I’ve spent 25 years shipping production software.
This channel is about taking the professional engineering practices used to build reliable software and applying them to websites, WordPress, SEO, AI and automation.
There’s a big difference between making something work in a demo and making it ready for the real world.
I cover things like:
• Production-ready WordPress and web development
• WordPress security and vulnerability briefings
• AI-assisted and vibe-coded software development
• SEO systems and automation
• AI agents and business automation
• Software architecture and bottom-up system design
• Security, quality, testing and risk management
• The practical engineering disciplines behind reliable software
The goal isn’t to avoid AI or new tools.
It’s to use them properly.
If you’re a business owner, developer or technically curious beginner who wants to understand how to build things that are secure, maintainable and ready for production, you’re in the right place.
Dustin Gray
Today’s WordPress Security Briefing is up.
The biggest issue today is The Events Calendar.
More than 600,000 sites use it, and the vulnerability can potentially lead to remote code execution without the attacker needing to log in.
Also in today’s briefing:
🔴 Tutor LMS
🟠 Popup Maker
🟠 Booking Calendar
🟠 WP Cloud plugins
If you manage WordPress sites, check your plugin inventory and make sure the patched versions are actually installed.
Watch today’s briefing here:
youtube.com/@DustinGrayDigital
Which of these plugins are you running on sites you manage?
3 weeks ago | [YT] | 0
View 0 replies
Dustin Gray
🚨 WordPress Security Briefing | 18 September 2026
Five WordPress security issues worth knowing about today.
1. WordPress 7.1.1 is out with 11 security fixes, including issues involving comments, the REST API and contributor permissions.
2. JetFormBuilder has a serious vulnerability affecting more than 80,000 sites that could allow an attacker to create an administrator account.
3. WP Import Export Lite has a security issue. Update to version 3.9.35 or later, especially if you run WordPress Multisite.
4. WP LP Cookie Consent has a vulnerability affecting Multisite installations that could allow malicious data to execute inside an administrator's browser.
5. MultiUploader for Gravity Forms has a critical file upload vulnerability rated 9.8 out of 10. There is currently no safe version, so disable and remove it.
The main action today:
✅ Update WordPress to 7.1.1
✅ Update vulnerable plugins
✅ Check for unexpected administrator accounts
✅ Remove MultiUploader for Gravity Forms
✅ Inspect affected sites for unexpected files
Watch today's full Daily WordPress Security Briefing below.
#WordPress #WordPressSecurity #CyberSecurity #WordPressUpdates
3 weeks ago | [YT] | 0
View 0 replies