
This Week in WordPress #367
11 snips
Feb 24, 2026 Onar Alili, founder of OOP Spam and former cyber security researcher, explains spam trends and open models. Mark Benzercane, MainWP partnerships lead, talks tools and agency workflows. Tim Nash, security consultant, covers WordPress security and privacy. They discuss WordPress 7.0 Beta, collaborative editing, AI’s ecosystem role, open-source model challenges, bot-driven attacks, Cloudflare dominance, and password manager audits.
AI Snips
Chapters
Transcript
Episode notes
Use A Password Manager And Prefer Transparent Options
- Use a password manager and favour transparent/open options you can self-host or inspect.
- Tim recommended Bitwarden, noting their open-source clients and ETH Zurich audit response as responsible transparency.
Small Open TTS Lets Sites Self-Host Audio
- Lightweight open-source TTS models now let sites self-host article audio without third-party dependency.
- Onar pointed to Kitten TTS (≈25MB) as usable for adding accessible article audio on non-shared hosting.
Protect WooCommerce From Residential Proxy Attacks
- Monitor residential IP abuse and harden WooCommerce against credential-stuffing and card-testing attacks.
- Onar's OOP Spam report highlighted growing attacks from compromised home devices and smart TVs targeting WordPress e-commerce sites.
