Plugin supply chain

By Greg Nowak, 8 June, 2026

WordPress.org's 24-Hour Plugin Cooldown Calls for Real Review

WordPress.org's new auto-update delay gives site owners time to review plugin dependencies, custom code, and staging needs before releases roll out.

Tags

Review Greg on Google

WordPress Speculative Loading Needs a Cart, Analytics, and Cache Test

2026-06-24

WordPress 6.8 adds cautious speculative loading. Before enabling stronger prerendering, test cart state, analytics, personalization, and cache load.

ChatGPT Is Becoming Office Software: Put Admin Hygiene First

2026-06-24

ChatGPT now has files, sessions, apps, and scheduled work. Treat it like office software: audit access, clean up retained data, and limit risk.

Search Console Can See Social Posts—Your Reports Need a New Map

2026-07-13

Search Console now reports how social posts perform across Google. Here’s a practical way to manage properties, permissions, baselines and exports.

Hand-drawn sketch infographic summarizing: WordPress Now Speaks AI; Plugins Still Need Real Guardrails

WordPress 7.0 Has an AI Client. Plugins Need Their Own Guardrails

2026-07-12

WordPress 7.0 standardizes how plugins call AI providers, while leaving developers responsible for access control, cost limits, capability checks and graceful failures.

AI images need a media-library audit before they reach clients

2026-06-24

AI-generated images can carry provenance signals, but CMS resizing, plugins, and CDNs may change them. Audit the media path before delivery.

AI disclosure rules belong in the CMS, not a spreadsheet

2026-06-26

AI-assisted publishing needs visible disclosure choices, review evidence, and SEO checks inside the CMS, not in a side spreadsheet.

The risky part of AI workflow pilots is often the OAuth screen

2026-06-26

AI workflow pilots can fail at the access layer. Review OAuth scopes, API keys, service accounts, and revocation paths before launch.

AI crawler permissions now belong in a licensing register

2026-06-27

AI crawler controls now affect search visibility, AI answers, model training, and licensing. A register keeps policy, evidence, and enforcement aligned.

Google’s AI Search toggle needs a test plan, not a gut decision

2026-07-11

Google’s AI Search control creates a measurable publishing choice. Test visibility, traffic and leads before changing the setting across your site.

WordPress headless menus need an exposure check before launch

2026-06-28

WordPress 6.8 helps headless builds expose menu data through the REST API, but agencies should review exactly what becomes public before launch.