Language: English

  • The Attacker That Never Logged In: Session Hijacking, Stolen Cookies, and the Blind Spot in WordPres

    WordCamp US 2026Speaker: Robert Abela

    August 18, 2026 — They didn’t guess the password. They didn’t break 2FA, bypass the firewall, or trigger a single alert. The activity log shows no failed attempts, no unusual login times, no new accounts created. And yet, the attacker is inside your WordPress site, accessing your WordPress dashboard. Session hijacking leaves no login trace, because the attacker never logged in. They took an authentication cookie and reused an existing session. To WordPress, every request looks legitimate; the real user’s credentials, their 2FA, their login restrictions, none of it applies. The session was already authenticated. Most WordPress security advice is built around hardening and protecting, however, that leaves a critical blind spot: what happens after authentication succeeds? In this talk, we’ll walk through how WordPress creates and validates authentication cookies and session tokens, explore the real-world scenarios where sessions get stolen, and map out what an attacker can do with a hijacked session before the damage becomes visible. Then we’ll get practical. We will look into how session visibility, timeout policies, concurrent login controls, device recognition, and activity logging that captures post-login behaviour are the controls that catch what firewalls and 2FA miss. Firewalls, 2FA, and passkeys are essential. This talk covers what comes after them.

  • Building Training Systems, Not Sessions

    WordCamp US 2026Speaker: Andrew Adam

    August 18, 2026 — Every agency has seen it happen: the site launches, the training session goes well, and three months later the content team has questions no one remembers covering. WordPress offers a huge amount of educational material, but most of it is not designed to be handed directly to a client team with real workflows, custom tools, accessibility needs, and editorial decision-making. This talk shares how Modern Tribe created Learn.tri.be, a reusable training system for WordPress and ModernPress that combines documentation, walkthrough videos, editor-focused guidance, and an AI assistant built directly into the WordPress editor. We’ll explore how teams can move beyond one-time training sessions and build scalable education systems that support content creators at the moment they need help most.

  • Hablamos WordPress: How to Use SEO, AI & Bilingual Content to Reach Multicultural Audiences Where Th

    WordCamp US 2026Speaker: Angel Sopena

    August 18, 2026 — The U.S. Latino market represents over $3.7 trillion in purchasing power but most WordPress sites are built for only one language and one culture, missing a massive, underserved, and far less competitive search opportunity. In this session, the presenter draws from years of real-world experience across four agencies — targeting bilingual audiences in industries as diverse as beauty, healthcare, retail, and tourism — to show how WordPress, the right plugins, and AI tools can be used to reach multicultural audiences based on location, language, and cultural context. The secret? Search volumes in Spanish and culturally specific niches are less competitive, more targeted, and highly underutilized by most brands. And this same principle applies to any multicultural or multilingual community that has been overlooked by mainstream digital marketing strategies not just Spanish speakers. Attendees will walk away knowing how to: Identify low-competition bilingual and multicultural keyword opportunities Choose the right WordPress plugins to manage multilingual content without the overwhelm Use AI to create culturally relevant content in multiple languages without doubling their workload Understand why diversity and cultural awareness is not just good values — it is a real competitive advantage in search

  • 3 Things All Website Owners Need to Check for Privacy Compliance

    WordCamp US 2026Speaker: Hans Skillrud

    August 18, 2026 — Many modern websites are still not complying with a single privacy law. Not GDPR. Not CIPA. Not PIPEDA. Nothing. With the rise of privacy-law lawsuits – and exploding cases of CIPA demand letters – now is not a good time to tempt the fates. But, as with most problems, the first step towards fixing a problem is to first identify there is a problem. So, here are three things all website owners, designers, and agencies need to check their websites for to ensure they are being compliant with modern privacy laws: 1) Data collection methods (forms, ecommerce, newsletter subscriptions, etc.) 2) Data collection methods behind the scenes (analytics, pixels, reCAPTCHA, etc.) 3) Are your policies and consent methods adequate?

  • WordPress as an Operating System: Running Your Entire Company on WordPress

    WordCamp US 2026Speaker: Derin Tolu

    August 18, 2026 — WordPress started as a blogging tool. It has grown into the operating system of the web. This talk takes that one step further: WordPress as the operating system of a company, the single surface where every business unit and every tool people depend on come together behind one login. It doesn’t do every job. It coordinates them. And now that AI is in the picture, that layer is the one place a model can reach everything at once. Drawing on a real multi-brand operation running in production, with thousands of daily users across dozens of offices, we’ll walk the pattern, where it breaks, and the choices everything else depended on. You’ll learn how to run a whole company on WordPress as an operating system: orchestrating the tools each unit already relies on, architecting multiple brands on a single block theme, and using AI to let anyone edit content easily and on brand. You’ll leave with a working model that scales from a 3-person shop to a 3,000-person enterprise.

  • WordPress for the Public Good: Modernizing Civic Websites for Accessibility, Services, and the Open

    WordCamp US 2026Speaker: Manny Costa

    August 18, 2026 — WordPress has changed dramatically since 2020, with Full Site Editing, block themes, the Site Editor, patterns, performance improvements, accessibility work, and modern development workflows reshaping what the platform can do. At the same time, public-sector websites are being asked to do more than ever. They are not just marketing tools. They are public-service infrastructure where residents find services, access emergency information, apply for programs, report issues, and interact with local government. This session connects the evolution of modern WordPress with the practical realities of public-sector digital service. Drawing from real-world experience with city microsites, accessibility challenges, resident personas, service-based content strategy, and an in-progress effort to migrate a large city website to WordPress, this talk will explore how WordPress can support more accessible, trustworthy, and sustainable civic websites. Attendees will learn how to think beyond pages and templates and toward services, tasks, accessibility, governance, editor workflows, and long-term public value.

  • New WordPress Playground UI

    WordPress Playground ContentSpeaker: Fellyph Cintra

    August 6, 2026 — This video provides a comprehensive walkthrough of the newly redesigned WordPress Playground user interface. The update introduces a streamlined, customizable Dock UI that gives you faster access to essential developer tools with fewer clicks. Throughout the demo, you will see how to leverage the new auto-save functionality to prevent data loss, use the minimal view for clean presentations, and easily manage multiple saved Playgrounds using the new live visual previews. The interface also makes it incredibly simple to start new instances, import projects from GitHub or Zip files, and preview Pull Requests directly from WordPress Core and Gutenberg.
    Beyond the layout improvements, the video dives into the powerful built-in development tools available right inside your browser. You will learn how to navigate the drag-and-drop file editor, manage your database, check error logs, and seamlessly switch between PHP and WordPress versions—including historical releases dating back to version 0.7. The walkthrough also covers the quick export options that allow you to download your work, share a link, or push your project to GitHub. Community collaboration is highly valued, and you are encouraged to share your feedback on the Make WordPress Playground blog or in the #playground channel on the Making WordPress Slack.

  • 5 Huge WordPress SEO Mistakes and How AI Can Help You Fix Them

    WordPress Meetup ShenzhenSpeaker: Marc Moeller

    August 6, 2026 — 许多 WordPress 网站因为常见的 SEO 错误而失去宝贵的搜索排名,这些问题往往容易被忽视,却代价高昂。在本次实战分享中,我将揭露他在 WordPress 网站中一再发现的 5 个最关键 SEO 错误 —— 正是这些问题阻碍了企业获得应有的流量与营收增长。

    更重要的是,你将学习如何利用包括 ChatGPT 在内的 AI 工具,快速识别并修复这些问题,即使你没有深厚的技术背景。本次课程将 SEO 的成熟最佳实践与最新 AI 自动化技术结合,为你在搜索排名中提供不公平的竞争优势。

    你将学到:
    ● 正在让你损失流量和销售额的 5 个 WordPress SEO 常见错误
    ● 如何使用 AI 工具在几分钟内完成网站审计,而不是花费数小时
    ● 可立即实施的、实用的分步骤解决方案
    ● 来自电商网站的真实案例——在修复这些问题后流量增长 3–5 倍

    本课程非常适合希望通过现代 AI 驱动技术最大化自然搜索表现的 WordPress 网站所有者、开发者和数字营销人员。

    Many WordPress websites lose valuable search rankings due to common SEO mistakes that
    are easy to overlook but costly to ignore. In this practical session, I will reveal the 5 most critical
    SEO errors he consistently finds in WordPress sites what mistakes prevent businesses from
    reaching their full traffic and revenue potential.
    More importantly, you’ll learn how to leverage AI tools like ChatGPT to quickly identify and fix
    these issues, even without deep technical expertise. This session combines proven SEO best
    practices with cutting-edge AI automation to give you an unfair advantage in search rankings.
    You’ll discover:
    ● The 5 WordPress SEO mistakes that are costing you traffic and sales
    ● How to use AI tools to audit your site in minutes instead of hours
    ● Practical, step-by-step solutions you can implement immediately
    ● Real examples from e-commerce sites that achieved 3-5x traffic growth after fixing these
    issues
    Perfect for WordPress site owners, developers, and digital marketers who want to maximize
    their organic search performance using modern AI-powered techniques.

  • How to Write Image Alt-Text 图片 Alt-text 编写指南

    WordPress Meetup ShenzhenSpeaker: Cheyne Klein

    August 6, 2026 — Writing good alt-text is an essential skill for making your website accessible and user-friendly. In this workshop, we’ll cover the basics of writing effective image descriptions so everyone can fully experience your content.
We’ll go through:
• How to describe an image accurately
• Keeping your text concise and clear
• Adding important context when needed
• What not to include in alt-text
• When to mention text that appears in an image
• Why keyword stuffing is harmful
• How context changes the way alt-text should be written
To make things practical, we’ll also demonstrate the process directly in WordPress, showing you where and how to add alt-text when uploading and editing images. You’ll see exactly how it fits into your site’s workflow and have the chance to ask questions about real examples.
By the end of the session, you’ll feel more confident about writing alt-text that improves accessibility and enhances your site’s overall quality.

    撰写高质量的替代文本(Alt-text)是一项让网站更具可访问性和用户友好度的核心技能。在本次工作坊中,我们将讲解编写有效图片描述的基础知识,从而让所有用户都能充分体验您网站的内容。

    我们将涵盖以下内容:

    • 如何准确地描述一张图片
    • 如何保持文本简洁清晰
    • 何时需要添加必要的背景信息(context)
    • Alt-text 中不应包含哪些内容
    • 何时需要提及图片中出现的文字内容
    • 为什么关键词堆砌(Keyword stuffing)会产生负面影响
    • 为什么错误的 Alt-text 语境会影响图片的表达方式

    为了帮助大家更好地实践,我们也会直接在 WordPress 中演示 Alt-text 的添加流程,包括在上传和编辑图片时该在哪里、如何操作。您将看到这项功能如何融入网站工作流,也可以针对实际案例进行提问。

    在课程结束时,您将更有信心撰写既提升可访问性、又能增强网站整体质量的 Alt-text,使您的网站更专业、更高效、更包容。

  • Round table

    WordCamp Slovenia 2026Speakers: Gregor Grešak, Tomaž Zaman, Remkus de Vries

    July 24, 2026 — An open panel discussion with several of the day’s speakers reflecting honestly on where WordPress is heading.The conversation covers what “junior developer” even means today, how AI is reshaping the skills needed to work with the web, and why understanding the tools matters more than ever as the industry accelerates.