Authenticating a script against the REST API means either cookies and a nonce, which needs a browser, or basic auth over a plugin, which means a real password…
5.2 catches a fatal error during a plugin load, deactivates the plugin, and emails a recovery link to the administration email address — which on most sites is…
Options, tables, scheduled events, user meta and post meta all survive deactivation and deletion unless the plugin removes them explicitly, and most do not. The constant check is…
Registering a post type in functions.php ties the content model to the theme, so changing the appearance of a site deletes its URLs. Loading before regular plugins is…
Every WordPress release means editing the same header in every plugin readme, and doing it by hand is how one of them ends up claiming compatibility with a…
The activity stream lives in its own tables with its own query class, so every WordPress instinct about WP_Query, post meta and the loop is wrong here. The…