I wanted to post an update on our Paid Memberships Pro business. In the style of other “transparency reports”, I will share real numbers for our business. I will also share some of my current goals and planning for the business. Business is Growing $3,000... (more…)

This article describes why you should not change your WordPress table prefix. It shows how this doesn't improve security at all and is 'security theater'.

Pay What You Want: 2017 WordPress Hero Bundle: A Quarter of Websites Are Powered by WordPress. Here Are 8 Courses to Make You an Expert In It. (more…)

I'm tired of lamenting the state of WordPress security and doing nothing to address it. I'm building solutions to turn the conversation around. (more…)

A non-trivial CSV injection vulnerability was discovered in a popular WordPress plugin called Events Manager v5.9.7.1 (active on 100,000+ websites). This makes the users’ machine vulnerable to remote attackers who can execute arbitrary commands on it. In ... (more…)