The Signals That Tell Google and Bing Your Content Is Good
Which quality signals are documented, which are inference, and which are myths worth dropping - plus the monthly Search Console loop that replaces an agency…
KNOWLEDGE BASE
ALL ARTICLES
Technical writing on Claude AI MCP connectors, PHP development, WooCommerce, storage billing systems, reverse engineering, and cybersecurity. 148 articles and counting.
WordPress Core Pre-Auth RCE (wp2shell): Update Every 6.9 and 7.0 Site Now — CVE-2026-63030
WordPress Core 6.9.0–6.9.4 and 7.0.0–7.0.1 are vulnerable to a pre-authentication RCE chain that requires no login, no plugins, and no special configuration.…
Gravity Forms ≤ 2.10.4: Unauthenticated Arbitrary File Read via Directory Traversal — CVE-2026-12997
Gravity Forms 2.10.4 and earlier allow an unauthenticated attacker to read any file the web server process can access — including wp-config.php and .env — and…
Use Codex to Fix Your Own Technical SEO (Schema, Speed, and Sitemaps)
Structured data, entity consistency, and Core Web Vitals are the work agencies billed a retainer for. A coding agent puts most of it within reach - and here is…
Google's June 2026 Spam Update: What Site Owners Need to Know About AI Manipulation Rules
Google's June 24-26 spam update enforced a May 2026 policy change that explicitly classifies AI citation manipulation as spam. Here's what changed, who it…
AI Overviews Cut Organic CTR by 61%: What the Data Shows and How to Get Cited
AI Overviews now appear on up to 64% of Google searches and have cut organic CTR by as much as 61% on affected queries. Here's what the 2026 data shows and the…
NGINX Heap Buffer Overflow Could Enable Code Execution: CVE-2026-42533 and Two Companion Flaws
F5 shipped three out-of-band NGINX patches on July 15, 2026, alongside the 1.31.3 mainline release. The headline flaw, CVE-2026-42533, is a heap buffer…
Adobe ColdFusion Gets Second July Patch Wave: 8 Critical CVEs Including CVE-2026-48318 Path Traversal (CVSS 9.9)
Adobe shipped a second Priority 1 ColdFusion advisory in two weeks, fixing 13 flaws - eight of them Critical. The lead bug, CVE-2026-48318, is a path traversal…
A 15-Minute Weekly Google Business Profile Routine (With Claude)
What profile posts do and do not do for local rankings, plus a fifteen-minute weekly routine for updates, Q and A, and review responses - and the parts you…
SharePoint Hidden RCE Setup: CVE-2026-55040 JWT Authentication Bypass
Microsoft patched CVE-2026-55040 on July 14, 2026 - a SharePoint Server flaw that lets an unauthenticated attacker forge JWT tokens and impersonate any user,…
SonicWall SMA 1000 Zero-Days Actively Exploited: CVE-2026-15409 (SSRF, CVSS 10.0) and CVE-2026-15410 (Code Injection, CVSS 7.2)
SonicWall confirmed that two zero-day flaws in SMA 1000 remote access appliances are under active exploitation. CVE-2026-15409 is a CVSS 10.0 unauthenticated…
Google Warns: A/B Tests With Big Differences Can Change Your Search Rankings
John Mueller of Google confirmed that A/B tests serving significantly different content to visitors can affect which version Google indexes and how it ranks.…