
Building @eBookCrafter, a WordPress plugin to help turn posts into eBooks.
Pune, India
Joined May 2011
- Tweets2.7K
- Following1.6K
- Followers481
- Likes13.2K
Early bird tickets - that's one of the things I love about WordCamps.
I just bought one for WordCamp Pune 2027.
WordCamps have been happening in Pune since 2013, and I'm super happy to see the regularity with which the event returns.
pune.wordcamp.org/2027/
Naweed Chougle retweeted
A new PHP vulnerability is in the news. We tested it on our live servers: it can’t be used to take over sites hosted with us, WordPress included.
PHP has released a fix, and we’re applying it across all hosting today anyway. No action needed on your side.
Naweed Chougle retweeted
Replying to @joshbrown @Cloudflare
At @automattic we invest deeply in security, so your @WordPress doesn't have rough days, our shield was up just like Cloudflare, and even better everything was patched on @WordPressdotcom @Pressable and @WordPressVIP , who didn't have a second of downtime.
The Prime Minister of Japan has posted about the PHP vulnerabilities being patched.
Shows how serious the situation is.
皆様に、今夜に対応して頂きたい大至急のお願いです。
多くのウェブサイトで使用されているPHPに関し、PHPのセキュリティチームが、重大な2件の脆弱性に関する注意喚起を行っています。
公開しているウェブサイトでPHPを使用しているか確認し、今夜、10月21日午後11時(日本時間)に公開される修正パッチについて、可及的速やかに適用できるよう準備をお願いします。
修正パッチを速やかに適用することが困難な場合は、例えばウェブサイト等を一時的に停止させることも、リスクを低減させるための有効策の一つと考えられます。
国家サイバー統括室のXアカウントでも関係する情報を発信していますので、そちらも参考にして下さい。
国家サイバー統括室(注意・警戒情報)(@cyber_forecast) / X
Naweed Chougle retweeted
The PHP project has released fixes for 2 critical vulnerabilities affecting servers that host PHP applications. Site owners and technical teams should confirm their hosting provider’s update plan and update PHP immediately. Versions before PHP 8.2 no longer receive security updates. These issues are not specific to WordPress, and no WordPress update is required. wp.me/pZhYe-5Gb
Naweed Chougle retweeted
Word on the street is... ensure your PHP sites are running at least PHP 8.2 or above. Anything below that... huge security issue being exposed tomorrow. And 8.2 is the minimum version still receiving security updates. Sites below that better get with the program.
Naweed Chougle retweeted
🚨 If you use PHP, prepare to update on October 21, 2026.
A critical security release is scheduled for 14:00 UTC (5 PM EAT), addressing two vulnerabilities rated CVSS 9.2 each.
Affected versions and fixes will be confirmed at release. Be ready to update as soon as patches are available.
php.net/archive/2026.php#202…
WordPress is cooked!
Moved our entire hubspot blog over to wordpress using claude code which ran autonomously for 6 hours and emailed me when it was done.
As people become more savvy, the "platform migration PITA as customer lock" goes away.
Here's how I did it.
First I used AI to find the most robust MCP out there for a blog host. WordPress beat webflow for my use case.
Now the fun begins, I woke up around 5:30am and on the walk portion of my morning run I kicked off deep research for documentation for both hubspot and WordPress, given I was going to migrate.
Got home showered, watched the kiddos walk to the bus stop, then went to work, got in by 8:15am.
Hubspot and WordPress MCPs were already connected (I used a business account for a new WordPress site to get the full mcp)
While at my desk I told Claude code that I wasn't going to be at my desk after 9:30am
and that it would have to work autonomously from 9:30am until I got back to my desk at 4pm.
Knowing that for the next hour+ I had to get all the permissions set up. Step by step I installed the plugins, set up tilhe python, etc etc. I then left at 930 to go to my meeting in the city.
I got an email at around 3pm in my drafts, telling me it was done. It ran for 6 hours autonomously, and when I show people the staging site, they can't tell which is which.
The AI even caught that it should move the forms and tracking over as embeds.
If you look at these the only giveaway was accessibility icon. Not bad Claude :)
Also now that it is on WordPress with the MCP guess what?
I can voice things like this into my phone and get Claude to find an image and insert it.
Prompt: Take this post and insert an image of me in the first image position and push the other image of cloudflare down, run indepentdly.
A must-read post for everyone in the software industry, from juniors to seniors. This is one of the best summaries I've read of what lies ahead for the software industry.
Just like the rest of the industry, I am right now both scared and excited. Scared because the LLMs are much more powerful than I thought.
Only six months ago, I was like "The demo is cool, but can you take it to production", and now we are shipping things in production at a break-neck speed. Our suite of products is looking top-shelf - now more than ever and I am very excited for the upcoming releases - Raven v3, Cloud v2, Suite and Flow in the coming weeks.
Not only the new products, but my colleague @nabinhait did a code analysis of our 20 year old codebase and found 1900 bugs (small and big, many edge cases) and the team will fix them IN A MONTH. One of our young engineers was able to optimise our build pipeline by almost 40% in a matter of days.
I am super scared for what it means for young software engineers (find other industries, they are hurting for talent), what it means for freelancers, and our partners. Many of our partners are reporting that customers are now just using LLMs to customise ERPNext and the price of customisation has come down. They will have to go "lean" and adapt quickly to survive.
I am also scared if the software industry will survive in the coming few years. Will we have the secret sauce to compete against the likes of Google, OpenAI, Anthropic who will soon enter the application business? Open source and our unique software architecture and our adaptable culture, gives us the advantage (our earned truths), but only time will tell.
The deck has been reshuffled, and its a new game now. As an entrepreneur, I thrive in chaos. Bring it on!
Naweed Chougle retweeted
Jokes aside honest truth is this job has no specific hours requirement but is intense. I work 80 hours/week and this person needs to keep up. Doing, learning & more.... and very fun
i have no horse in the race here - but to everyone trashing the 8am-8pm requirement, availability weekends and nights, and 3 year commitment...
this is the tacit/unsaid requirement of every job I have ever had that had real growth, learning, and ownership baked into it. the only difference is VK is being explicit about it in the JD
Naweed Chougle retweeted
Replying to @Jtyles
I'm not sure what vibe coded means any more? Like isn't everyone using AI to code in 2026?
Naweed Chougle retweeted
Check out eBook Crafter's newest releases for both the free and Pro versions.
You'll get sharper PDFs, a fresh look for the Table of Contents, and more!
Is your WordPress site full of blogs, case studies, and resources? Use eBook Crafter to turn all your hard work into eBooks - its super easy.
ebookcrafter.com/blog/sharpe…
Naweed Chougle retweeted
Saying software is dead because anyone can build it is like saying photography is dead now that everyone in the world has a camera in their pocket
Not only is it not dead it's the beginning of the Kodak Brownie moment for software, and we will see an absolute explosion of it
It will be the first generation for who building software will feel no different than using it. This is crazy!
The quality and bar of what we expect from our everyday apps will be raised dramatically, we'll have personal software, we'll have disposable software, and agents will be the foundation for most of it
Tech has always been chaotic and evolving, the people who have been able to adapt and move in front of new opportunities have always excelled, this is nothing new, I'm seeing it now and we'll see it 10 years from now
Find the opportunities in the chaose and disruption, there are countless of them
Naweed Chougle retweeted
Huge congratulations to the WPVibe team on reaching 70K+ users!
I’ve been using WPVibe since the beginning, so it’s great to see how far it’s come. Connecting AI tools like ChatGPT, Claude, and Cursor to WordPress through MCP opens up new possibilities for how we build and manage websites.
If you haven’t tried it yet, you can get started for free at WPVibe.ai.
Got an alert from AI that WPVibe.ai passed 70,000+ users 😍
Just 4 days ago, we passed the 60k milestone. If you've been following the journey, just last month, we were at 20k users.
WPVibe lets you connect your WordPress site with ChatGPT, Claude, Cursor, and other AI tools to unlock a much better way of building & managing websites.
If you've not tried it yet, you're really missing out. WPVibe is a game changer!!
AI + WordPress unlocks a whole NEW LEVEL of flexibility and power that no other platform can match.
You can start for free at WPVibe.ai
I'm incredibly grateful for the kind words and support from our amazing community.
Also huge props to the great work @johnturner and team are doing in implementing user feedback and continuing to make WPVibe better every day.
Truly thank you to everyone who's supporting us in this journey 🙏
I've just grabbed my early bird ticket. 🎉
🎟️ Early Bird tickets are LIVE!
One city. A thousand ideas. A community shaping the future of WordPress, web development, AI and the open source.
Grab your Early Bird ticket before they’re gone!
Get yours now 👇
mumbai.wordcamp.org/2027/tic…
#WordCampMumbai #WCM27 #WordPress
All the "ship fast and break things fast" folks, do take note!
It was an absolute privilege to meet the reclusive Bharat Goenka, the creator of Tally. He built Tally in 1986 and it has been the backbone of the Indian industry for decades now, with close to 3 million users. He has been a pioneer of the Indian software product industry.
His message was also very clear. Build high quality ("zero defect") software. The only blocker to scale is quality. This is a conversation sorely lacking in the industry. Building higher quality products has been a constant challenge for us here at Frappe, and we can definitely do better. Tally has also bucked the trend of "adding features". The Tally feature set and user interface has been constant for decades, a rare thing in the industry as well. Tally has already lasted longer than most software products in the world and it will be interesting to see how much longer can it resist "change".
Thank you Pulkit Saboo for inviting me to Tally's annual "Tenets" event, and Nupur Goenka and Tejas Goenka for the lovely conversations. India needs more "true" software products like Tally and there is so much we can learn from each other.
Naweed Chougle retweeted
eBook Crafter completes one year on X today 🎂
That was one year of sharing updates and PDFs made from #WordPress posts.
Thanks for following along on our journey so far!
What year did you join? 👇
#MyXAnniversary
Can't have put it in a better way! 👊🏼
Yes, you can now vibe code an LMS in an afternoon.
Congratulations, you are now responsible for:
- Enrollment.
- Unenrollment.
- Expired versus cancelled versus deleted, and why the report cares which one.
- Re-enrolling a student without wiping their progress.
- Lesson progress.
- Section progress.
- Course progress that says 98% because of a lesson nobody can reach.
- Marking a lesson incomplete for one student without touching 400 others.
- Where to send a student the moment they finish the course.
- Drip content.
- Drip by enrollment date.
- Drip by calendar date.
- Drip by course start date.
- Drip by "after the previous lesson."
- Drip set to 9:00 a.m. in whose time zone, exactly.
- Prerequisite lessons.
- Prerequisite courses.
- Course tracks.
- Lesson A requires Lesson B. Lesson B requires Lesson A.
- Quizzes.
- Passing percentage.
- Attempt limits.
- A student on attempt 47.
- Deciding whether a student who passed can retake.
- Time limits.
- The browser tab that closed at minute 29 of a 30 minute quiz.
- Letting them resume. For 24 hours. Then not.
- Randomized question order.
- Multiple choice.
- Multiple choice with more than one right answer.
- Picture choice.
- Reorder the steps.
- Fill in the blank.
- Fill in the blank with a typo.
- Short answer.
- Long answer.
- Who grades the long answer.
- A quiz stuck at "pending" because nobody graded the long answer.
- Points per question.
- Showing the correct answer afterwards, or not.
- A clarification on why the right answer is the right answer.
- A question bank so you stop copying questions between quizzes.
- Assignments.
- File upload assignments.
- Task list assignments.
- Essay assignments.
- Grading all of the above.
- Certificates.
- Certificate templates.
- The certificate with the student name misspelled, forever.
- Updating the template without regenerating 2,000 certificates.
- Regenerating the 2,000 certificates.
- The student who wants their certificate as a PDF.
- The student who wants their certificate public on LinkedIn.
- The student who very much does not.
- Achievements.
- Not awarding the same achievement twice.
- Engagements.
- An email when they finish Lesson 3.
- An email three days after they finish Lesson 3.
- An email three days after they fail the quiz, worded kindly.
- Notifications.
- In-app notifications.
- Email notifications.
- Enrollment, lesson complete, section complete, course complete, quiz passed, quiz failed, quiz graded, certificate earned, achievement earned, purchase receipt, upcoming payment, payment retry, manual payment due, subscription cancelled, and the welcome one.
- Checkout.
- A registration form.
- A checkout form.
- An edit account form.
- Custom fields on all three.
- Access plans.
- One-time price.
- Recurring price.
- A payment plan that ends after six payments.
- A free trial.
- A free trial with a trial price.
- A sale price with a start and end date.
- A plan only members can see.
- Lifetime access.
- Access for 90 days.
- Access until a specific date.
- Scheduling the expiration.
- Running the expiration.
- Unenrolling when the expiration runs.
- Coupons.
- Percent off.
- Dollars off.
- Coupons that only work on one-time plans.
- Coupons that only work on recurring plans.
- Coupons that also discount the trial.
- Coupon expiration dates.
- Coupon usage limits.
- Someone finding the 100% off coupon from a 2021 webinar.
- Vouchers.
- Redeeming vouchers from the dashboard.
- Order statuses.
- Pending versus failed versus on hold, and why the difference matters at 2 a.m.
- A recurring payment that fails.
- Retrying it in 12 hours. Then a day. Then two. Then three.
- Not emailing the student on the first retry.
- Emailing them on the second.
- Giving up and marking it failed.
- Refunds.
- Refunds that unenroll.
- Refunds that should not unenroll.
- Stripe webhooks.
- A charge that failed in Stripe but nobody told your LMS.
- PayPal.
- Authorize . net.
- Taking manual payments by check or bank transfer.
- Someone wanting to pay with WooCommerce instead.
- Someone wanting to name their own price.
- Someone wanting to gift the course to their sister.
- Memberships.
- Memberships that auto-enroll into courses.
- Removing a course from a membership.
- What happens to the people already in that course.
- Restricting content.
- Where to send someone who hits restricted content.
- A sales page for logged-out visitors.
- A different sales page.
- A redirect to a sales page on another site.
- Groups.
- A company buying 20 seats.
- Seat counts.
- Group invitations.
- An open invite link that someone posted publicly.
- Instructors.
- Co-instructors.
- Instructors who should not appear on the course page.
- Cohorts progressing together.
- Continuing education credits.
- Events with calendar feeds.
- The student dashboard.
- My courses. My grades. My achievements. My certificates. My notifications. My orders. My favorites. Edit account. Redeem voucher.
- Reporting.
- Student reports.
- Course reports.
- Quiz reports.
- The report of students who never attempted the quiz.
- Exporting the report.
- Time spent in each lesson.
- An admin overriding the time spent in each lesson.
- Video progression.
- Locking the quiz until the video is watched.
- On YouTube. On Vimeo. On Wistia.
- Protecting uploaded media from people who are not enrolled.
- One student sharing one login with their whole office.
- Kicking the extra sessions.
- Course reviews.
- Allowing one review per student.
- Student notes.
- Social learning so the course is not a ghost town.
- Private areas for one-on-one coaching.
- Exporting a course.
- Importing it on another site.
- Importing it on your staging site.
- Your staging site charging real cards.
- Detecting the clone and switching recurring payments off.
- Privacy exports.
- Privacy erasure requests.
- Login and logout tracking.
- Being the only person on Earth who knows how any of this works.
Disclaimer: This list is only about 20% of the key LMS things.
Now you have two jobs. Or you install the WordPress LMS solution that has spent 12+ years learning all of this (LifterLMS).
Naweed Chougle retweeted
Replying to @RVidinlioglu
Expect a ton of security stuff this year as the models evolve, I said this 2 years ago at WordCamp.





















