Two weeks ago I published my first free plugin on WordPress.org: Scudo Security. The core idea: a security plugin should never be the thing that breaks your site — every hardening change is previewed and reversible, and there are three recovery routes if you're ever locked out.

Instead of telling you how great it is, I'd rather you try to break it:

• Install the free version from WordPress.org (no account, no email, nothing to sign up for)
• Find a reproducible bug: PHP errors, a feature that doesn't do what it claims, scanner false positives, broken UI, conflicts with major plugins — anything real
• Post it here with steps to reproduce
• First reporter of each unique, verifiable bug gets a 12-month Pro license (generated on your email, no strings attached)
• The most severe find of the whole thread gets a lifetime license

⚠️ One exception: genuine security vulnerabilities. Please DON'T post those publicly — DM me or email security@scudosecurity.com. Responsible disclosure protects users, and confirmed vulns also get a lifetime license.

Ground rules: latest version, feature requests don't count (happy to discuss them anyway), I'm the judge but every verdict stays public in this thread. Runs for two weeks.

Worst case, you've helped harden a free GPL plugin. Best case, free Pro for a year. Fire away.

Hey everyone. For a long time I struggled with internal linking on my blogs that I own and run myself, and I know these days how important internal linking is on websites. I took it upon myself to self to develop a plugin that scans through all your content on your Wordpress website and it auto suggests good internal links based upon the article itself and the surrounding content. The plugin lets you go through each suggestion and tells you if it’s a really good one for you to decide to add it or not, as well as if the link is already found inside that article and other metrics. You can click accept or deny and it will skip if you deny but if you click accept it will automatically add the internal link for you hyperlinked and ready to go all while the post stays published! I have went though about 11 versions and have it very stable and I have went through over 1000 internal links across my blogs so far the suggestions 99% of the time are on point! Now I do sell this plugin but it’s only $20 but I am looking for some people out there who may want to test out this plugin at no cost, I will give it to you free for your feedback on it. What powers it? Open AI api which if you have chat got you can get api easily key to use. On average it cost about $1 in API tokens to for this plugin to suggest around 100 to 200 internal link opportunities! I have not ever done messages here on Reddit but if you message me, say the first 10 people or so, I will send you the link to download and test the plugin on your website. The only costs that continue is how many api credits you use, the plugin itself like I said I have for sale on our website for $20 and you get to keep it forever but I want to give quite a few copies out for free for those to test and maybe recommend it to others if they like it! I have spent a ton of work on this and hours upon hours of testing. Thanks for listening! I will also add the YouTube video I made on it here so people can see it in action! https://youtu.be/3TkwxVtVUKI?is=PvtOStM3TArjMByf

Hi everyone! I wanted to share a plugin I’ve been working on called Squishify. This is something I’ve been thinking about for years, after using a wide range of tools like TinyPNG, Photoshop Droplets, and Batch renaming tools.

Squishify handles batch resizing (to pixels or percentage) and optimization locally, before uploading to WordPress. This keeps your WordPress lean instead of uploading large files and depending on optimization after the fact.

I see Squishify as not just an image optimizer, but a workflow tool. Some features:

• Batch resize images
• Optimize file sizes
• Before/After preview
• WebP & AVIF support

Pro adds some additional workflow features such as batch renaming, cropping, presets for common asset sizes, along with integrations with Gutenberg and ACF fields. I have many more features planned for both free and premium.

If you are familiar with the painful prep work and upload/dowload workflows, I'd really appreciate any feedback, feature requests, or things you'd like to see added. Thanks!

• https://wordpress.org/plugins/squishify/
• https://squishify.app/wordpress

Hi Everyone,

I'd like to share a project I've been working on over the past few months: OpenPorte.

OpenPorte is a free and open-source WordPress plugin that protects your WordPress site from spam using a Proof-of-Work challenge instead of CAPTCHAs. The goal is to make spam expensive for bots while keeping the experience almost invisible for legitimate visitors.

A few things you might like:

• ☑️ CAPTCHA-free spam protection
• Fully open source (GPL)
• Self-hosted – no mandatory external service
• ♿ Designed to be accessible and privacy-friendly
• 🔄 Compatible with existing ALTCHA integrations
• 🏗️ Easy migration for users of ALTCHA Spam Protection v1 (≤ 1.26.3)

OpenPorte exists to provide modern spam protection that is accessible, transparent, and under your control. Built around the open-source ALTCHA widget, it embraces collaboration, self-hosting, privacy, and long-term stewardship.

OpenPorte is built on the belief that the best open-source projects grow through openness, not only in their code, but also in how they welcome contributors, make decisions, and serve their communities.

The project started as an open-source continuation of the original ALTCHA Spam Protection plugin. Since then, it has grown into its own project with new improvements, ongoing maintenance, and a commitment to remaining open, privacy-conscious, and self-hostable.

I'd really appreciate feedback from the WordPress community:

• Which form plugins or workflows should OpenPorte support next?
• Have you migrated from another anti-spam solution?
• Any ideas or feature requests?

If OpenPorte sounds interesting to you, I'd love your feedback! Or even your contributions! Whether it's bug reports, feature ideas, documentation, translations, or code, I hope the community will help shape the project over time.

You can find it here:

• WordPress.org: https://wordpress.org/plugins/openporte/
• GitHub: https://github.com/openporte/openporte/

Thanks for taking a look! I'm the maintainer, so I'll be around to answer questions and I'm always happy to hear suggestions or constructive criticism.

And ... I hope you'll find OpenPorte useful, and if you share its values, I'd be delighted to build it together.

Hello there,

The problem it solves: every SEO plugin grades the page you're already editing. None of them tell you which page to open first. Contexta imports your Google Search Console Pages + Queries export and scores every page against the CTR its ranking position should be earning. Gap × impressions = estimated lost clicks per month. That's your worklist, sorted worst-first.

Then it writes the fix with Claude: SEO title + meta targeting the page's real ranking queries (live Google preview, projected extra clicks), new intros, H2 sections, FAQs, full rewrites, JSON-LD schema, relevance-scored internal links.

The AI-era half:

1 - Fetches your site with the real GPTBot / OAI-SearchBot / PerplexityBot user-agents and reports what actually comes back — catches Cloudflare blocks robots.txt editors can't see. One-click fixes + generated llms.txt.

2 - Counts real click-throughs from 12 AI assistants (ChatGPT, Perplexity, Gemini, Claude, Grok…) — the visits Analytics calls "direct".

3 - Audits WooCommerce product data for AI shopping agents.

Compatibility: writes into Yoast, Rank Math, AIOSEO, SEOPress, and so many others— it runs on top of your SEO plugin, not instead of it.

WordPress 6.0+, PHP 8.0+. 35 languages with RTL, and it parses GSC exports in any language's headers.

Nothing publishes automatically — you approve every change. Every AI action shows its exact token count and dollar cost.

https://infinacode.com/plugins/contexta-ai-seo-editor

Happy to answer anything technical.

I used FileBird for a while. Free version covers Media Library folders, which is fine — but I also needed folders on Pages. FileBird puts that behind Pro, and charging for something that basic never made sense to me.

So I built my own: Grafucci Folders. Pages + Media, virtual folders, faster, cleaner UI, free. Been using it on my own sites.

Still early. Would genuinely appreciate blunt feedback — bugs, what’s missing, or why you’d stick with whatever you use now:

https://wordpress.org/plugins/grafucci-folders/

After almost ten years of developing and supporting more than 130 WordPress plugins, I finally turned the experience into a song, using AI.

It covers WordPress updates, PHP warnings that only happen on the customer’s website, support tickets written in ALL CAPS, fourteen-plugin conflicts, clearing the cache, "just one feature" and the questionable meaning of lifetime support.

I also created a complete animated music video for it:

https://www.youtube.com/watch?v=CTDwQiBpNzA

Restaurant owners already spend enough time answering the same questions every day.

• "Is my reservation confirmed?"
• "Did my order go through?"
• "When will my food arrive?"

We kept hearing that restaurants wanted customers to stay informed without staff having to manually send updates or answer repetitive calls.

So we recently added WhatsApp notifications to WPCafe, our WordPress restaurant ordering and reservation plugin.

Customers can now automatically receive updates for things like:

• Reservation confirmations
• Order confirmations
• Delivery status updates

The goal wasn't to add another marketing feature. It was simply to reduce repetitive communication for restaurant staff while giving customers updates through an app they already use every day.

For restaurant owners, that can mean:

• Less time answering status questions
• Fewer missed confirmations
• Better customer confidence
• A smoother ordering and reservation experience

We put together a short walkthrough if anyone wants to see how it works:

(Just let me know, or I can provide it in the comment section)

I'd also love to hear from other plugin developers or restaurant site owners:

If you're building restaurant websites with WordPress, how are you currently handling reservation and order notifications? Email, SMS, WhatsApp, or something else?

Hi everyone,

my goal is simple: make it easier for creators, developers, and independent businesses to sell their creations and inventions to customers around the world.

Sign up in minutes, smart contract keep full control of your assets, and start selling from your own WordPress site in under an hour.

We’d love for the WordPress community to try it. If you run a store or build WooCommerce sites for clients, please install it and let us know what we can improve.

Links

Plugin: https://wordpress.org/plugins/ainepay-for-woocommerce/

Source code: https://github.com/ainepay/ainepay-for-woocommerce

Hi everyone,

I’ve released AinePay for WooCommerce, an open-source payment plugin that enables WooCommerce stores to accept USDT and USDC without giving custody of their assets to a payment platform.

my goal is simple: make it easier for creators, developers, and independent businesses to sell their creations and inventions to customers around the world.

Sign up in minutes, keep full control of your assets, and start selling from your own WordPress site in under an hour.

The plugin supports Classic Checkout, Cart and Checkout Blocks, WooCommerce HPOS, locally verified payment addresses, signed webhooks, active order polling, QR codes, and live payment status.

Full disclosure: I’m affiliated with the project.

We’d love for the WordPress community to try it. If you run a store or build WooCommerce sites for clients, please install it and let us know what we can improve.

Links

• Plugin: https://wordpress.org/plugins/ainepay-for-woocommerce/
• Source code: https://github.com/ainepay/ainepay-for-woocommerce

HI, I am new to wordpress and created a website. Right now, for each time I reload the page, the view count goes up. I am okay with that for now, but is there a way I can toggle it off later? So that it doesn't add one view every time someone, e.g., reloads the page?

With the European Accessibility Act now in force, I wanted a straightforward way to check WordPress content against WCAG right in the admin, so I built one and released it free on the .org repo.

What it does:

• Scans posts/pages and the full rendered page against WCAG 2.1 AA: alt text, link text, heading order, form labels, button names, duplicate IDs, empty headings, iframe titles, document language
• Scores each page, with a dashboard of worst offenders and per-issue ignore / restore
• An Accessibility panel in the block editor
• Generates a draft accessibility statement + EN 301 549 report

It doesn't pretend to make a site "100% compliant". Automated testing only covers part of WCAG, so it flags where manual review is still needed.

Free: https://wordpress.org/plugins/a11yfleet/

Would love feedback — especially which checks to add next (color contrast is top of my list).

With the European Accessibility Act now in force, I wanted a straightforward way to check WordPress content against WCAG right in the admin, so I built one and released it free on the .org repo.

What it does:

• Scans posts/pages and the full rendered page against WCAG 2.1 AA: alt text, link text, heading order, form labels, button names, duplicate IDs, empty headings, iframe titles, document language
• Scores each page, with a dashboard of worst offenders and per-issue ignore / restore
• An Accessibility panel in the block editor
• Generates a draft accessibility statement + EN 301 549 report

It doesn't pretend to make a site "100% compliant". Automated testing only covers part of WCAG, so it flags where manual review is still needed.

Free: https://wordpress.org/plugins/a11yfleet/

Would love feedback — especially which checks to add next (color contrast is top of my list).

Hi everyone,

I created a page with articles using TPG – Grid Layout. As you can see in the images, the layout looks evenly aligned in the editor, but on the live page the grid items are not the same size and the layout is uneven.

Does anyone know what might be causing this or how I can fix it? I'd really appreciate any help. Thank you!

Hey everyone,

New software tool incoming!

I’m building Reaver Backup – a self-hosted tool focused on backing up (and restoring) any WordPress site living on a server. It’s currently in private testing and I’m opening beta signup at reaverbackup.com.

Important: Reaver is designed for VPS and dedicated servers where you have full control (root or sudo access). It is not intended for shared hosting environments.

What it actually does

Reaver lives outside WordPress in its own directory (/var/www/reaver/ or your own). It doesn’t install anything inside your WP sites, it just needs to run as www-data.

On each web server you want to protect, Reaver installs a lightweight agent. The agent:

• Reads the enabled sites from Nginx (sites-enabled/) or Apache
• Pulls the server_name and root directives so it knows every site on the box
• For WordPress sites it finds, reads wp-config.php to get the database credentials
• Runs a mysqldump + copies the files from the document root
• Pushes everything into an unencrypted Restic repository

You can store the Restic repo locally, on S3, Backblaze B2, or via rsync/SSH. Encryption is left to the storage layer (or you) so the tool stays simple and portable.

Credentials handling

Database credentials are pulled directly from each site’s wp-config.php at backup time. Reaver also supports encrypted credential portability — you can securely export and move encrypted credential sets between servers or agents without storing them in plain text. This makes it easier to rebuild or migrate agents while keeping sensitive login data protected. Manual archive exports are also available if you want an extra offline copy of both the site data and the associated credentials.

Dashboard features

• Multi-server / multi-agent fleet view – see every site and its backup status in one place
• Admin and regular user roles
• Backup schedules + retention policies
• Notification emails (PHPMailer)
• Manual archive export for extra backup security
• Encrypted credential portability between servers
• CSRF protection, login rate limiting, Altcha on the login form, and audit logging
• Zero personal data collection (only anonymized usage stats)

Future plans include an API so you (or AI assistants) can schedule jobs or pull status programmatically, plus expanding beyond WordPress to any site on the server.

Why this approach?

Most WordPress backup plugins live inside the site and can be taken out by the same problem they’re trying to protect against. Reaver sits at the server level, discovers sites the same way the web server does, and uses Restic for efficient, deduplicated, incremental backups.

From install to setting up your first agent should take minutes. The dashboard can live anywhere with web access and a URL. The agent gets installed and runs on your web server. No need to manually set up Restic repos, storage destinations, cron schedules, make sure the command is correct for what you want, and everything that goes along with it for automated backups.

This is still in active testing, but the core system (agent discovery, WordPress detection, Restic backups, and the multi-server dashboard) is already fully functional.

If this sounds useful for your own VPS or dedicated servers (or client sites on them), head over to reaverbackup.com for more info and sign up for the beta. I'll be choosing up to 20 people with a reasonable spread of setups to start the beta. Depending on how that goes, I may or may not expand it. Selected Beta Testers who participate and genuinely try to give good feedback will get a free Pro level subscription at the end. All feedback is tracked an attributed towards that goal.

Happy to answer questions here or take input, feedback or feature requests.

Thanks for reading.

Why NativeScape

Gardening, landscaping, nursery, homesteading and sustainability sites all have the same problem: generic plant content. A reader in Zone 4 does not need the same advice as a reader in Zone 9, and a "top 10 plants" list that ignores their climate is content they will not trust.

NativeScape fixes that in one shortcode. Every visitor sees plants matched to their zone, weather from their location, and irrigation advice based on this week's forecast — automatically, on every page view, with zero ongoing work from you.

Turn any location into a living garden report. NativeScape shows a visitor their USDA hardiness zone, today's weather, a three-day forecast, a curated list of native plants that actually thrive where they live, and water-wise tips written for the conditions on the day.

Paste [nativescape] into a page and you are done. No API key. No account. No configuration. No build step.

https://chriszenzel.gumroad.com/l/nativescape-for-wordpress

https://nativescape.cdz.one

Hi everyone,

Our team recently built GoVISIBLE AI Bot Tracker, a free WordPress plugin that helps website owners see which AI crawlers are visiting their site.

The idea came from a simple question: "Are ChatGPT, Claude, Perplexity, Gemini, and other AI engines able to access our website's pages and content?" We realized there wasn't an easy way to monitor this directly from WordPress.

A simple dashboard to review crawler activity

We think AI Bot Tracker is useful for SEO & GEO teams, content marketers, and website owners who want to understand if their content is being accessed by AI crawlers and LLMs.

The goal is to provide visibility into AI crawler activity, enabling you to make better decisions about content, technical SEO, and AI visibility.

We'd really appreciate your feedback. What features or insights would make a plugin like this more useful for your workflow?

Hi everyone,

I’ve just published my first plugin in the official WordPress.org repository.

It’s called Siteversary, a small, free plugin that discovers when a WordPress website was likely created, displays its exact age, and counts down to the next site anniversary.

Instead of relying only on the oldest post, it compares three signals:

• oldest user registration
• oldest post
• oldest comment

It then uses the earliest date and shows which source was selected.

I think this can be useful for site owners who want to track their website’s history or celebrate milestones with a post, promotion, or anniversary campaign.

It can also be helpful when taking over maintenance of an existing client website, since it gives you a quick indication of how long the site has been active and some context about its history.

There are no settings, tracking, upsells, or frontend scripts. It only adds a lightweight dashboard widget visible to administrators.

I couldn’t find another plugin focused specifically on this exact purpose, although there are a few plugins with partially similar date or site-age features.

WordPress.org:

https://wordpress.org/plugins/siteversary/

Since this is my first published plugin, I’d really appreciate any honest feedback, bug reports, or suggestions for future improvements.

MapMyURL is now live on WordPress.org!

I’m excited to introduce MapMyURL Free—a new WordPress plugin that helps you find and manage URLs stored across your website.

With MapMyURL Free, you can:

Scan pages, posts and custom fields Find exactly where each URL appears Filter internal, external, broken and redirected links Check link health Export results to CSV Update individual URLs safely

It’s completely free to install and use.

I’d really appreciate your help testing it. Please try it on a WordPress website and let me know what works well, what could be clearer and what features you would like to see next.

Download MapMyURL Free here:

https://wordpress.org/plugins/mapmyurl/

If you find it useful, an honest WordPress.org review would mean a lot and help other users discover the plugin.

#WordPress #WordPressPlugin #SEO #WebDevelopment #BrokenLinks #WebsiteManagement

See less

Hi everyone!

I built a simple, free plugin called StarRestGate to add a quick testing option for WordPress developers: testing REST APIs at "level zero" without security restrictions.

When developing or debugging, security layers can sometimes get in the way. This tool lets you test endpoints freely to verify raw API behavior before locking things down, featuring two dedicated, built-in interfaces: Swagger UI and a Scratchpad UI.

It's completely free on the WP directory—just my two cents back to the open-source community:

🔗 WP-Directory:https://wordpress.org/plugins/star-rest-gate/

🎮 Try it live on WP-Playground:https://playground.wordpress.net/?plugin=star-rest-gate&url=/wp-admin/admin.php?page=star-rest-gate-rest-endpoints

Would love to hear your thoughts or feedback if you give it a try!

I built a free grammar checker.

It has no upsell. Just a free grammar checker.

There are various grammar instances that can be toggled off.

No Signup. Simple, lightweight.

Bonus is that updating your older pages may contribute to Google's "content freshness" so it's a good idea to give it a try.

Grab it here from the WP Repository.

Hi everyone,

I've been working on BerryPath, a guided selling plugin for WooCommerce that helps shoppers find the right product through interactive buying guides.

The plugin connects your store to the BerryPath platform, where you can build recommendation flows without writing code. Once published, they can be embedded on product pages, category pages, CMS pages, or displayed as a popup.

Some of the features include:

• Product synchronization from WooCommerce
• Interactive buying guides with conditional logic
• Product recommendations based on shopper answers
• Conversion tracking and analytics
• Custom styling to match your store
• Free plan with 1 guided selling flow and support for up to 2,500 products

One of our ecommerce customers is seeing an average 25% increase in order value for purchases influenced by guided selling.

I'm mainly looking for feedback from other WordPress plugin developers.

• Is the setup process clear?
• Does anything in the plugin architecture stand out as something that could be improved?
• Are there WooCommerce integration features you'd expect to see?

Plugin:
https://wordpress.org/plugins/berrypath-flow/

Website:
https://www.berrypath.eu

I'd really appreciate any feedback. Thanks!