💪 24/7 WordPress website management and support services that power digital growth. Care plans for site owners, white-label support for agencies & freelancers.

WordCamp USA 2024
Joined January 2015
PHP2Shell is the biggest vuln in the WP ecosystem so so far. Usually I post about how many attacks our firewall blocked. This time is different. For most WP sites, Cloudflare isn’t the right firewall. We spend a lot of time explaining to customers that it can only do so much and won’t protect them from vulns. This one could only be blocked by something like CF and they did a great job. We’ve added a new filter in BlogVault so you can easily find any sites running a vulnerable PHP version.
2
10
1,054
WP Buffs retweeted
Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers. cfl.re/488w8dc
110
1,676
412
6,995
942,325
Today's critical PHP security fixes: Anchor Hosting sites are already protected by Kinsta's enterprise Cloudflare WAF, and patched PHP is rolling out platform-wide. No action needed on your end. xitter.cf/dok2001/status/2112811…
PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free. We are seeing early attacks emerging and are updating mitigations as new vectors show up. This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.
3
3
628
WP Buffs retweeted
Security update: PHP has announced two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619 (CVSS v4.0: 9.2), with an official fix scheduled for today, 21 October, at 14:00 UTC. SiteGround customers are already protected. Our security team has applied server-level protection across all our servers ahead of the release, so no action is needed on your side. If you run PHP elsewhere, upgrade as soon as the fixed versions are released. Full details on our blog: siteground.com/blog/critical…
23
31
1
128
6,198
Meeting WCAG helps you meet legal accessibility requirements under the ADA, EAA, and Section 508. Your journey to WordPress accessibility begins here. Start with the free Equalize Digital plugin, choose a mini audit, or go all in with a full audit. wpbuffs.com/announcing-our-e…
1
37
WP Buffs retweeted
✏️ How to Build Better Partnerships in the WordPress Ecosystem, by @thewpbuffs ✅ Conversations > contracts ✅ Values beat business fit ✅ Small collabs grow into big impact Example: EqualizeDigital + @thewpbuffs making WordPress more accessible 👉 wpbiz.dev/release-notes/part…
1
2
2
81
WP Buffs retweeted
Replying to @thewpbuffs
@thewpbuffs just launched accessibility services with Equalize Digital. In this post for @wpbizdev, I dive into how we build partnerships that bring us and our customers closer into the community we’re already a part of. 🤝 wpbiz.dev/release-notes/part…
2
2
65
Equalize Digital identifies accessibility roadblocks, and our team at @theWPBuffs clears the path. Get exclusive pricing on deep-dive audits and accessibility tools to help your site conform with Web Content Accessibility Guidelines (WCAG). equalizedigital.com/wpbuffs/
1
41
😅 Client at 10 PM: “Can you make a tiny change?” You at 10:01 PM: already dreaming about deadlines Agencies, save your sleep and let WP Buffs handle the updates, backups & emergencies. We're open 24/7. 👉 wpbuffs.com/plans/white-labe…
49