The Plugin That Was Network-Active and Doing Absolutely Nothing
Two plugins on my site were active and doing nothing at all. Here is how to tell whether a plugin is actually working, and what removing one let me close.
security
I Locked Myself Out Testing My Own Brute-Force Protection
I hid my login error messages for security, which also hid my login limiter’s warnings. The only way to know if it still worked was to attack my own site.
Your WordPress Is Publishing Its Admin Username in Five Places
WordPress leaks your admin login through the REST API, author archives, and your own theme’s byline. Here is how to find all five and close them.