WP Tuts Hub

Practical WordPress tutorials for themes, plugins, and real builds.

Search

Latest tutorial Advanced WordPress Topic Prompt-Injection Hygiene for WordPress AI Plugins: Sanitising User Input, Locking Tool Boundaries and Validating Model Output Build a reusable guard class for WordPress plugins that call an LLM: sanitise user text, delimit untrusted data, whitelist tools, validate JSON output and log every prompt. Read tutorial

More tutorials

Securing WordPress October 21, 2026 PHP2Shell Critical RCE: Protect WordPress Before and After the Patch CVE-2026-109618 and CVE-2026-109619 hit PHP itself. Check your version, disable session upload progress as a stopgap, harden the edge, then install the… Read tutorial

Advanced WordPress Topic October 21, 2026 Screen WordPress Comments with OpenAI Moderation API Before They Reach the Database Route every comment through OpenAI's Moderation endpoint before it is stored, map flagged categories to pending or spam, and keep a decision… Read tutorial

Advanced WordPress Topic October 20, 2026 Build an AI Rewrite Tool in the Gutenberg Editor Sidebar (Streaming, Abortable, Nonce-Protected) Build a Gutenberg sidebar plugin that streams AI rewrites token by token, cancels with AbortController, and keeps your API key server-side behind… Read tutorial

Advanced WordPress Topic October 18, 2026 Auto-Generate Image Alt Text on Upload with OpenAI Vision and a Human Review Queue Queue a vision-model alt text suggestion on upload, cap monthly spend, and approve it from a Media Library review screen before it… Read tutorial

Advanced WordPress Topic October 18, 2026 Building a RAG Search Endpoint for WordPress: Store Post Embeddings and Query Them via REST Build a retrieval-augmented search endpoint for WordPress: chunk posts on save_post, store vectors in a custom table, backfill via WP-CLI, and rank… Read tutorial

Advanced WordPress Topic October 18, 2026 Securing Custom REST API Endpoints with Nonces and Capability Checks Register a custom REST route the right way: permission_callback, nonce verification, argument sanitisation, and WP_Error responses that keep unauthorised requests out. Read tutorial

Popular

Advanced WordPress Topic December 20, 2016 Using Cron Job in WordPress – Schedule Events With WP-Cron: Part 1

WordPress Troubleshooting July 25, 2016 How to Fix HTTP Error in WordPress (Different Possible Ways)

WordPress Tips and Tricks July 30, 2016 How to Create New WordPress Administrator via MySQL

SSH (Secure Shell) September 7, 2016 Frequently Used SSH (Secure Shell) Commands for a Web Developer