All Three CCMS Plugins Are Now Live on WordPress.org
CCMS CSV Search, Commerce Controls, and No-Rate Checkout Block are now available on WordPress.org. Here is what each plugin does and how to try it.
KNOWLEDGE BASE
ALL ARTICLES
Technical writing on Claude AI MCP connectors, PHP development, WooCommerce, storage billing systems, reverse engineering, and cybersecurity. 161 articles and counting.
I Built a WooCommerce Plugin to Stop Installing Six Small Ones
Decimal quantities, quantity rules, a checkout field editor, guest registration, a My Account editor, performance cleanup - one free plugin instead of the…
Why I Didn't Put the CSV in a Database Table
A free WordPress plugin that turns a CSV into a searchable page with one shortcode - no import step, no database table, and a private file folder with an NGINX…
No Shipping, No Checkout: Why "Remove the Shipping Zone" Isn't Enough
Excluding a shipping zone doesn't stop checkout - a fallback rate or a gap in the block still lets the order through. Why I built a free plugin that…
Unauthenticated PHP Object Injection in Ajax Search Lite Actively Exploited (CVE-2026-28139)
CVE-2026-28139 is a CVSS 9.8 unauthenticated PHP Object Injection flaw in Ajax Search Lite (4.14.4 and earlier), now confirmed actively exploited. With 80,000+…
Adobe Commerce and Magento Under Active Attack: Customer Account Takeover via CVE-2026-71362
Adobe patched CVE-2026-71362 (CVSS 9.1) in its August 2026 update - a critical incorrect-authorization flaw that lets unauthenticated attackers hijack any…
VMware vCenter Actively Exploited: Directory Traversal to RCE Hits 361 Victims in 47 Countries (CVE-2026-59310)
Threat actors are actively exploiting CVE-2026-59310 (CVSS 9.8), a critical directory-traversal flaw in VMware vCenter enabling arbitrary code execution.…
WordPress 7.0.4 Emergency Security Release: Authenticated RCE via Imagick and Ghostscript (CVE-2026-65640)
WordPress 7.0.4 patches CVE-2026-65640, a high-severity authenticated remote code execution vulnerability. On servers running both Imagick and Ghostscript, any…
SAP Commerce Cloud CVSS 10 Flaw Lets Unauthenticated Attackers Execute Arbitrary Code — CVE-2026-58231
SAP's August 2026 Patch Day includes CVE-2026-58231, a CVSS 10.0 flaw in SAP Commerce Cloud's Data Hub Adapter that lets unauthenticated attackers execute…
SharePoint Pre-Auth RCE Chain Is Now Complete: CVE-2026-63520 Closes the Loop
Rapid7 has disclosed CVE-2026-63520, an unsafe .NET type instantiation flaw in SharePoint's Business Connectivity Services that completes a two-CVE pre-auth…
Django Patches Four Vulnerabilities Including High-Severity GeoDjango File Write — CVE-2026-15307
Django 6.0.8 and 5.2.17 fix four CVEs including a high-severity server-side file write via GeoDjango GDALRaster spatial lookups (CVE-2026-15307), two…
Jenkins Patches Critical Deserialization Bypass and Three High-Severity Flaws — CVE-2026-70426
Jenkins 2.576 and LTS 2.568.2 fix a Critical deserialization filter bypass (CVE-2026-70426) in the Remoting library plus three High-severity flaws allowing…