have any advice for others looking to do a similar transition?
-
What would be the best bit of advice you think you could offer someone new to working on the computer from home?
Questions asked after closing credits:
-
During your years working with WordPress, what was the most unexpected change you experienced – and what did it teach you?
-
Can you think of one habit you’ve developed over the years that helps with your creativity and productivity that you think could help others if they picked it up?
