Spyke
wordpress·WordPressbyshort_yam

How to check woocommerce to see if sales volume is over VAT turnover limit?

Is there a way that I can use WooCommerce’s built-in “Analytics” or “Reports” to see if my sales volume to the EU has exceeded the VAT turnover limit?

My understanding is that my business doesn’t have to pay VAT until I’ve exceeded importing goods valued at 10,000.00 EUR into the EU for a given calendar year. I run a small shop that’s been way under that limit, but business has been getting better, and I want to know how close I am to that line.

Is there some easy way to show my total volume of sales to countries in the EU in woocommerce?

View original on europe.pub
-2
wordpress·WordPressbyUnLocoPoco

WordPress Core CVE-2026-64638: Parser Differential Enables Pre-Auth XSS, XSS2Shell Demonstrates Path to PHP Code Execution

WordPress has released security updates for CVE-2026-64638, a high-severity vulnerability affecting the login page that has been patched in WordPress 7.0.3 and backported to supported branches. The bug itself is a pre-authentication reflected XSS caused by a parser differential between WordPress's input handling and HTML sanitization pipeline. According to the published research, malformed input survives strip_tags() but is later interpreted as valid HTML by wp_kses_post(), allowing attacker-controlled DOM elements to be injected into the failed login page.

WordPress Core CVE-2026-64638: Parser Differential Enables Pre-Auth XSS, XSS2Shell Demonstrates Path to PHP Code Executionhttps://thecybersecguru.com/news/wordpress-cve-2026-64638-pre-auth-xss-php-code-execution/Open linkView original on lemmy.world
4

How can I get my buttons aligned horizontally? (same x axis)

The home page for my site is looking like this so far. The only problem is that I can't get the buttons aligned horizontally.

The setup is a grid container containing 3 group items. Within each group is a H3 heading, paragraph, list items and a button. The buttons at the bottom should all line up.

There aren't many options in the actual editor for things like this. I've set the buttons to be centre justified and I've set the vertical alignment to "bottom".

I don't mind adding custom CSS in the sidebar for the blocks, but it would need to be responsive.

View original on lemmy.world
wordpress·WordPressbyCoachDom

Mass Export/Backup of my VPS

Hi folks

I messed up my VPS by upgrading to newer Ubuntu version and something went wrong along the way and I basically lost access to CPanel. I tried a few things but i think its far gone.

I thought the best idea now would be to back up all the WordPress websites I have on the server (including database), export them, rebuild the VPS and import back the website.

Could you point me towards how to do it best and safest way?

Many thanks

View original on lemmy.blahaj.zone
2
wordpress·WordPressbyabeorch

Community run free Open Source plugins for a community group using Wordpress

I volunteer with a community group that uses #Wordpress for its website. So far its approach to Wordpress plugins has been fairly haphazard. Our budget is basically zero. We've ended up using various plugins for User Registration, Access control, Forms, Backup and Restore and other funcitons that are all freemium or cripleware versions of plugins that are really commerical projects by their authors.

On the otherhand we have been looking at running #CiviCRM inside wordpress and that looks to be a powerful, useful tool that's truely community open source.

What other plugins are community groups using that are true community developed opensource projects? I've tried to look through the community plugins directory on Wordpress.org and do some searches but the web is littered with promotional content for commerical 'free' plugins.

I really don't have strong connections to the wordpress community. It woudl be great to connect with other community group volunteers that are involved in Wordpress and get your input and thoughts.

View original on friendica.ginestes.es
3
wordpress·WordPressbyGeng

Our AI Agent recently audited Slider Future (1,000+ active installations) and identified a critical Unauthenticated RCE, now designated as CVE-2026-1405.

Our AI Agent recently audited Slider Future (1,000+ active installations) and identified a critical Unauthenticated RCE, now designated as CVE-2026-1405.

While pattern-matching approaches are effective at identifying broad code signatures, this specific vulnerability resides in the logical flow of the REST API.

The endpoint /upload-image/ allows unauthenticated access because the permission_callback is set to __return_true.

Check detail here:https://www.cve.org/CVERecord?id=CVE-2026-1405

@[email protected] @[email protected] @wordfence

#AppSec #ZAST #VulnerabilityResearch #WordPress #RCE

View original on infosec.exchange
-7
wordpress·WordPressbyfusil

How do I make the Wordpress media library be somewhere else?

cross-posted from: https://lemmy.world/post/41972137

I've been a bit short sighted. I set up my WordPress instance on a server with... Not a huge amount of space. A year or so later, and now I'm running out. I have another server which I could serve files from, and it's got loads of space. Is there a way that I could get the Wordpress media library to just... Serve and upload from that one instead? Preferably migrate it there as well.

Too many people I find online get some sort of yuppie answer like an expensive plug-in with an Amazon CDN subscription. I just want to homebrew this. I don't intend to host the major site assets for the site structure on it, and I'm fine with images taking a little longer to load.

View original on lemmy.world
5

I made a WordPress Devcontainer Template

I was sick of always fighting with WordPress to get a local set up to develop a plug-in or update the theme for a client, so I made a dev container.

As per the README, this supports:

  • Automatic database dump import and site URL rename
  • Automatic WordPress theme and plug-in loading from .zip, wpackagist or directory
  • Mounting of a user-provided uploads directory

It also means your IDE automatically gets access to a WordPress installation for easy auto complete of WordPress functions and features when writing PHP code.

Theoretically, it can also easily be converted into a normal container if you don't use VSCode by setting up /workspace as a mount. Dev containers are unfortunately a bit broken with JetBrains products, and this container will not launch.

Contributions welcome!

I made a WordPress Devcontainer Templatehttps://gitlab.com/acerspyro/wordpress-devcontainer-templateOpen linkView original on lemmy.ca
6
wordpress | Spyke