WordPress plugin security now runs on automated checks
WordPress.org has started running the Plugin Check tool on every plugin update, new and existing. A look at what the automated scans catch and how to run the same checks before you upload.
Tag: APIs
Building WordPress AI integrations that avoid lock-in
Tying a WordPress site to one AI provider’s SDK makes switching painful later. This walks through an abstraction layer with per-provider adapters so you can change models without rewriting your core code.
Gutenberg 22.1 adds a tabs block and a better HTML block
Gutenberg 22.1 ships a native tabs block and an HTML block that can carry its own CSS and JavaScript. Here is what that means for custom code and how it cuts down on extra plugins.
How to secure a WordPress AI integration
A hardcoded AI API key in front-end JavaScript is a security hole and a performance drag. This shows how to move the calls to a WordPress server-side proxy using the REST API and wp_remote_post.
How the WordPress 6.9 Abilities API affects custom roles
A client’s custom roles suddenly locked users out after WordPress 6.9 shipped its Abilities API. The fix was to register capabilities and map_meta_cap the way core now expects, not to brute-force add_cap calls.
WordPress AI integration without the hardcoded mess
How to add AI to a WordPress site with the WordPress AI Client SDK instead of hardcoded API keys and provider-specific code. Covers setup, credentials, and generating text.
Why AI integrations in WordPress break after launch
Why AI integrations in WordPress often break after launch, and how a wrapper layer, caching, and proper error handling keep them stable when the underlying APIs change.
How to prepare for the Core AI table at WordCamp US
A prep checklist for the Core AI table at WordCamp US Contributor Day: the AI Building Blocks, the main project repos, and the Slack channel, so you can build instead of getting your bearings.
Designing granular WordPress abilities for AI
Wiring an AI into WordPress through generic CRUD endpoints got confusing and risky fast. Breaking actions into separate, per-post-type abilities with clear permissions gives the AI the precision it needs.
How to read WordPress Core’s monthly reports
A practical look at the monthly WordPress Core reports: what releases, component activity, and contributor counts actually signal, and how to turn them into decisions for your own projects.