The Melapress Show

Robert Abela

Welcome to the Melapress Show, where we explore everything WordPress, security, and website management. Tune in as we chat with industry experts about the latest trends, tips, and strategies for securing and optimizing your WordPress site. Brought to you by Melapress.com, the creators of powerful plugins for compliance, management, and security.

  1. AI in WordPress Core: Connectors, Abilities & How to Stay Secure | Jonathan Bossenger (Automattic)

    4d ago

    AI in WordPress Core: Connectors, Abilities & How to Stay Secure | Jonathan Bossenger (Automattic)

    In Episode 51 of the Melapress Show, Jonathan Bossenger, Developer Advocate at Automattic, joins Robert Abela to break down how WordPress is being rebuilt from the ground up to work with AI and what that means for the people who build and manage WordPress sites. The conversation covers the four Core AI building blocks that shipped with WordPress 7, why the Abilities API could change how developers structure their plugins, and the real security considerations involved in connecting your site to an AI provider. Whether you're a seasoned plugin developer or just getting started, this episode gives you a clear picture of what's happening now and where things are heading. Key topics include: The four WordPress Core AI building blocks: Abilities API, AI Client, MCP Adapter, and ConnectorsHow the user-controlled model means site owners decide how AI is used on their siteWhy connecting to AI providers makes API key security more critical than ever, and what to do about itHow to get a feature request or idea into the hands of the right WordPress Core contributorsWhat the Abilities API does, why it matters for plugin developers, and how to start registering abilitiesWhat the WordPress AI plugin is, how it mirrors the Gutenberg/performance plugin model, and where it's headingHow AI is reshaping the developer role and why experienced developers blogging and sharing more matters now more than ever🎙 Guest: Jonathan Bossenger, Developer Advocate at Automattic 🎙️ Host: Robert Abela, Melapress

    1h 2m
  2. Building Modern WordPress Products in the AI Era | Vova Feldman (Freemius)

    May 22

    Building Modern WordPress Products in the AI Era | Vova Feldman (Freemius)

    In this 50th episode of the Melapress Show, Vova Feldman, Founder & CEO of Freemius, joins Robert Abela to explore how AI is transforming the way WordPress products are built, maintained, and supported. While AI is making development faster than ever, many plugin vendors are discovering that speed alone doesn't solve the harder problems: technical debt, support at scale, product quality, and the growing complexity of modern SaaS-connected WordPress products. This conversation goes beyond the hype, offering a grounded look at where the ecosystem is heading and which skills and processes still matter in an AI-assisted world. Key topics include: - How AI is accelerating WordPress plugin and product development, and where the risks are emerging - Why technical debt is a growing problem as building speed outpaces engineering discipline - The evolution from standalone plugins to modern, SaaS-connected WordPress products - How to maintain product quality and reliability as operational complexity increases - Scaling support effectively without sacrificing the user experience - What engineering skills and development practices remain essential in the AI era 🎙️ Guest: Vova Feldman, Founder & CEO at Freemius 🎙️ Host: Robert Abela, Melapress

    1h 3m
  3. REGEXSS Demo: How Hackers Exploit Regular Expressions in WordPress | Matthew Rollings (Stealthcopter)

    May 1

    REGEXSS Demo: How Hackers Exploit Regular Expressions in WordPress | Matthew Rollings (Stealthcopter)

    In Episode 49 of the Melapress Show, Matthew Rollings, application security professional and bug bounty hunter, joins Robert Abela to break down RegexXSS: a vulnerability class hiding in the regex code of WordPress plugins. Mat explains how post-sanitization regex manipulation can reintroduce cross-site scripting even after WordPress has done its job, and demonstrates how an attacker can leverage it to take over a full admin account. Many developers are unaware that using regex to parse or modify HTML, even after WordPress's built-in KSES sanitization, can introduce fresh XSS vectors. With over 70,000 WordPress plugins in existence, and regex used heavily throughout PHP development, this vulnerability class is both widespread and chronically under-reported. Mat has earned £20–30k in bug bounties from this single class alone. Key topics include: The definition of RegexXSS and why it's distinct from conventional cross-site scriptingHow WordPress sanitizes input by default and exactly where that protection endsWhy regex is fundamentally context-unaware and therefore unsafe for HTML manipulationA step-by-step demo of abusing a regex deletion to smuggle a JavaScript payloadHow XSS can be escalated to silent admin account creation in WordPress🎙 Guest: Matthew Rollings, Application Security Professional 🎙️ Host: Robert Abela, Melapress

    59 min
  4. Developer Advocacy, Enterprise WordPress & The WP Community Collective | Chris Reynolds (Pantheon)

    Apr 24

    Developer Advocacy, Enterprise WordPress & The WP Community Collective | Chris Reynolds (Pantheon)

    WordPress powers nearly half the web, but the people doing the actual core work are often underfunded, under-supported, and contributing on their own time. Chris Reynolds has seen this firsthand as a long-time contributor, hosting team lead, and now as president of the WP Community Collective, an organization building a new model for independent, community-funded contributions to WordPress. In this conversation, Chris breaks down how the contribution pipeline actually works, why it's so hard to get started, and what WordPress could learn from Drupal's approach to community, governance, and funding. He also explains the three models the WP Community Collective uses: fellowships, projects, and individual sponsorships, and how businesses can support core work without taking on the overhead of hiring. Key topics include: The WP Community Collective: what it is, how it works, and why it was foundedWhy most WordPress core contributions come from a small number of companiesThe real experience of trying to break into WordPress core developmentHow DrupalCon's governance model and mentored contributor days compare to WordPressCommercial competition vs open source collaboration: where WordPress strugglesHow businesses can sponsor contributors through the WP Community Collective 🎙 Guest: Chris Reynolds, Senior Developer Advocate at Pantheon & President at WP Community Collective 🎙️ Host: Robert Abela, Melapress

    1h 6m
  5. How Enterprises & Businesses Approach WordPress Security | Dan Knauss

    Apr 17

    How Enterprises & Businesses Approach WordPress Security | Dan Knauss

    In Episode 47 of the Melapress Show, Dan Knauss, Solutions Architect (worked with Multidots and Solid Security), joins Robert Abela to break down the gap between how enterprises perceive WordPress security and what's actually driving risk in real production environments. Enterprise teams often enter WordPress security conversations shaped by headlines, vendor narratives, and secondhand assumptions rather than evidence, and the decisions that follow reflect that. Dan brings a practitioner's perspective on where this goes wrong, what it costs, and how to fix it. Key topics include: How "WordPress is insecure" narratives form at the enterprise level, and who reinforces themWhat actually happens inside an organization when a high-profile vulnerability report dropsThe difference between the risks enterprises fixate on and the vulnerabilities that cause real incidentsWhy security tooling often outpaces process, and why that makes environments harder to manage, not saferHow to evaluate WordPress security properly: plugins, vendors, hosting, and access controlPractical frameworks for communicating risk clearly to non-technical stakeholders and leadership🎙 Guest: Dan Knauss, Solutions Architect and Technical Generalist 🎙️ Host: Robert Abela, Melapress

    1h 3m
  6. WordPress Product Growth, Strategy, and What Actually Works | Matt Cromwell (Roots & Fruit)

    Apr 10

    WordPress Product Growth, Strategy, and What Actually Works | Matt Cromwell (Roots & Fruit)

    In Episode 46 of the Melapress Show, Matt Cromwell, co-founder of GiveWP (acquired by StellarWP) and founder of Roots & Fruit, joins Bram Vergouwen to talk through what the GiveWP journey really looked like from the inside. A lot of WordPress product founders focus on building but underinvest in understanding their market, and that gap can make a big difference to how things turn out. Matt draws on his own experience to share what he's learned and what he focuses on when working with product companies today. Key topics include: What the GiveWP growth story looked like and how the acquisition came togetherCommon strategic mistakes WordPress product founders makeHow to use customer feedback and market signals to shape product decisionsWhy chasing trends rarely works and what to pay attention to insteadHow AI is changing the WordPress product landscape and what stays the sameWhat Roots & Fruit does and the kinds of WordPress companies Matt works with today🎙 Guest: Matt Cromwell, founder of Roots & Fruit 🎙️ Host: Bram Vergouwen, Melapress

    1h 11m
  7. WordPress Is Easy Until It Breaks: What Support Teams See When Sites Fail | Daniele Besana (WP-OK)

    Apr 3

    WordPress Is Easy Until It Breaks: What Support Teams See When Sites Fail | Daniele Besana (WP-OK)

    In Episode 45 of the Melapress Show, Daniele Besana, CEO & Founder of WP-OK, joins Robert Abela to break down what really happens when WordPress sites fail in production and what it takes to keep them running reliably. WordPress is often described as easy, but that reputation doesn't hold up to first contact with a live site handling real traffic, revenue, and business-critical workflows. Through Daniele's experience running WP-OK, this episode gets into where complexity comes from, what accumulates silently over time, and why support becomes unavoidable. Key topics include: The most common issues that consume support time, and the patterns behind themWhy "we didn't change anything" almost always means something did changeHow WooCommerce raises the stakes when downtime directly means lost revenueWhere clients, agencies, and hosting providers blur responsibility when something breaksWhat separates a profitable support client from an unprofitable oneWhat WordPress site owners should stop doing right now to reduce future problems🎙️ Guest: Daniele Besana, CEO & Founder at WP-OK 🎙️ Host: Robert Abela, Melapress

    1h 12m
  8. Beyond Cookie Banners: The Operational Side of WordPress Compliance | Raffaele Riconosciuto (Termly)

    Mar 20

    Beyond Cookie Banners: The Operational Side of WordPress Compliance | Raffaele Riconosciuto (Termly)

    In Episode 44 of the Melapress Show, Raffaele Riconosciuto joins Robert Abela to break down how compliance actually works in real-world WordPress teams, and where it goes wrong. Compliance is often treated as a legal checkbox, but in practice, it’s shaped by everyday decisions, small changes, and unclear ownership. This discussion focuses on how compliance issues typically start, how they escalate, and why many teams struggle to connect compliance with their existing security and workflow practices. The episode takes a practical look at where things fail, even when the right tools are in place. 📹 This is a recorded session. Key topics include: How compliance issues are triggered and what the process looks like in practiceThe difference between security and compliance, and why confusing them creates riskCommon failure points on WordPress sites, even with tools in placeWhy routine changes like analytics or tracking often introduce compliance issuesHow teams can manage ownership, logging, and accountability without slowing down work🎙️ Guest: Raffaele Riconosciuto, Head of Marketing & Partnerships at Termly 🎙️ Host: Robert Abela, Melapress

    41 min
See All (49)

About

Welcome to the Melapress Show, where we explore everything WordPress, security, and website management. Tune in as we chat with industry experts about the latest trends, tips, and strategies for securing and optimizing your WordPress site. Brought to you by Melapress.com, the creators of powerful plugins for compliance, management, and security.

Information

  • Creator
    Robert Abela
  • Years Active
    2025 - 2026
  • Episodes
    49
  • Rating
    Clean
  • Copyright
    © Robert Abela
  • Show Website
    The Melapress Show