Release notes,
guides, and journal.
I ship in public. Every release shows up here with its audit trail, every comparison with receipts, every essay with the specific thing I learned. No revolutionary, no supercharged — just the breath WordPress has been holding.
A WordPress plugin that was active and not in the plugin list
A company's terms and privacy pages started answering "No results found". The cause was a plugin WordPress was running and wp-admin was not showing, and one rewrite rule placed ahead of the page rule. How it was found, how it was fixed in about ten minutes without server access, and how to check your own site.
Get the release notes & guides in your inbox.
Ships when I ship. No drip sequences, no digests, no "5 things" lists.
Guide dispatches
16 postsA WordPress plugin that was active and not in the plugin list
A company's terms and privacy pages started answering "No results found". The cause was a plugin WordPress was running and wp-admin was not showing, and one rewrite rule placed ahead of the page rule. How it was found, how it was fixed in about ten minutes without server access, and how to check your own site.
WordPress vulnerabilities, September 2026: the ones on sites people actually run
Thirty-five critical records in twenty-one days. The plugins with real install numbers behind them, the version that fixes each one, the core release nobody should miss, and the one that no version can fix.
Click2Shell and the 17 September WordPress security release (CVE-2026-93485)
The patched release for every WordPress branch back to 4.7, what the reported Click2Shell chain actually needs before it works, why the 9.6 in the headlines is not WordPress's own rating, and the one trace a forced theme install leaves behind.
Admin Menu Editor Pro shipped a backdoor. How to tell whether your site took it.
An attacker reached the vendor's update server and two builds went out with a web shell in them. The files, the directory and the database rows to look for, why the version number cannot clear you, and what to do if you find one.
Elementor Pro 4.2.2 closed an unauthenticated file upload (CVE-2026-32475)
A form with an upload field was enough for anyone to drop a PHP file into your uploads folder. What the flaw needed, which version fixes it, and the folder worth opening on any site that ran 4.2.1 or below.
Managing WordPress through Hermes Agent
How to connect a live WordPress site to Hermes Agent and work on it from the terminal or the desktop app: what goes in ~/.hermes/config.yaml, browser sign-in per site or one server for the whole account, and what the agent can read and change once it is connected.
How an AI agent turns a Figma design into an editable WordPress page
The working path from a Figma frame to a real WordPress page: the agent reads the node tree through Figma’s own MCP server, uploads the frame’s images to your media library, and rebuilds the layout in your builder’s native format. With three conversions you can open and inspect.
How to check and fix wp2shell in WordPress (CVE-2026-60137 and CVE-2026-63030)
The exact affected WordPress versions, what updating does and does not prove, which compromise indicators deserve investigation, and how Respira 8.1 turns a fleet scan into an approval-gated fix and verification receipt.
How to edit your WordPress site from Slack with Viktor
Add your WordPress site or WooCommerce store to Viktor as a custom MCP server and edit it by typing a message in Slack or Microsoft Teams. Step by step, with the exact link to paste, the access levels worth thinking about, and the shared-channel setup for agencies working with clients.
What Respira skills are, and where to find all 37
A skill is a saved, step-by-step recipe your AI follows to do one WordPress job safely, like migrating a page between builders or auditing a site for accessibility. There are 37 today, free on every plan. Here is what they do and every place you can browse and run them.
One account, every site: how multi-site, seats, and upgrades work
Connect many WordPress sites to one Respira account, edit them from a single AI conversation, and the plain-English difference between upgrading your plan and stacking a second one.
Flatsome UX Builder: AI-assisted editing for the #1 WooCommerce theme
Full support for Flatsome UX Builder. Extract, inject, element-level editing, build_page, and snapshots.
How to let AI edit your WordPress site (without breaking it)
Compare Respira, WordPress.com MCP, Elementor AI, CodeWP, Divi AI, and AI Engine across page builder support, safety, rollback, and MCP compatibility.
AI tools for WordPress agencies: what actually works in 2026
Multi-site management, client site safety, page builder coverage, team access controls, and audit logging for WordPress agencies.
The freelance developer's guide to AI-powered WordPress development
How freelancers use Claude Code, Cursor, and Codex with Respira to build client sites faster.
How to use AI to fix WordPress accessibility issues
Automated WCAG scanning, AI-powered fixes, and a practical workflow for delivering accessible WordPress sites.
No matches for ""
Try a builder name (Elementor, Divi, Bricks), a release version (6.0.0), or a concept (snapshots, MCP, CLI).
You're not the only one talking to WordPress.
The Respira community is where agency owners debug Divi migrations at 11pm, where vibe coders swap prompts that actually ship, and where the roadmap gets written out loud. Breathe with us.
From the workshop
Client feedback used to arrive as a screenshot with an arrow drawn on it, or a voice note describing "the blue bit near the top." Respira for WordPress now has a different way. Send your client one link. They open the page, tap the part…
An AI agent doing research got into an Australian Medicare statistics system. Prime Minister Anthony Albanese announced it on 24 September. It happened during the company's own testing. The agent worked around the blocks meant to stop it…
Two WordPress security updates, eleven days apart. If your WordPress site updated on 17 September, it caught the first one. The second, on 22 September, closed a different hole, and that is the one attackers are using right now. So the u…
That afternoon between "the AI gave me a good page" and "the page is live on my site" is now gone. Respira for WordPress has a new tool called Respira Exhale. Drop an HTML file into the dashboard, pick your WordPress site, and the page l…
The stack in the picture works for a marketer who writes markdown. It stops working at the client who needs to change a headline on a Tuesday and has never opened GitHub. That client is why WordPress is still here. Respira for WordPress…
17,061 pages and posts edited by AI on WordPress sites in one week. 3,034 WordPress sites are connected to Respira for WordPress. 142 joined this week. 549 were active. Claude Code handled the largest share of the work. Elementor and Div…