ConicPlex

Start Your Project

Author

Aftab Memon

WordPress & Webflow Developer

Aftab Memon is a Senior WordPress Developer at ConicPlex, working across everything from plugin conflicts and theme customization to full site builds on Elementor and WooCommerce. He spends most of his time in the parts of WordPress that don’t show up in a features list: hosting quirks, hook priority, the difference between a plugin that works in isolation and one that survives a real production stack. He writes here about what actually holds up once a WordPress site is live and being run by a non-technical client, not just what works in a demo.

News & Updates

WooCommerce 11.2.2 Hardens the Store API as Woo Adopts a Faster Security Patch Policy

WooCommerce shipped a security-only 11.2.2 release on November 4 and explained a new faster patch policy five days later. Here’s…

Aftab Memon

November 11, 2026

Guides

A developer desk at night with a laptop and monitor glowing violet, next to a stack of shipping boxes, representing WooCommerce order data and HPOS.

How to Make a Custom WooCommerce Plugin HPOS-Compatible Before It Breaks Checkout

If a WooCommerce store has High-Performance Order Storage (HPOS) turned on and a custom plugin still reads or writes order…

Aftab Memon

November 9, 2026

News & Updates

An open laptop glowing WordPress blue on a desk beside a blank visitor name badge, representing a wpDiscuz commenter-name XSS flaw

wpDiscuz Vulnerability Lets Commenter Names Run Script in WordPress (CVE-2026-119366)

wpDiscuz 7.6.74 fixes a stored XSS vulnerability (CVE-2026-119366) where a commenter name built around curly-brace placeholders could run JavaScript for…

Aftab Memon

November 4, 2026

News & Updates

Laptop on a desk showing a software update progress bar beside a vintage stopwatch, symbolizing the narrow timing window in the WordPress 7.1.4 core update vulnerability

WordPress 7.1.4 Patches 22 Flaws as Attackers Race to Exploit a Core Update Bug

WordPress 7.1.4 fixes 22 security issues, including an unauthenticated RCE in the core update process. Wordfence logged over 18,500 probing…

Aftab Memon

November 2, 2026

News & Updates

Laptop on a desk showing a WordPress-blue screen next to an abstract blue swirl sculpture and a small padlock, symbolizing WordPress 7.2 Beta 1 and its new Secrets API

WordPress 7.2 Beta 1 Brings a Secrets API, Faster Admin, and a Redesigned Block Inspector

WordPress 7.2 Beta 1 is out, bringing a new Secrets API, a redesigned block inspector, and faster admin loading ahead…

Aftab Memon

October 24, 2026

News & Updates

Laptop glowing with magenta light on a desk at night, representing a WordPress SEO plugin security incident

Rank Math PRO’s Supply Chain Breach Left a Self-Restoring Backdoor on WordPress Sites

A supply-chain breach at Rank Math let malware ride along with Rank Math PRO version 3.0.123 for roughly 11 hours…

Aftab Memon

October 20, 2026

News & Updates

A laptop glowing blue on a dark wooden desk at night with an old brass key beside it and a door ajar in the background, symbolizing a stolen access key used to slip into a WordPress site unnoticed

Stolen UpdraftCentral Keys Are Being Used to Backdoor WordPress Sites

Attackers with stolen UpdraftCentral dashboard keys are installing backdoor plugins on WordPress sites running UpdraftPlus. No patch exists yet -…

Aftab Memon

October 19, 2026

News & Updates

Developer working late on a laptop with a glowing file icon on the desk, symbolizing a WordPress plugin file upload vulnerability

Critical Bricksforge Vulnerability Lets Hackers Upload PHP Files to WordPress Sites

A critical, unauthenticated file upload vulnerability in the Bricksforge WordPress plugin is being actively exploited. Patchstack disclosed CVE-2026-85097 on October…

Aftab Memon

October 16, 2026

News & Updates

A desktop computer and monitor on a dark wooden desk at night, lit in deep blue tones, with a crumpled sheet of paper sitting apart from a neat stack of documents

Critical Ghostscript Flaw Puts WordPress PDF Uploads at Risk

Wordfence disclosed a critical Ghostscript vulnerability on October 12, 2026 that reaches WordPress through a feature most site owners never…

Aftab Memon

October 15, 2026

News & Updates

A home office desk at night lit by purple monitor glow, with a laptop and monitor, a coffee mug, a shipping box, and a brass key on the desk, symbolizing WooCommerce digital download access and permissions.

WooCommerce 11.2 Patches Security Gaps in Downloads, Permissions, and Reset Emails

WooCommerce 11.2 closes security gaps across password reset emails, downloadable product authorization, shop manager permissions, Blueprint imports, and usage tracking….

Aftab Memon

October 9, 2026

News & Updates

A laptop and monitor glow with blue light on a dark desk next to an ID badge and a hidden second keycard tucked under papers

Ninja Forms and WooCommerce Plugin Flaws Are Being Exploited to Hide Admin Backdoors

Patchstack and BleepingComputer are tracking an active campaign that chains stored cross-site scripting flaws in two popular WordPress plugins, WPC…

Aftab Memon

October 8, 2026

News & Updates, Plugins

A darkened appointment-business reception desk at night with a monitor showing an abstract blue booking calendar grid, a brass keycard resting near the keyboard, and a phone face-down on the desk.

LatePoint Patches a Critical Unauthenticated Shortcode Injection Flaw (CVE-2026-92966)

LatePoint, a WordPress appointment booking plugin running on more than 100,000 service-business sites, has patched a critical vulnerability that let…

Aftab Memon

October 7, 2026

WhatsApp
Husen Memon
Husen Memon
Typically replies instant