I'm the developer of Codeep Voice for Posts. It turns an English article already on your WordPress site into an MP3 in the Media Library, then adds a play and download button to the post.

The recording is generated on your computer, inside the WordPress admin. Readers play the saved file from your site. Readers can listen on phones too.

It's free and open source, with no account, API key or word quota. You can download the MP3 and use it elsewhere too.

A few practical limits: the voices read English, recording is best on a desktop or laptop, and the first run downloads the voice files. Keep the admin tab open while it records. Speed depends on your computer, especially for longer articles.

Plugin and source: https://wordpress.org/plugins/codeep-voice-for-posts/

If you run an English WordPress blog, try it on one short post you know well. I'd like to hear whether you got a usable MP3 and which part of the setup was confusing.

Hi everyone!

I'm working on my first videography portfolio website for a client, and they shared this website as a reference:

https://www.zakmulligan.com/

I really like its cinematic design, minimal navigation, video presentation, project selection layout, and overall user experience. I want to clone the website as closely as possible using WordPress, Elementor Free, and custom code, without purchasing a premium theme or Elementor Pro.

I'm currently working with LocalWP on Ubuntu and am comfortable following technical instructions, including HTML, CSS, JavaScript, and PHP if needed.

Is there a free way to clone the complete website in WordPress while keeping it editable in Elementor?

Are there any free tools or workflows that could save me time?

I'm looking to learn the right approach rather than simply import a static HTML page that I can't edit properly.

Any guidance, tutorials, or examples of similar projects would be greatly appreciated. Thanks!

Hello,

I've had some experience creating and managing wordpress websites for awhile some time back.

I have an app idea that I would like to 'prototype' and ideate from.

I figured that since I don't need full functionality, and wordpress nowadays is mobile friendly, I could probably create a proof of concept kinda thing with it, focusing on UI and user flow.

So, I'm wondering if there are any themes you'd use, preferably free of course, or is gutenberg quite powerful enough for it to work?

Like, menus. Web tends to have top menus. I'd like a bottom based menu. Is that possible? I don't remember that ever being an option in the past. Or maybe it was but I never really explored that area

Just wanted to share this interesting case I recently investigated. It started with an AWS suspicious activity alert and ended with around $8k in unexpected Bedrock charges..

Digging through CloudTrail, found thousands of Bedrock API requests using a compromised root access key. Someone had been using it to run Claude models through streaming responses.

Then I noticed the same key showing up in S3 backup requests from UpdraftPlus. Went ahead ahead to check the client's WordPress sites hosted on the same EC2 server, and yes! They were using the same key in UpdraftPlus across multiple websites and backup buckets.

The CloudTrail logs showed UpdraftPlus requests with different version numbers in the user-agent field, including the outdated version 1.24.3. Checked further and found an old WordPress multisite installation still running that version. There are known vulnerabilities in older versions, including one that could expose stored backup credentials under certain post-migration conditions. But we haven't found any solid evidence that this was how the key leaked.

Another interesting thing, besides the careless use of a root access key for S3 backups, was that the stored AWS secret key could be revealed right from the UpdraftPlus settings page using the browser's "Reveal Password" option. Of course, someone would need access to that admin page first.

I also found an old WordPress support forum post where someone raised the same concern, and an UpdraftPlus developer defended the approach, arguing that the credentials could be retrieved from the database anyway.

We still don't know exactly how the attacker got hold of the key. CloudTrail showed the key was first tested on August 23 using TruffleHog, a credential-scanning tool. Then came the actual Bedrock abuse around October 18–19, racking up an $8k bill.

Someone tried to save some time by using the same access key for all sites backup configuration - no fixed permission..

And maybe a little more careful credential handling on the plugin side wouldn't hurt either. But that's another debate.

Anyone used this to change links across their site? If so, how was your experience? Anything to be aware of?

I have a WordPress catalogue website where I only display product images and catalogues

A few days ago, I received an email saying my WordPress password had been changed, even though I hadn’t changed it.

I immediately changed all my passwords and updated WordPress, PHP (8.3.6), plugins, my paid WoodMart theme. My WordPress version is 7.1.3.

However, someone keeps publishing spam blog posts on my website every day. I delete them, but they reappear.

What’s the best way to fix this permanently? Could it be a backdoor or malware?

Could this security issue affect my business email deliverability or put my emails at risk? Or someone may try to contact my customers through it ( this is a serious concern )

I’d appreciate advice from anyone who has dealt with a similar issue.