Melapress

04/09/2026

How do you usually use the WordPress plugin repository? Search, click install, and you’re done. Behind that simple process is a volunteer team of around 10 active members reviewing roughly 800 new plugin submissions every week.

In this recorded episode of the Melapress Show, Francisco Torres, representative of the WordPress Plugins Team, joins Robert Abela to explain exactly what happens between submission and approval, and what it takes to keep a repository of 70,000+ plugins secure and compliant.

02/09/2026

Wall of Security Stories has launched! ⚡

Behind every security statistic is a story from someone who experienced a real incident.

That’s why we created the Wall of Security Stories.

It’s a collection of first-hand accounts from web professionals who have experienced real security incidents, covering the disruption, recovery efforts, financial impact, lost time, and lessons that came afterward.

🔐 Explore all stories:
https://melapress.com/security-stories/

And if you’ve experienced a security incident yourself, we’d love to hear your story.

01/09/2026

Behind every plugin in the WordPress.org repository is a review process most site owners never see, run almost entirely by volunteers.

In this recorded episode of the Melapress Show, Francisco Torres, representative of the WordPress Plugins Team, joins Robert Abela to explain exactly what happens between submission and approval, and what it takes to keep a repository of 70,000+ plugins secure and compliant.

🎙️Guest: Francisco Torres, Representative, WordPress Plugins Team
🎙️Hosted by the Melapress Show, expert conversations on WordPress, security, and open-source business realities with Robert Abela.

🎬 Watch the full episode this Thursday👇

In this recorded episode of the Melapress Show, we're joined by Fra...

31/08/2026

There's a clear signal that it's time to bring on your first hire. Josh Hall, founder of Web Designer Pro, explains that if you're mostly reacting instead of marketing your business or working on growth, that's the moment. Once you're too busy delivering client work to bring in new customers, it's time to get help.

👉 Watch the full episode: https://www.youtube.com/watch?v=1kFhF2wF1f0

29/08/2026

One hour of monthly support was the single biggest seller in Josh Hall's maintenance plan.

Josh, founder of Web Designer Pro, explains how offering to be "in your corner every month" for small requests like copy tweaks or team changes made clients feel covered. Even with 75+ active projects, he found that 90% of clients rarely used their hour, making the offer far less time-consuming than it sounds.

👉 Watch the full episode: https://www.youtube.com/watch?v=1kFhF2wF1f0

27/08/2026

Giving clients full admin access is one of the easiest ways for a site to go down. Josh Hall, founder of Web Designer Pro, explains why limiting client access is worth setting up from day one.

👉 Watch the full episode: https://www.youtube.com/watch?v=1kFhF2wF1f0

25/08/2026

Do you know what your shop managers are changing in your WooCommerce orders? 🛒

An agency owner shared a case where one of his clients noticed suspicious orders with 100% discounts. Once activity logging was in place, the store owner could see which shop managers were making changes and review activity across accounts and orders.

Having a clear record of user, order, and store activity made it much easier to understand what was happening and address the problem.

🎥 Thank you, Eduard Doloc, for sharing such a practical WooCommerce use case with us.

24/08/2026

Last week at WordCamp US, our CEO and founder, Robert Abela, gave a talk about session hijacking, stolen cookies, and the blind spot in WordPress security.

In this session, Robert covered:
- How WordPress authentication works
- How WordPress sessions work and why session cookies matter
- User practices and vulnerabilities that can lead to session hijacking
- The lack of post-login visibility that can create a blind spot in WordPress security
- Practical ways to improve visibility and better protect logged-in WordPress users

If you manage WordPress users, client sites, or security at scale, this recorded session is worth watching to better understand where session security fits into your overall WordPress security strategy.

🎥 Watch Robert’s full WordCamp US session:
https://www.youtube.com/watch?v=z5_hxy2ET8Y

23/08/2026

Clients installing untested plugins can quickly turn into a support nightmare. Josh Hall, founder of Web Designer Pro, shares a contract clause every agency should have: if a client installs a plugin outside your vetted tool stack, you're not liable for the fallout. It protects you when a site slows down, breaks, or gets hacked after a client adds unvetted plugins on their own.

👉 Continue watching the full episode: https://www.youtube.com/watch?v=1kFhF2wF1f0

21/08/2026

Vibe-coded plugins are becoming a real liability for web designers running maintenance plans. Josh Hall, founder of Web Designer Pro, explains why every agency offering recurring revenue plans needs a clear AI policy. He breaks down what to disclose to clients, including which AI tools you use and what you will and won't support, especially untrusted DIY plugins built without testing or security checks.

👉 Watch the full episode: https://www.youtube.com/watch?v=1kFhF2wF1f0