How 288 Product Variations Brought a WooCommerce Admin to Its Knees
· 9 min read
Diagnosing why a WooCommerce store's product edit screen took 40 seconds to load — and the database, AJAX, and caching fixes that cut it to under 3.
Blog
Technical deep-dives from real client work. How I diagnosed, fixed, and prevented WordPress issues.
WooCommerce 11.0 Broke a Client's Prices — How Product Object Caching Silently Serves Stale Data
· 12 min read
How I traced wrong WooCommerce prices to the new product object cache in WooCommerce 11.0 conflicting with a plugin that writes prices via raw SQL.
How a Carding Bot Burned Through 3,000 Stolen Card Numbers on a Client's WooCommerce Checkout
· 15 min read
A WooCommerce store got hit by a card testing attack overnight. Here's how I stopped it, cleaned up, and what I now configure on every store to prevent it.
WordPress Multisite Batch Operations Crashed PHP-FPM — The switch_to_blog() Memory Leak
· 12 min read
How switch_to_blog() silently leaks memory in WordPress Multisite loops, crashing PHP-FPM workers — and how to fix it with WP-CLI process isolation.
WordPress 7 Block Editor Shows a Blank Canvas — How to Fix CSP Headers for the Iframed Editor
· 9 min read
If your WordPress 7 block editor loads the sidebar but shows a blank canvas, your Content Security Policy is blocking the blob: iframe.
WordPress Behind Cloudflare or a Reverse Proxy — Why Every Visitor Had the Same IP Address
· 19 min read
How I restored real visitor IPs on WordPress behind Cloudflare — fixing broken fail2ban, Wordfence lockouts, and wrong WooCommerce geolocation.
Why Your WordPress Auto-Updates Silently Stopped Working
· 9 min read
How to diagnose and fix a stuck WordPress auto-update lock that leaves sites silently missing security patches.
ModSecurity Was Silently Rejecting WooCommerce Checkout Requests — How I Traced the 403s to Firewall Rules
· 9 min read
Diagnosing 403 errors on WooCommerce checkout and WordPress admin caused by ModSecurity false positives, and fixing them without disabling the WAF.
How I Found 23 PHP Backdoors in a WordPress Uploads Directory — And the Nginx Rule That Would Have Blocked Every One
· 11 min read
A routine audit uncovered 23 PHP shells in wp-content/uploads. Here's how they got there, how I cleaned them, and the server config that prevents it.
wp2shell: Patching a WordPress Core RCE (CVE-2026-63030) Across 70+ Sites in 48 Hours
· 18 min read
How I triaged, patched, verified and cleaned up 70+ WordPress sites after the wp2shell pre-auth core RCE (CVE-2026-63030). The full incident-response record.
WordPress 6.9 Broke Email Delivery — The Envelope Sender Change That Silently Killed WooCommerce Emails
· 7 min read
How a one-line change in WordPress 6.9's wp_mail() broke email delivery on servers using PHP mail(), and how I fixed it for clients.
WordPress Search Was Quietly Killing a WooCommerce Store's Database
· 14 min read
A WooCommerce store with 8,000 products had MariaDB grinding to a halt every afternoon. The root cause was WordPress's default search running full table scans.
When a WooCommerce Staging Clone Starts Charging Real Customers
· 12 min read
How a cloned staging site processed live Stripe payments, sent real customer emails, and ran subscription renewals — and how to prevent it.
How the Performance Lab Plugin Silently Killed Redis on a Client's WooCommerce Store
· 10 min read
WordPress's own Performance Lab plugin quietly replaced object-cache.php, disabling Redis without any error. Here's how I found it and fixed it.
WooCommerce 10.9 Broke wp-admin on Two Client Stores — Why I Never Auto-Update .0 Releases
· 8 min read
How I recovered two WooCommerce stores from the 10.9 fatal error and the gated update workflow I use to stop it happening again.
PHP OPcache JIT Was Crashing PHP-FPM Workers and Causing Random 502s on a WordPress Server
· 11 min read
How I traced intermittent 502 Bad Gateway errors to OPcache JIT segfaults, and why JIT is almost never worth enabling on WordPress.
How Wrong File Ownership Silently Broke Auto-Updates, Plugin Installs, and Uploads After a Server Migration
· 8 min read
After a server migration, WordPress auto-updates stopped, plugins wouldn't install, and uploads failed. All three traced to one file ownership mistake.
How 47,000 Expired Transients in wp_options Brought a WooCommerce Store to Its Knees
· 12 min read
Expired transients piled up in wp_options and added seconds to every page load. Here's how I diagnosed the bloat and automated the cleanup.
Fixing 'Illegal Mix of Collations' After Migrating a WordPress Site to a New Server
· 14 min read
How I fixed 'Illegal mix of collations' errors that broke WooCommerce search after server migrations — diagnosis SQL, bulk conversion, prevention checklist.
Gravity SMTP Leaked Every API Key on the Server — How I Responded to CVE-2026-4020
· 11 min read
How I checked 70+ WordPress sites for the Gravity SMTP vulnerability that exposes email API keys to unauthenticated attackers.
How 847,000 Post Revisions Turned a WordPress Admin Dashboard Into a 12-Second Ordeal
· 12 min read
A WordPress site had 847K revisions in wp_posts. Here's how I found the bloat, cleaned it safely with WP-CLI, and stopped it coming back.
How I Traced 23 Missing WooCommerce Orders to a Broken Stripe Webhook
· 14 min read
Diagnosing WooCommerce orders stuck on pending payment when Stripe webhooks silently fail — signing secret mismatches, endpoint errors, and how to recover.
What Broke When I Upgraded 70+ Sites to WordPress 7.0
· 8 min read
Three issues I hit upgrading to WordPress 7.0 Armstrong — blocked database updates, broken admin columns, and WooCommerce styling.
Your WordPress debug.log Is Publicly Accessible — Here's What It's Leaking
· 10 min read
How a forgotten debug.log exposed database credentials and session cookies on a production WooCommerce store, and how to lock it down permanently.
AI bots are hammering your WordPress REST API — how I rate limit /wp-json/ with Nginx
· 15 min read
How I traced three WordPress slowdowns to bots flooding /wp-json/, and the Nginx rate limiting, Fail2Ban and WordPress fixes that stopped them.
Nginx 502 Bad Gateway on WooCommerce — When Response Headers Outgrow the Buffer
· 8 min read
Diagnosing and fixing the nginx 'upstream sent too big header' error on WooCommerce stores caused by cookie and session bloat.
Using the PHP-FPM Slow Log to Find What's Actually Slowing Down WordPress
· 9 min read
How to enable, read, and act on the PHP-FPM slow log to pinpoint the exact plugin or function dragging your WordPress site down.
How a Cache Stampede Took Down a WooCommerce Store During a Flash Sale
· 12 min read
A single update_option() call invalidated the alloptions cache, triggering a thundering herd that overwhelmed MariaDB. Here's how I diagnosed and fixed it.
InnoDB buffer pool sizing for WooCommerce: too small starves your server, too big gets MariaDB killed
· 16 min read
A 128MB buffer pool crippled a 16GB VPS. A 2GB pool got MariaDB OOM-killed on a 4GB VPS. How I size the InnoDB buffer pool to the actual working set.
Why Your Let's Encrypt Certificate Stopped Renewing — The Six Failures I Fix on WordPress Servers
· 12 min read
How I diagnose and fix silent Let's Encrypt renewal failures on WordPress VPS setups, from nginx misconfigs to Cloudflare redirects.
Why a WooCommerce Store Was Showing Wrong Prices — Tracing a Lookup Table Desync After a Bulk Import
· 11 min read
A WooCommerce store's prices were wrong on listings and sort-by-price was broken. The cause: a desynced wp_wc_product_meta_lookup table after a CSV import.
How Three WooCommerce Stores Went Down Overnight Because Certbot Stopped Renewing
· 8 min read
Three WooCommerce stores lost SSL overnight. The cause: a certbot renewal cron that vanished during a server migration three months earlier.
WooCommerce Sessions Table Bloat — 180,000 Expired Rows Killing Checkout
· 9 min read
How I diagnosed a WooCommerce checkout slowdown caused by a bloated sessions table with 180,000 expired rows and a missing database index.
How a 4GB WooCommerce Sessions Table Was Deadlocking Checkout on Every Cleanup Run
· 10 min read
A WooCommerce store's checkout kept locking up twice a day. The cause: a sessions table with 69,000 expired rows and no index on session_expiry.
WooCommerce Block Checkout Silently Broke Our Tracking — How I Found and Fixed It
· 9 min read
How WooCommerce's block checkout migration silently kills GA4, GTM, and Meta Pixel tracking — and the server-side fix that restores it.
How a Flash Sale Deadlocked MariaDB — Diagnosing WooCommerce Stock Reduction Lock Contention
· 10 min read
A WooCommerce flash sale caused database deadlocks during stock reduction. Here's how I diagnosed the InnoDB lock contention and stopped orders from failing.
Cloudflare Cache Everything Rule Was Serving Cached WooCommerce Cart Pages
· 8 min read
How I diagnosed a WooCommerce store where Cloudflare's Cache Everything page rule was caching cart and checkout pages, causing empty carts and stale data.
How I Cleaned Up 8 Million Orphaned Rows Choking a WooCommerce Database
· 9 min read
A WooCommerce checkout slowed to 12 seconds. The cause: 8 million orphaned rows in wp_postmeta. Here's how I cleaned and indexed it.
How to Fix 'Briefly Unavailable for Scheduled Maintenance' in WordPress
· 11 min read
Fix the stuck WordPress maintenance mode error by deleting .maintenance, plus how to prevent it from happening again.
WordPress Speculative Loading Is Firing Your Tracking Pixels on Pages Nobody Visited
· 12 min read
How WordPress 6.8's speculative loading silently inflates your Meta Pixel, TikTok, and LinkedIn analytics — and four ways to fix it.
Why 'Allowed Memory Size Exhausted' Keeps Crashing Your WordPress Site — And How I Actually Fix It
· 10 min read
The WordPress memory exhausted error has deeper causes than most guides cover. Here's how I diagnose and fix the real problem instead of just raising the limit.
PHP OPcache Misconfiguration — Why Your WordPress Site Slows Down After Updates
· 11 min read
How to diagnose and fix PHP OPcache misconfigurations that cause WordPress slowdowns, stale code after updates, and random cache resets.
How I Traced 100,000 Failed Logins to a Single xmlrpc.php Exploit — And Shut It Down in Minutes
· 12 min read
WordPress xmlrpc.php lets attackers try thousands of passwords in one request. Here's how to detect and block XML-RPC brute force attacks at the server level.
Why Your WordPress Admin Dashboard Is Slow — A Systematic Diagnosis Guide
· 12 min read
How I diagnose a slow WordPress admin using Query Monitor, WP-CLI, and slow query logs to find the actual bottleneck instead of guessing.
Why Your WordPress Server Ran Out of Disk Space — The Six Places I Always Check
· 11 min read
A systematic guide to diagnosing what's eating disk space on a WordPress server, from runaway logs to forgotten backups and bloated MySQL data.
How I Fix the WordPress HTTP Error When Uploading Images — The Five Causes I Keep Seeing
· 9 min read
The WordPress media upload 'HTTP error' has no useful detail. Here are the five server-side causes I find most often and the exact fixes for each.
Why Your WooCommerce Webhooks Stopped Working — And Nobody Told You
· 12 min read
WooCommerce silently disables webhooks after repeated delivery failures. Here's how to diagnose and prevent silent data loss.
How Attackers Find Your WordPress Admin Username — and How to Stop Them
· 10 min read
Four ways attackers discover WordPress usernames via author archives, REST API, oEmbed, and sitemaps — and exact fixes for each one.
How I Traced Duplicate WooCommerce Orders to a Race Condition Between Webhooks and Checkout
· 13 min read
A WooCommerce store was charging customers twice. Here's how I found three separate causes and the fixes that stopped every one of them.
How I Fix ERR_TOO_MANY_REDIRECTS on WordPress Sites — The Six Causes I See Over and Over
· 10 min read
A systematic guide to diagnosing and fixing WordPress redirect loops, from Cloudflare SSL modes to reverse proxy headers and plugin conflicts.
How I Diagnose WordPress cURL Error 28 — The Timeout That Breaks Everything
· 11 min read
Step-by-step guide to diagnosing and fixing WordPress cURL error 28 connection timeouts affecting Site Health, plugin updates, and WooCommerce.
What to Do When a WordPress Plugin Update Breaks Your Site
· 9 min read
How to diagnose and fix a WordPress site broken by a plugin update using Recovery Mode, WP-CLI rollback, SFTP, and safe update practices.
How I Traced a WordPress Redirect Hack Across .htaccess, the Database, and a Hidden Backdoor
· 9 min read
Step-by-step diagnosis and cleanup of a WordPress redirect hack using WP-CLI, grep, and SQL to find malware in .htaccess, wp_posts, and a mu-plugin.
How I Audited 70 WordPress Sites in Under an Hour After the EssentialPlugin Supply Chain Attack
· 13 min read
Step-by-step guide to checking if your WordPress site was compromised by the EssentialPlugin backdoor that hit 400,000+ installs in April 2026.
How I Blocked 50,000 WordPress Login Attacks Per Day with Fail2Ban and Nginx
· 9 min read
Step-by-step guide to stopping WordPress brute force attacks at the server level using Fail2Ban jails, Nginx rate limiting, and XML-RPC lockdown.
Why Your WordPress Emails End Up in Spam — And How to Fix It
· 11 min read
How I diagnosed and fixed a WooCommerce store's emails landing in spam using SMTP, SPF, DKIM, and DMARC. Step-by-step guide.
Diagnosing admin-ajax.php High CPU Usage on WordPress and WooCommerce
· 14 min read
How I traced two servers' CPU problems to admin-ajax.php — Heartbeat tuning, WooCommerce cart fragments, rogue plugins, and nginx rate limiting.
How a Slow Carrier API Quietly Turned a WooCommerce Checkout Into a 504 Factory
· 15 min read
A WooCommerce store hit 504 Gateway Timeouts at checkout. The cause was a blocking shipping rate API call. Here is how I found and fixed it.
Nginx FastCGI Cache for WooCommerce Without Breaking the Cart
· 17 min read
Two WooCommerce stores served customers each other's carts because nginx cached session cookies. The fastcgi_cache config I now use on every client site.
How a SQL Find-Replace Broke 847 Pages on a WooCommerce Site — Fixing Serialized Data After Migration
· 12 min read
A hosting provider used sed on a SQL dump to change domains. It corrupted every serialized value in the database. Here's how I diagnosed and repaired it.
Error Establishing a Database Connection: Two MariaDB Failures, Diagnosed and Fixed
· 13 min read
Two real MariaDB incidents behind WordPress's database connection error: connection exhaustion mid-sale, and an upgrade that took down 47 sites.
Upgrading PHP Across WordPress Sites Safely: 30 Sites, Real Breakages, and a Forced 8.4 Upgrade
· 13 min read
How I batch-upgraded 30 WordPress sites from PHP 8.1 to 8.3, plus containing a forced PHP 8.4 upgrade that flooded 14GB of deprecation logs.
When Redis Object Cache Silently Drops Keys — Diagnosing Memory Eviction on a WooCommerce Store
· 10 min read
How I diagnosed a WooCommerce store where Redis was 'working' but silently evicting keys, causing random slowdowns and stale data.
How I Traced a Data Leak Between Two WordPress Sites to a Redis Cache Key Collision
· 9 min read
Multiple WordPress sites sharing one Redis instance can silently leak data between each other. Here's how I diagnosed and fixed it.
WP-Cron Failures on WooCommerce: Missing Emails, Failed Renewals, and the System Cron Fix
· 13 min read
How I traced missing WooCommerce emails and failed renewals to broken WP-Cron, cleared 4,200 stuck scheduled actions, and replaced it with a system cron.
WooCommerce Action Scheduler bloat: how I reclaimed 14GB and fixed 30-second page loads
· 13 min read
Action Scheduler tables grew to tens of millions of rows on two WooCommerce stores. The batched cleanup and retention filters that fixed both.
How 12MB of Autoloaded Options Were Adding 3 Seconds to Every Page Load
· 8 min read
A WordPress site was loading 12MB of abandoned plugin data on every request. Here's how I found the bloat in wp_options and cut page load times in half.
How I migrated a 40,000-order WooCommerce store to HPOS — and what silently breaks when it goes wrong
· 17 min read
Step-by-step HPOS migration for a large WooCommerce store, plus the silent failures — broken tracking, corrupted customer lookup — I've cleaned up after.
WordPress security updates broke thousands of sites — here's what happened and how to protect yours
· 6 min read
WordPress 6.9.2 security patch caused white screens across thousands of sites. Why it happened and how maintenance plans prevent the damage.
The WordPress white screen of death — what it is, how to fix it, and how to stop it happening
· 8 min read
A practical guide to diagnosing and fixing the WordPress white screen of death, from a developer who deals with it regularly.
Why 83 PayPal Subscriptions Silently Failed — A WooCommerce PPCP Vaulting Investigation
· 5 min read
Investigating why 83 PayPal subscription renewals were failing in WooCommerce. The root cause: the PPCP plugin never successfully stored vault tokens for any subscription.
WooCommerce Database Meltdown — From 376-Second Queries to Under 1 Second
· 6 min read
How I diagnosed and fixed a WooCommerce database crisis where MariaDB was consuming 1479% CPU with queries running for 376 seconds. The root cause was a transient race condition.
How I Cleaned a Cryptominer with 14 Persistence Mechanisms
· 5 min read
Discovering and removing a sophisticated cryptominer from a Linux server that used 14 different persistence mechanisms including systemd services, cron jobs, and immutable file attributes.
PHP-FPM Worker Exhaustion — When a DDoS Kills Your Database
· 6 min read
How too many PHP-FPM workers caused MariaDB to be killed by the OOM killer. The math behind pm.max_children and a formula for getting it right.
Bulk Updating Alt Text for 2,846 Images with WP-CLI
· 9 min read
How I used WP-CLI to automatically generate and apply meaningful alt text to 2,846 images on a WooCommerce site, handling edge cases like size suffixes and generic filenames.
CloudPanel Server Hack — How an Attacker Created an Admin Account
· 7 min read
Investigating a CloudPanel server compromise where an attacker created an admin user via clpctl. Tracing the attack through auth.log, checking for backdoors, and hardening the server.
WordPress Shipping Rate Calculation in Background Jobs — The Missing Session Problem
· 12 min read
Solving the challenge of calculating WooCommerce shipping rates programmatically in Action Scheduler background jobs where WC()->session doesn't exist.
LiteSpeed Guest Optimization vs Splash Screens — Fixing FOUC
· 6 min read
How LiteSpeed's Guest Optimization CSS handling caused a flash of unstyled content on sites with splash screens, and the settings adjustments that fixed it.
Stop Firefighting. Start Maintaining.
I manage 70+ WordPress sites for agencies and businesses. Whether you need ongoing maintenance, emergency support, or a one-off performance fix — I can help.
View Maintenance Plans Get in TouchGet in Touch to Discuss Your Needs
Your message has been sent successfully. We'll get back to you shortly.
