A custom WordPress URL can return 404 even when wp rewrite list --match prints rows. The rows are only candidate regular expressions. The decisive question is whether one candidate produces the internal query that the route-owning code expects, and whether that exact query is present in the ...
A WordPress checksum command can exit 0 while leaving one plugin unverified. In the reproduced lab, wp plugin verify-checksums --all --strict reported “2 of 3 plugins (1 skipped)” because a local plugin had no WordPress.org checksum, yet the shell still saw success. Later, a trusted core reinstall ...
Rotating WordPress security salts has one precise security effect: cookies and nonces created with the old secrets stop validating. That can end stolen or untrusted browser sessions after incident cleanup, a leaked wp-config.php, or an ownership handoff. It does not remove malware, reset account passwords, or automatically ...
A WordPress Site Health warning about autoloaded options is evidence about the whole bootstrap set, not permission to delete a database row. Measure the current set, list names and sizes without exposing values, find the plugin, theme or core component that owns each large option, then change ...
A WooCommerce scheduled-actions backlog is a symptom, not a cleanup target. Start by finding which hook is late or failing, read its logs, identify the plugin or integration that owns it, and fix that cause. Only then should you run a small queue batch and confirm that ...