Thinking behind the decisions

Security & Resilience

WordPress security update: close CVE-2026-63030 now

An urgent security update is available for WordPress 6.9.x and 7.0.x. CVE-2026-63030 is included in CISA's current catalog of known exploited vulnerabilities. Affected installations should move to a fixed version immediately. Is your WordPress version affected? The affected releases are WordPress 6.9.x before 6.9.5 and WordPress 7.0.x before 7.0.2. This includes WooCommerce sites running on […]

3. September 2026

DE

WooCommerce & Digital Commerce

WooPayments reconciliation: resolve refund and payout differences faster

When an order, payment, refund and payout do not agree, teams can lose hours searching across the shop, payment service and accounts. A clear reconciliation process connects the available records, reveals differences and shows who should take the next step. An order can be complete in the shop while the related payout shows a different […]

22. August 2026

DE

Website Operations & Decision-Making

WordPress 7.1: separate visibility, permission and ownership

New WordPress Abilities can make functions discoverable to REST, MCP and AI integrations. Before rollout, website owners need a clear decision about what may be visible, who may execute it and who is accountable for its business purpose. A visible capability is not the same as an authorised action. This distinction matters when WordPress describes […]

20. August 2026

DE

Accessibility & Compliance

Accessibility as release quality: make WordPress changes testable

New templates, forms and content components should not be approved on appearance and function alone. Clear test evidence makes accessibility a dependable part of the release decision. A WordPress change can work technically while still excluding readers. Unclear focus, a faulty heading sequence or a confusing error message may only become visible after launch. A […]

19. August 2026

DE

Website Operations & Decision-Making

Testing WordPress 7.1: My Practical Pre-Update Check

A WordPress update is only ready for a live website once I know the everyday work in the dashboard still runs smoothly. That is why I test WordPress 7.1 on a staging copy first. I am not trying to examine every technical change. I focus on the tasks that editors and website owners depend on […]

18. August 2026

DE

Website Operations & Decision-Making

Control WordPress design changes with theme.json

A shared theme.json can turn brand decisions into visible WordPress rules. The system becomes dependable only when those rules also hold across templates, blocks and the change approval process. A WordPress website can look consistent even when its design rules have started to drift. A new colour appears in one template, spacing changes elsewhere, and […]

17. August 2026

DE

Security & Resilience

WordPress backups: Confidence starts with a tested restore

Having a backup is not proof that recovery will work. Only a controlled test shows whether the database and files match, can be found and can be restored in an isolated environment. A notification that today's WordPress backup completed can feel reassuring. During an incident, however, it does not answer the question that matters: Can […]

16. August 2026

DE

Performance & Technical Quality

More technology does not automatically make your WordPress site better

A large number of WordPress plugins is not automatically a problem. Risk grows when extensions no longer have a clear purpose, an owner or a maintenance plan. That is when dependencies, costs and uncertainty begin to accumulate.

15. August 2026

DE

Website Operations & Decision-Making

WordPress integrations without shared administrator passwords

A modern WordPress site rarely operates on its own. Form submissions move into a CRM. Automation platforms pass information between teams. Reporting tools retrieve data. External services publish content or upload media. These connections become part of everyday operations. Yet many are still set up with credentials created for a person: the administrator account of […]

14. August 2026

DE

Website Operations & Decision-Making

Who should be allowed to publish to your WordPress site?

A decision model for marketing and technical teams Most companies treat production access as a permissions question. Who has an Editor account? Who has Administrator access? Who knows the hosting login? Those details matter, but they come too late in the conversation. The business question is simpler: who is allowed to release a particular change, […]

13. August 2026

DE