Faisal Ahammad

@faisalahammadwp

Open source contributor to @WooCommerce, LifterLMS, MC4WP, Gutenberg, Pods & more | AI-driven plugin dev | Ex-Support Eng @NinjaForms #Divi #WPML @SiteCare

Dhaka, Bangladesh

faisalahammad.com

Joined July 2012

2,976 Following

6,786 Followers

Replies Reposts Media

Pinned
Faisal Ahammad
@faisalahammadwp
Aug 10
I need your help. I'm looking for sponsors to keep my open source contribution going. 🙏 Last October 2025 I lost my job. 9 months unemployed now, first time this ever happened in 4 years. I interviewed at Automattic but couldn't pass the trial. Applied to many companies, some
20
Faisal Ahammad
@faisalahammadwp
1h
Your tracking pixel has a twin. It is a plain image tag that fires for visitors who block JavaScript, and nobody opens it. #PixelYourSite, the plugin on 400,000+ stores, fixed an XSS issue in that noscript pixel in 11.4.3, out on 17 October. Credit to Jakub Herman, through
PixelYourSite – Your smart PIXEL (TAG) & API Manager
From wordpress.org
Faisal Ahammad
@faisalahammadwp
5h
Six cards on a services page, one spacing fix each. Click, type, repeat. Click, type, repeat. Divi 5 added multi-select and bulk editing on 17 October. Cmd or Ctrl click adds elements one by one, Shift click takes everything between two elements in the same container, and the
Introducing Multi-Select And Bulk Editing For Divi 5
From elegantthemes.com
Faisal Ahammad
@faisalahammadwp
7h
An admin account shows up in the user list and nobody on the team created it. That is how the #WP2Shell chain ends. Seqrite published its walkthrough on 16 October. It starts with one POST to /wp-json/batch/v1, no account needed: a route mix-up in the REST API batch endpoint
seqrite.com
WP2Shell Exploit Chain: Anatomy of a Sophisticated WordPress Attack
WP2Shell is a critical WordPress Core exploit chain disclosed in July 2026 that can enables pre-authentication remote code execution (RCE) on vulnerable WordPress installations. The chain is partic...
Faisal Ahammad
@faisalahammadwp
7h
An admin account shows up in the user list and nobody on the team created it. That is how the #WP2Shell chain ends. Seqrite published its walkthrough on 16 October. It starts with one POST to /wp-json/batch/v1, no account needed: a route mix-up in the REST API batch endpoint
seqrite.com
WP2Shell Exploit Chain: Anatomy of a Sophisticated WordPress Attack
WP2Shell is a critical WordPress Core exploit chain disclosed in July 2026 that can enables pre-authentication remote code execution (RCE) on vulnerable WordPress installations. The chain is partic...