Podcast: Play in new window | Download | Embed
Subscribe to WPPlugins A to Z on Apple Podcasts | Podcast Index | Email | RSS
Good morning, good afternoon, good evening, wherever you happen to be hiding out there on the globe today! Coming to you LIVE from…
We’ve got a couple of great in-depth plugins to cover for you: Podcast Player – Your Podcasting Companion bringing you a Podcase Player for your site, designed to make the process of playing and showcasing your podcast simple, straightforward, and easy to use!
And we have SSO JumpCloud – Enterprise SAML & SCIM – this plugin brings you the ability to login to your WordPress site with JumpCloud, and brings other JumpCloud users the option to create a new account on your site through their own JumpCloud login!
And of course we’ve also got some recent news in both the WordPress World and the Tech World in general with additional WordPress Tips!
Hoping all of our 9 listeners out there are keeping warm and dry despite the crazy weather we are all having! Be sure to keep consuming that vitamin C – Hot honey-lemon water is fantastic for that! Especially when light on the honey, heavy on the whiskey…
A few reminders before we start the show today….
Reminders:
-
Join us here in person every Monday at 12:00 pm Pacific Time to enjoy our show!
-
Show notes are added to wppluginsatoz.com within 24 hours of the show airing; you can find them either on the home page, or in the Podcast Vaults!
-
This is a value for value show dear listeners, help us get some loven’ by hitting some like buttons, sharing an episode or two, or just turn our show on really loudly. We will catch somebodies attention!
If you stick around until the end, you will have a chance to hear some good questions – sometimes meant for the greenies, sometimes meant for the very experienced – and sometimes the questions are just completely random. Stick around and have a listen, might help! Or at least entertain!
(Don’t feel shy about sending in a message just to say hi! Send along suggestions, questions, recommendations, news, art – we always love to hear from our listeners!)
Let’s start the show with this weeks Featured Artist:
Artist:
Who is our artist today?!?
Today is…. Grok! He appears to be coming back to himself after the most recent lobotomy!
We would love some new art from our Producers out there! If you are so inclined, you can send it into us at amber@wppro.ca or john@wppro.ca. If you need some inspiration, you can always go to our site wppluginsatoz.com and check out our Art Vaults – you will find the link for it on the left hand menu.
We can NEVER have too much art!
Breaking News in the WordPress World at large!!
If you have anything you think should be added please send it into me at amber@wppro.ca!
News this week:
WordPress Vulnerability Report
(https://solidwp.com/blog/wordpress-vulnerability-report-february-11-2026/) – In this report there are 467 vulnerabilities. 448 are plugins this week, with 19 Themes.
Plugins: 372 patched, 76 left to go!
Themes: 14 patched, 5 left to go!
WordPress Vulnerability Report from PatchStack
(https://patchstack.com/database/) – These guys always have the latest information on what is going on regarding the latest in vulnerabilities.
Critical WordPress backup plugin flaw leaves 800,000 sites exposed to remote code execution
(https://cyberpress.org/wordpress-backup-plugin-exploit/) – The WPvivid Backup & Migration Plugin, known as Migration, Backup, and Staging plugin is suffering from an unauthenticated arbitrary-file-upload issue in versions up to 0.9.123. The issue was discovered via Wordfence’s Bug Bounty Program; this flaw allows attackers to upload malicious files when sites enable a specific backup transfer feature. If you have not already, be sure to update immediately!
Critical CleanTalk Plugin flaw allows authorization bypass on WordPress via reverse DNS
(https://cyberpress.org/cleantalk-plugin-flaw/) – CleanTalk Spam Protection Plugin for WordPress has an issue in it’s ‘checkWithoutToken’ function. This routine verifies requests by relying on reverse DNS (PTR) records instead of secure methods like cryptographic tokens, and this is causing a critical vulnerability where it allows attackers bypass authorization and seize control of sites. Version 6.72 has fixed it – but if you use this and have not already updated, be sure to do so immediately!
WordPress AI experiments Plugin tests eight new features, including type-ahead and comment moderation
(https://www.therepository.email/wordpress-ai-experiments-plugin-tests-eight-new-features-including-type-ahead-and-comment-moderation) – The WordPress AI team is inviting the community to test eight new experimental AI features, marking a significant expansion of the AI experiments plugin as contributors work to figure out which concepts are worth keeping. The goal is to figure out which tools will work widely, make life easier, and be most useful with the least amount of sticking points.
WordPress 6.9.1 released with fixes for 49 bugs in core and block editor
(https://www.therepository.email/wordpress-6-9-1-released-with-fixes-for-49-bugs-in-core-and-block-editor) – We have mentioned NUMEROUS times that you DO NOT want to update right away with your sites – generally we recommend you wait until the .2 or .3 version is released – however, I have been testing out the .1 version on a variety of my sites including my super tenuous sites that are still working thanks to bubblegum, duct tape and a prayer – and it seems to be doing alright so far.
We recommend testing this out in a dev site FIRST before updating on your live site though. You DO NOT want to ‘test’ on your live site if you can help it!
WordPress agent skills move to official repo as AI team publishes first usage guidelines
(https://www.therepository.email/wordpress-agent-skills-move-to-official-repo-as-ai-team-publishes-first-usage-guidelines) – For anyone who missed it, the WordPress AI Team has a new home for its Agent Skills project on GitHub Repository. You can click the link here in the show notes to go and check it out!
Annular ‘ring of fire’ solar eclipse February 2026: Live updates
(https://www.space.com/news/live/annular-solar-eclipse-february-2026-live-updates) – On February 17, there is a ‘ring of fire’ solar eclipse, where the moon covers the majority of the sun, leaving a distinct ring of light around the edge! The effect will last for about 2 minutes – give or take 20 seconds. :) If you are up in Antarctica, parts of Southern Africa and South America, you will get to see the full effect. However for the rest of us, we may get the partial effect, seeing a partial solar eclipse. Totally worth checking out – and even if you won’t be able to see it, I am sure we will get to see some amazing pictures online from those who do!
(Go visit WP Shout Comics OR Word Chronicles OR MonkeyUser.com for a fantastic brain break – my favourite today is this one!)
Some Extras – check out our Facebook or Twitter!
Automattic backs University of Illinois Chicago program set to pay students for WordPress-based AI training
Mullenweg calls for Markdown Endpoints on WordPress.org as he pushes ‘web os’ vision
9 steps to prepare your WordPress site for AI search engines
Automattic planned to ‘steal every single WP site’ from hosts that refused trademark deals, WP engine alleges in latest complaint
Matt Mullenweg: Global SPonsors’ products should be ‘fair game’ for WordCamp talks
WP Engine launches Newsroom, a publishing platform built on big bite’s Newsroom expertise
WordPress AI experiments Plugin tests eight new features, including type-ahead and comment moderation
WordPress AI client proposal prompts debate ahead of planned core merge in 7.0
WordPress meetup organizers back revamp plans, but warn infrastrucutre must catch up
Windows 11 will finally let you move your taskbar, a Windows 10 feature that was taken away for no reason
Microsoft says Windows 11 update causes BSOD on some GPU config, broke WPA3 Wi-Fi, but a fix is rolling out
Your Windows PC might stop booting in June 2026 – here’s why and how to fix it
Microsoft’s AI boss says AI can replace every single white-collar job in 18 months – ‘We’re going to have a human-level performance on most, if not all, professional tasks’
OpenAI has deleted the word ‘safely’ from its mission – and its new structure is a test for whether AI serves society or shareholders
Roots & Fruit launches fractional growth leadership for WordPress product teams
The WP community collective president resigns over board’s ‘tolerance for risk and discomfort’
Inside WordCamp Asia 2026: planning for 3,000+ attendees and live WordPress 7.0 release
Rogue’s Corner News and Extras
Be sure to go and check out the new and unique plugins now available from WPProAtoz.com!
Rogues Corner & Tip of the day
WordPress and Related News
This Shows Featured Promotion
I will be promoting a premium plugin I’d like to help get others to buy it.
This week it is
ChangeLogWP
The Lowdown:
Clear, detailed changelogs enhance user experience and maintain a strong relationship between developers and users. They inform users about new features, bug fixes, and improvements, helping them understand what’s changed.
-
Communicate Updates: Inform users about new features, bug fixes, and improvements, helping them understand what’s changed.
-
Build Trust: Transparent documentation shows developers are actively maintaining and improving the software, fostering user confidence.
-
Aid Troubleshooting: Help users and developers identify when issues were introduced or resolved, streamlining support and debugging.
-
Guide Adoption: Highlight new functionalities, encouraging users to explore and utilize updates effectively.
-
Ensure Compliance: For regulated industries, changelogs provide an audit trail of changes, ensuring accountability and traceability.
-
Support Decision-Making: Help users decide whether to update based on changes that impact their workflows or security.
WordPress Items:
Elementor One feedback
https://elementor.com/pages/no-code-site-builder/ Elementor One
Small Guys People to follow on X:
V for V for the show
If you get any value out of this show then donate that value back to the show. You can do so through time, talent, or treasure – or all 3!! – through our website wppluginsatoz.com.
Click on the ‘Treasure Donations’ link on the left-hand menu, or on the ‘Time, or Talent‘ pages to find out more!
Note to our listeners out there using Overcast you are the winners for the most downloads.
Tip of The Day:
Talk about us WPProAtoZ.com as an agency and what we do
Follow WP Plugins A-Z on X @wppluginsatoz and Facebook WordPressPluginsA2Z
Upcoming Interviews:
Reminder that we have more interviews coming up in the coming weeks with more developers and community members https://wppluginsatoz.com/book-an-interview-on-wp-plugins-a-to-z-podcast/
Available dates: , Feb 9 & 23, 2026
Other Shows and places to get WP Info & Training
The WP Builds Podcast
WP Roads
WP-Tonic
Worlds Worst Web Developer
WP Mayor
wp Minute
Dragon Rating Time with John!
John’s Plugin
Podcast Player – Your Podcasting Companion
The Lowdown:
The Podcast Player is your ultimate solution for playing podcast on your website. It is designed to make the process of playing and showcasing your podcast simple and straightforward. All you need to do is provide the podcasting feed URL and the Podcast Player will take care of the rest. This plugin is a must-have for any podcast website, as it provides a seamless and convenient way for your listeners to access all your episodes. They can do so from any page on your website, giving them the flexibility to enjoy your content whenever and wherever they want. The Podcast Player is the perfect way to enhance the user experience on your podcast website and keep your listeners engaged and entertained.
Rating 5 Dragons
&
WPProAtoZ Limit Admins Who Can Update Plugins, Themes & Core
The Lowdown:
Restrict plugin, theme, and WordPress core updates/install/delete/activate capabilities to only specifically allowed admin usernames.
Rating 5 Dragons
WordPress Tips
We would love to hear some tid bit tips from some of our producers out there – what did you figure out by breaking something? Or what did you need to learn in order to help someone? You can send these tid bits into me at amber@wppro.ca
My tip to you today…
Don’t feel guilty about using tools to help you finish your work faster.
My younger daughter felt guilty when she was a little younger and working on the computer – because writing by hand does not come easily to her, so she was given permission to type things out.
And she felt guilty about doing that because it was easier.
And I find that I also feel guilty sometimes when I use the AI to take my scattered thoughts and place them into a template I created – because I just knocked 2 hours off my time by having the AI do that sorting for me.
HOWEVER!
When you use a tool as it is intended to be used, you SHOULD NOT feel guilty about doing so! The ENTIRE reason we create new and shiny tools is to make the work we do easier to allow more time for other things – like a date with your partner or dinner with the kids!
Use that AI to sort your chaotic thoughts into the template, and be grateful that you knocked off 2 hours – and jump for joy that there is a virtual tool to help out!
Can you imagine if farmers felt guilty about using the machinery they use for sowing and harvesting?!?
A tool is a tool is a tool, whether it is virtual or physical it was created to make your work life a little easier, so use it!
On the same note, do not allow yourself to begin relying on the tools to such an extent that you cannot do things WITHOUT the tool. To use the farmers as an example again, they know how to sow and harvest by hand – they just use machinery to get more done in a shorter amount of time.
If you begin to rely on the tool and forget how to do your job entirely, you will find that there are now more problems than solutions – and that is never good.
There is a fine balance – but don’t let yourself not use tools offered because of guilt.
There is a balance!
Dragon Rating Time with Amber!
Amber’s Plugin
SSO JumpCloud – Enterprise SAML & SCIM
The Lowdown:
This plugin was sent into us by the creator Airton Vancin Junior, and it is a pretty awesome plugin!
This is a Freemium plugin, though the free version of this is a fantastic starter that gives you what you absolutely need to get going, all the better and easier tools being behind the paywall – as it should be!
Once I downloaded and activated this, I was able to find the dashboard for the plugin under ‘Settings>SSO JumpCloud’.
Here you have 3 areas – General, Premium Features, and SCIM Provisioning.
General area is where you put in the basic information that both JumpCloud and WordPress need in order to work together. The for the following:
-
IDP Entity ID (required) your JumpCloud – your Identity Provider (IdP), or also known as your ‘Issuer URL’.
-
SSO URL (required) – this is the URL to which WordPress will redirect the user for authentication, this is provided by JumpCloud.
-
SLO URL (optional) – this is the URL to which WordPress will send a logout request to terminate the session at JumpCloud. If unsure, just leave it blank.
-
Certificate (required) – the X.509 certificate used to verify the signature of SAML responses sent by JumpCloud. This will also be provided by JumpCloud, and for those new to SAML: this means Security Assertion Markup Language and is a standard part of their setup as the IDentity Provider (IdP) to vouch for users.
-
Disable Default Login – this allows you to disable the default username/password login so that only login with JumpCloud will be allowed.
Along the righthand side there is a sidebar with all of your site info needed to configure your JumpCloud. You will see:
-
SP Entity ID
-
ACS URL
-
SLS URL
-
SCIM Base URL
Fill this information into your JumpCloud Custom SAML App (super easy steps in their docs), save, and hit the ‘Test Configuration’ button in the plugin. This will validate everything for you.
Once everything is set up, the ‘Login with JumpCloud’ button should appear on your login page – you can also throw it into your site wherever with a widget or a shortcode. By clicking this, users will be able to now login with JumpCloud.
Cool thing about this is that for first timers to your site with now previous account, there is a ‘Just-in-time’ (JIT) provisioning that will kick in automatically via SML, and will create a WordPress user on the spot, pulling the name, email, etc from JumpCloud to create them a brand new corresponding account on your site. This removes a lot of hassle for you!
Under the Premium Features tab there are a lot of options, and they are as follows:
-
Role Mapping (Groups – Roles) – Map JumpCloud attribute “groups” to WordPress roles. One per line with a specialised format you can see exampled there for you.
-
Allowed Groups – Can leave this blank to allow all authenticated users.
-
Administrator, Editor, Author, Contributor, Subscriber – these are all the URL for these roles.
-
Default – You can also choose this URL for all other users.
-
Log Retention (Days) – This cites the number od ays that audit logs will be kept. You can put 0 to keep the log from starting.
-
Recent Activity – You can view your recent activity here.
SCIM Provisioning Tab – In order to use the SCIM Provisioning, you WILL need to upgrade to premium.
-
Enable SCIM Provisioning – This will allow JumpCloud to automatically create, update, and deactivate users.
-
SCIM Bearer Token – Use this Bearer Token in JumpCloud to authenticate SCIM requests.
This is premium only even though you can see the tab there. When you have stepped your game up to Premium level and you finish setting this up, you will find that JumpCloud pushes changes in real-time: auto creates WP users when added in JumpCloud, updates profiles (email/name/etc.) if edited, and deactivates/deletes accounts when someone leaves making sure there are no more zombie users!
This removes a lot of headaches and allows more versatile login capability with some amazing security.
This plugin is pretty awesome as a free plugin, giving you everything you absolutely need – secure SSO and auto first-login user creation included; once you boost yourself up to premium you will receive the ability to have role control, redirects, logs and true SCIM sync.
This plugin is lightweight – surprising really considering everything it does! – and it appears to play well with others.
Quick note: This plugin should work well with WordPress multi-user plugins/sites such as Ultimate Member, BuddyPress, MemberPress, or Paid Memberships Pro for example, and WooCommerce does not seem to cause an issue either.
Seems to work perfectly well on Elementor, and I could not find anything in my quick search to see if there is a well known builder it does not work with.
If JumpCloud is something you already use, I highly recommend testing this out with the free version, and seeing if it works well for you on your site!
Because this is a Freemium plugin, I rate this at…
Rating: 4 Dragon
Miscellaneous Announcements from all:
Have an announcement like a meetup, or to announce you’ll be on stage at a WordCamp? Let us know and we will add it here and help get your news out to the world!
WordPress Campus Connect Jinja, Easter Region, Uganda – October 1-February 28
WordPress Campus Connect Ribera del Duero – January 30-June 17
WordPress Campus Connect Universitat de Lleida – February 18-May 1
WordPress Campus Connect Escola Pia Mataro – February 18-19
WordCamp Port Harcourt – February 21
To see the entire list you can follow the link here in the show notes, then click on ‘More WordCamps’ right below the list of the next 5. https://central.wordcamp.org/
If you are interested in finding a WordPress Meetup somewhere around the world you can go check out the places here: https://www.meetup.com/pro/wordpress/
Keep checking back every week to find out what else is going on!
V for V for the show
If this show saves you time, headaches, or helps level up your WordPress game, or if we have showcased a plugin you never knew you needed that wound up saving you hours of time – go out and plug people in!
Consider giving back through our V4V model: Time, Talent, or Treasure (or all three!). Head over to our site wppluginsatoz.com.
Click on the ‘Treasure Donations’ link on the left-hand menu, or on the ‘Time, or Talent‘ pages to find out more!
This show is supported by the V4V plan which means Time, Talent or Treasure.
How to Support the Show
Submit your art work or the best AI slop you can create submit it here https://wppluginsatoz.com/submit-plugin-review/
Donate Cash to the show this is our favourite way to get support
Book yourself an interview, https://wppluginsatoz.com/book-an-interview-on-wp-plugins-a-to-z-podcast/
Get us to make your announcement for you, let the world know you have something to say or a company worth checking out!
Today’s Plugins we covered were:
John’s Plugin:
Podcast Player – Your Podcasting Companion By Veda
-
Provides seamless and convenient way for viewers to listen
-
can do so from any page of website
-
Easy to use
Rating: 5 Dragons
Amber’s Plugin:
SSO JumpCloud – Enterprise SAML & SCIM By Airton Vancin Junior
-
Easy Setup
-
Automatic User Creation
-
Developer Friendly
Rating: 4 Dragon
How to reach us:
Feel like sending us something through the snail mail system? You can do that thanks to our brick and mortar address that we provide for you!
You can also reach us the more common way of the internets – have both of our internets available down below for ya!
Brick & Mortar Address
WP Plugins A to Z
C/O John Overall
20-754 E Fairview Rd.
Victoria, BC V9A 5T9
Canada
Internets Addresses
John:
-
My website: http://www.johnoverall.com/
-
WordPress Emergency Support: http://wppro.ca/wpemergency
-
email: john@wppro.ca
Amber:
-
email: amber@wppro.ca
Q & A Time with Amber – Catch this info on our YouTube Channel
If you have questions you would like to have asked on the show, send them in to me at Amber@WPPro.ca – !
-
When running a podcast from your WordPress site, what are the features you want to look for in a podcast plugin – or does it change based on your podcasting needs?
-
What are some warning signs in a podcast plugin that you want to keep an eye out for, letting you know that this podcast plugin may not be either totally legit, or totally truthful about what it offers?
Questions asked after closing credits:
-
A lot of people are using Google to sign into things these days, myself included. Do you think using a login from company A to sign up with company B is a good/safe idea?
-
What’s the worst password related mess you have had to deal with, and what advice would you give our 9 listeners out there so that they hopefully don’t have to deal with this as well?