Who Is Sending Email as Your Business Domain?
Your website, newsletter platform, CRM, and support desk may all send email as your domain. Here is how to inventory those senders and compare them with what…
KNOWLEDGE BASE
ALL ARTICLES
Technical writing on Claude AI MCP connectors, PHP development, WooCommerce, storage billing systems, reverse engineering, and cybersecurity. 164 articles and counting.
Start With a DNS Check Before Changing Your Email Setup
Before you change anything, look at what is actually published. The free DMARCsimple DNS checker is a practical starting point for reviewing your domain's SPF,…
Why I Built DMARCsimple: Email Authentication Should Be Understandable
Email authentication records are technical and the reports are unfamiliar. Here is why I built DMARCsimple by CCMS: to give teams a clearer view of their…
All Three CCMS Plugins Are Now Live on WordPress.org
CCMS CSV Search, Commerce Controls, and No-Rate Checkout Block are now available on WordPress.org. Here is what each plugin does and how to try it.
I Built a WooCommerce Plugin to Stop Installing Six Small Ones
Decimal quantities, quantity rules, a checkout field editor, guest registration, a My Account editor, performance cleanup - one free plugin instead of the…
Why I Didn't Put the CSV in a Database Table
A free WordPress plugin that turns a CSV into a searchable page with one shortcode - no import step, no database table, and a private file folder with an NGINX…
No Shipping, No Checkout: Why "Remove the Shipping Zone" Isn't Enough
Excluding a shipping zone doesn't stop checkout - a fallback rate or a gap in the block still lets the order through. Why I built a free plugin that…
Unauthenticated PHP Object Injection in Ajax Search Lite Actively Exploited (CVE-2026-28139)
CVE-2026-28139 is a CVSS 9.8 unauthenticated PHP Object Injection flaw in Ajax Search Lite (4.14.4 and earlier), now confirmed actively exploited. With 80,000+…
Adobe Commerce and Magento Under Active Attack: Customer Account Takeover via CVE-2026-71362
Adobe patched CVE-2026-71362 (CVSS 9.1) in its August 2026 update - a critical incorrect-authorization flaw that lets unauthenticated attackers hijack any…
VMware vCenter Actively Exploited: Directory Traversal to RCE Hits 361 Victims in 47 Countries (CVE-2026-59310)
Threat actors are actively exploiting CVE-2026-59310 (CVSS 9.8), a critical directory-traversal flaw in VMware vCenter enabling arbitrary code execution.…
WordPress 7.0.4 Emergency Security Release: Authenticated RCE via Imagick and Ghostscript (CVE-2026-65640)
WordPress 7.0.4 patches CVE-2026-65640, a high-severity authenticated remote code execution vulnerability. On servers running both Imagick and Ghostscript, any…
SAP Commerce Cloud CVSS 10 Flaw Lets Unauthenticated Attackers Execute Arbitrary Code — CVE-2026-58231
SAP's August 2026 Patch Day includes CVE-2026-58231, a CVSS 10.0 flaw in SAP Commerce Cloud's Data Hub Adapter that lets unauthenticated attackers execute…