Organizers note: You can enter content for this page in the Sessions menu item in the sidebar.
-
Two worlds collide: WordPress at CERN
In 2025, CERN, the birthplace of the Web, announced its official adoption of WordPress as its future content management system. This talk outlines the process of adopting WordPress at scale at an international organisation, covering aspects such as governance, infrastructure development, and automated migration of 800+ websites onto a customised WordPress Service.
Additional members of the teams will be available throughout the day to answer any questions you may have.
-
How to make toast
Learn how to break down complex work into clear, workable steps through a hands on, playful workshop. Using simple activities that reveal how processes really form, you’ll discover practical ways to build systems that support your agency, plugin, or freelance projects. You’ll leave with a repeatable method you can use anytime you need clarity, alignment, or a fresh way to plan your work.
-
Panel: inside WordPress 7.0
WordPress 7.0 is not yet another WordPress release. It might be the most significant release in a while. It comes with features we couldn’t even imagine a couple of years ago. It’s changing how we use WordPress and how we develop on top of and with WordPress. It’s changing everything.
Join a group of contributors who helped with this release in various ways to discuss not just new features in the software itself, but also the process of releasing such an impactful software, human errors, contribution workflows, and anything you wish to know about WordPress 7.0.
-
HTML API practicum: a deep dive
The HTML API is almost three years old, but continues to evolve with each WordPress release. It’s seen deployment in WordPress’ backend, in Gutenberg, and in many plugins and themes. The HTML API’s core values have even expanded into new pipelines for working with block structure and text encodings, helping to modernise, optimise, and harden WordPress.
This in-depth workshop will review recent updates, explore undocumented capabilities of these APIs, cast a vision for their ongoing development, provide hands-on experience working with and expanding them, and offer quality time for asking questions and interactively exploring the answers.
-
How to not fail when expanding globally
Your webshop is ready to go international. Exciting, terrifying, and often more complicated than anyone budgeted for. Whether you own a shop or help clients build and grow one, you already know that translating pages is the smallest part of the process.
This talk focuses on the things people consistently forget when going global and the questions you should ask before launch. We’ll look at cultural differences that quietly sabotage marketing, pricing, and currency choices that affect trust and conversion, payment methods people actually expect to see, and shipping and returns that mean very different things depending on where your customers live.
No deep tech. no code. Just clear, usable guidance for webshop owners and the agencies that help them achieve international growth without international chaos.
-
Accessibility in themes: easier than you think
Many theme developers assume accessibility-ready requirements are hard to meet — but that’s rarely true. This session shares practical insights from real theme reviews and shows how both block and classic themes can reach accessibility-ready status with manageable effort.
-
Human in the loop means something
Human in the loop is supposed to mean something. Instead, it’s become a comfort phrase. A checkbox instead of a choice about who does what.
Humans bring knowledge, judgment, and context. AI brings scale, pattern recognition, and capacity beyond any individual. The real work is building products where both do what they’re good at. When you get that right, both do more than either could alone.
This talk is practical and honest about where systems fail. The way we build products has changed. Recognising that means understanding where we as humans need to collaborate.
-
WordPress ROI map: engineering business value with BMC
Understand your client’s Business Model Canvas (BMC) to deliver impactful value and solve their core problems. This session introduces the BMC as a ‘translation layer,’ helping developers shift from building features to engineering business value. Learn how to uncover hidden client needs and communicate the value of WordPress solutions.
-
Coordinating the fight: cross-industry collaboration
WordPress hosting threats cross company lines—when one provider falls victim, the entire ecosystem suffers. This session explores how the Internet Infrastructure Forum (IIF) enables hosting providers, registrars, and registries to coordinate abuse response through real-time intelligence sharing. Learn how operational collaboration helps responsible operators detect and stop attacks faster than adversaries can adapt, and why working together produces results no single provider could achieve alone.
-
Why WooCommerce loves its competitors
Every time a new WordPress e-commerce plugin launches, the rumour mill predicts doom for WooCommerce. But the truth is the opposite: WooCommerce thrives when the ecosystem grows.
This session reveals why internal competition is largely a myth and how collaboration is the real driver of success. We’ll look at examples of plugins coexisting and complementing one another, and explore how shared knowledge, integrations, and partnerships amplify the entire WP ecommerce ecosystem.
Attendees will also gain perspective on the bigger picture: Shopify isn’t going away, but a collaborative, open-source community has unique advantages that SaaS platforms can’t match.
By the end of this session, people will understand how embracing diversity and collaboration makes WooCommerce stronger and equips developers, store builders, and agencies to compete more effectively in the global e-commerce market.
-
What’s new in WordPress Playground?
Discover the latest evolution of WordPress Playground in a talk designed for every skill level. We will start with the new, easy-to-use web tools, including the Blueprints Editor, File Editor, and the new Admin Database Manager.
Then, we will look under the hood at the architectural changes, like modular PHP versions and OpCache support, that have boosted performance by over 40%. Finally, we will explore advanced developer workflows, including running PHP with Composer in the browser, debugging with Xdebug, and automating tests with Playwright.
-
Agentic AI & WordPress: from prompts to tools & systems
Prompts chat; Agents act. In this hands-on session, you will move beyond LLMs to build a tool-using AI workflow. We’ll engineer a system that audits a live WordPress site, validates the results, and generates structured tickets. Bring your laptop; leave with a deployment-ready workflow.
-
Smarter plugin permissions with the Abilities API
Discover how the new Abilities API makes plugin permissions cleaner, safer, and easier to maintain. In just a few minutes, you’ll see how it differs from legacy capability checks, learn from a small code example, and get actionable tips you can take back to your own plugins.
-
Why writing still matters in a video-first internet
In 2026, video accounts for 82.5% of global internet traffic. So where does that leave written content? This talk discusses the rapid rise of video, how user search behaviour is evolving, and why written content continues to stay relevant. It also offers practical guidance on how modern marketers, writers, and businesses can adapt to stay ahead in a video-first world.
-
Get your plugin ready for submission to the directory
You’ve spent weeks coding the perfect plugin, and you’re finally ready to share it with the WordPress community. You hit “submit,” wait, and then… the team’s volunteers point out a lot of issues you didn’t even know you were causing.
Getting your plugin into the official directory doesn’t have to be a trial by fire. Join Francisco and David as they reveal the most common, easy-to-fix issues that keep great plugins stuck in the review queue.
In this talk, you will learn:
- The “First-Time Success” checklist: what reviewers actually look for.
- How to avoid the most frequent security and naming pitfalls.
- Tips to streamline your code for faster approval and a better plugin.
Whether you are a seasoned dev or a first-time contributor, this session will give you the roadmap to go from “Pending” to “Approved” without the headache.
David and Francisco are members of the Plugins Team, and together they have reviewed more than 25k plugins, with that number increasing. You’ll save time for them and other plugin reviewers! Everyone wins!
-
Beyond hamburgers: latest Navigation block changes
Discover how the customisable navigation overlays transform mobile menu design. Learn what this new feature means for theme developers and see examples of creating theme-friendly, content-rich mobile navigation experiences using blocks and patterns.
-
Open source is democratic infrastructure – support it!
Open source is democratic infrastructure: built in public, improved by many, and trusted because it is transparent. But infrastructure does not maintain itself. In this talk, Marcel Bootsman shares a practical playbook for how companies and individuals can support open source without taking control, reduce burnout risk, and turn good intentions into sustainable contribution.
-
Block bindings for all!
Block bindings have been available for a few versions of WP now but limited to a few core blocks and attributes, and further limited to post meta and synced patterns as a user facing tool. Now that bindable attributes and the UI can be extended there has never been a better time to get to know the benefits of this powerful feature for really taking control of blocks and content.
-
How we made WP contribution part of our agency culture
Many people in the WordPress community want to contribute, but don’t know where to start, don’t feel confident enough, or simply don’t have the time.
As an agency, we faced the same challenges. Client work was always prioritised, and contribution often felt like something you do *after hours* — or not at all.
At the same time, our daily work is built on WordPress as an open-source project. We benefit from it every day, and with that comes a responsibility to give something back. Five for the Future gave us a clear framework to turn that intention into action.
In this talk, I will share how we changed that mindset by making contribution a **shared team experience**. Through internal Contributor Days and our Five for the Future commitment, we created a safe space for learning, trying, failing, and growing together.
-
Stress testing and scaling WordPress on a $12 VPS
From server crash to enterprise scale – a live-fire DevOps exercise. We’ll stress-test a WP stack on a $12 VPS, visualizing bottlenecks in Grafana before implementing a hybrid-static leap. GitHub repo included!
-
The clarity dividend: accessibility as an SEO strategy
Is your website “invisible” to 23% of your potential customers and the world’s leading AI bots? Search engines no longer just look for keywords; they measure User Experience. In this talk, we’ll dive into the data proving that accessible WordPress sites rank higher and reach further. We’ll explore how designing for the disability community, including the 1 in 7 people who are neurodivergent, creates a “Clarity Dividend” that makes your site easier for Google to rank and for AI agents to recommend. Leave with a practical roadmap to turn accessibility into your most effective, future-proof SEO strategy while honoring every user’s right to digital independence.
-
Secure-by-design: hardening plugins with PHP 8.x
In the WordPress ecosystem, we are often forced to choose between supporting the “lowest common denominator” of hosting and implementing modern security. But in 2026, writing legacy PHP 7 code isn’t just a bad habit, it’s an active invitation for automated exploitation. It’s time to stop playing “whack-a-mole” with sanitization and start building products that are secure by design.
This talk isn’t just another slide deck on security tips, through comparisons of a Vulnerability Lab plugin, you will see how common exploits like authentication bypass and Server Side Request Forgery succeed on legacy code, only to be neutralized by the native shields of the latest PHP. You will learn how to leverage the modern PHP patterns to ensure your plugins are resilient to a wide range of exploits.
-
AI search: why your whole company should care
AI Search isn’t just SEO’s problem anymore – it’s everyone’s. From content teams to developers, PPC to partnerships, the shift to AI-native discovery affects your entire business. This session is your wake-up call: why you’re probably already behind, what’s changed, and the quick wins you can implement now to catch up.
-
Panel: the future of SEO
Search is no longer a single discipline. As AI-generated answers reshape how people find information online, SEO practitioners are being asked a new question: are you optimising for search engines, or for the models that are increasingly answering in their place?
This panel brings together practitioners and strategists to tackle the defining tension in digital visibility right now: The shift from SEO to GEO (Is it really a thing?), and what that means for WordPress builders, content creators, and business owners who depend on organic traffic.
-
WordPress for scientists: building engineering websites at CERN
How do you scale WordPress across multiple teams without losing consistency or control? This talk shares lessons from building and maintaining eight WordPress websites for a large scientific organisation, focusing on workflow, governance and long-term sustainability.
-
Stop positioning into obscurity to unlock growth
In this session we explore why product marketers fail to drive revenue and product adoption despite doing everything they are expected to in a textbook perfect way.
-
Build your developer portfolio: a hands-on guide to FSE
Full Site Editing isn’t just for DIY users—it is a powerful architectural tool for professionals. Join this workshop to master the lifecycle of a modern Block Theme. We will build a portfolio site to showcase your work, focusing on three core skills: scaffolding with the Create Block Theme plugin, configuring design systems via theme.json, and implementing governance (locking APIs) to protect your design. Leave with a working theme and a repeatable workflow for your next client project.
-
The new engineer: psychology, systems, and open source
How do we educate students for an AI-disrupted IT market without endlessly chasing the next tool? This talk presents a practical model: combine durable soft skills with strong technical foundations, teach through real problems, and use open source – especially WordPress – as a “living lab” where students build, ship, and contribute through structured programs like Campus Connect, WordPress Credits, and Student Clubs.
-
Building dynamic gallery experiences with WordPress Interactivity API
Take your block development skills to the next level! In this hands-on workshop, you’ll build a fully functional, touch-enabled gallery slider using the WordPress Interactivity API (IAPI)—the modern standard for adding dynamic, reactive experiences to WordPress blocks.
What You’ll Build:
A production-ready gallery slider featuring slide navigation, infinite carousel mode, auto-play, and mobile swipe gestures—all powered by reactive state management.
What You’ll Learn:
- Core IAPI concepts: stores, state, context, directives, actions, and callbacks
- How to extend WordPress core blocks with interactivity using PHP filters
- Adding editor controls for user-configurable settings
- Implementing touch event handling for mobile-friendly experiences
Who Should Attend:
WordPress plugin and theme developers comfortable with block development basics who want to create richer, more interactive user experiences without relying on external JavaScript frameworks.
You’ll Leave With:
Working code, a deeper understanding of the Interactivity API, and practical patterns you can apply to your own projects immediately.
👉 Bring your laptop and be ready to code!
-
What it (really) means to be a part of the WP Credits program?
The WP Credits program is often described as a way for students to “learn WordPress while contributing to the community.” And, while this is all true – it’s not the whole story.
In this talk, Ivana (a long-time marketer and WordPress professional, accepted mentor and someone deeply involved in this industry), will share her looks at WP Credits from three perspectives: students, universities and businesses supporting the program. Is it only about WordPress or is there another, bigger picture and all-parties gain from participating in this and projects alike? Why you as a business should join? How does this initiative work and what comes as the benefit for all parties involved? These are some of the questions Ivana will answer, pinpointing it to the factual, practical value WP Credits creates beyond WordPress skills. You’ll leave with a clear understanding of how the program works in practice, what students actually gain, what universities get and why businesses should see WP Credits as a long-term investment.
-
Three levels of atomic product-market fit
Most teams think they’ve found product-market fit when they hit one good metric, like downloads, signups, or initial sales. But real PMF happens at three levels simultaneously: macro (market-wide value), meso (features and services), and micro (interactions, moments, and experiences).
PMF can be fleeting. You celebrate validating it, but months later, users have disappeared, and you wonder what went wrong. Teams are surprised when users hate the new feature, utilisation is low, or complaints are high.
This session will teach my new Atomic PMF model. Learn what tends to block finding and keeping PMF, and how to better convert and retain your target audiences.
Atomic PMF: If your company likes failure, they’re really going to love success!
Perfect for: Entrepreneurs, freelancers, strategists, startup teams, and Fortune 500 workers and leaders. This isn’t an all-or-nothing framework; take what works for your context, use it as a starting point, and evolve it.
-
Sovereign university AI tutors powered by WordPress
Can universities own their AI future? Discover how Karlstad University uses WordPress Multisite to create customized, pedagogically aligned AI tutors. By combining the power of WordPress with Open Educational Resources (OERs), this project avoids vendor lock-in and ensures institutional control over data and model behavior. Learn how the same open-source tools we use for blogging can serve as the “knowledge substrate” for the next generation of trustworthy, ethical AI assistants in higher education.
-
AI won’t save your marketing (but it might save your time and money)
AI won’t fix a weak strategy; it will just amplify what you already have. This talk explores why some businesses see real results while others produce more of what wasn’t working, and how small businesses can use AI as an equaliser without losing what makes them different.
-
Build your first AI-powered WordPress plugin
So you’ve heard about the WordPress Core AI projects. Maybe you’ve read the blog posts, skimmed the GitHub repositories, or watched a talk about what’s coming. But there’s a massive difference between understanding something conceptually and actually building with it. If that’s the case, then this workshop is for you.
In this workshop, you’ll learn to build a working AI-powered WordPress plugin from scratch. You’ll leave with functioning code on your laptop and a solid understanding of how each of these tools works, so you can start experimenting on your own.
What we’ll build:
We’re going to create a plugin that registers custom abilities, exposes them via the Model Context Protocol, and uses the WP AI Client to add intelligent behaviour. By the end, you’ll have a plugin that lets an AI assistant interact with your WordPress site—discovering what’s possible and taking actions on your behalf.
Prerequisites:
- A laptop with a local WordPress development environment that you are familiar with (I’ll be using WordPress Studio)
- Familiarity with WordPress plugin development, PHP, and JavaScript
- Composer and Node.js are installed and working, the latest stable versions
- An API key from one of the following AI model providers: Google, Anthropic, OpenAI (You can register one for free via Google AI Studio)
- If you prefer not to register an API Key with one of these providers, you can also install Ollama and a local model of your choice. However, that model must support the ability to read image files.
- One of the following MCP-compatible agentic AI applications: Claude Desktop, VS Code with GitHub Copilot, or Cursor
- Claude Code is also acceptable if you use that.
- You may use your own MCP-compatible AI agent, but I won’t be able to support you if things go wrong. The patience to troubleshoot if things don’t work the first time (they rarely do, and that’s part of learning)
Fair warning: once you see an AI assistant execute an ability you wrote yourself, you’ll probably spend the rest of the weekend thinking of things to build. Don’t say I didn’t warn you.
-
Panel: rethinking learning in WordPress
WordPress is currently preparing several changes around learning and contributor onboarding. In this conversation, Mary Hubbard (Executive Director of WordPress), Benjamin Zekavica (Core Team Rep), Rade Jekic (Training Team Rep), Natalia Basiura, and Klaus Harris discuss the programs currently in progress. This includes new contributor pathways, simpler onboarding steps, and the first university partnerships to connect WordPress with academic learning.
The session looks at how new contributors can get started more easily, how people who stepped away can find a way back, and which skills will be important for working with WordPress in the coming years. It also gives a look into the internal work aimed at making learning and contribution more structured and accessible across the project.
-
Nobody knows what you know (and that’s your problem)
You’re good at what you do—but nobody knows it. This is the expertise-visibility gap, and it’s the reason talented WordPress professionals stay stuck at the same level while others land bigger clients, charge higher rates, and work on exciting projects.
Being good at what you do is not enough. The WordPress market is crowded. Clients can’t tell the difference between a 10-year veteran and someone who finished a course last month. Unless you make that difference visible.
In this talk, learn the three visibility channels that actually build thought leadership, the types of content that position you as an expert, and how to identify your “Remarkable Content Angles”—the perspectives that make you the obvious choice for the right kind of clients.
-
Do you really need an SEO/GEO plugin for WordPress?
Plugins help us in many ways, especially SEO plugins. I’m not a denier, but sometimes we forget that WordPress is there, and that it has lots of native tools and features with an impressive range of things you can do, completely with WordPress, without any plugins, to improve—or even destroy—a website’s SEO and GEO. From comment settings to how to use the block editor for positioning and brand presence, there is a lot to do, and in this workshop, I want attendees to get the most out of WordPress to position their content, without installing any plugins.
-
The hidden DDoS threat in WordPress: abusing the search endpoint
Discover how attackers weaponize WordPress native search endpoint for devastating DDoS attacks, while learning practical defense strategies from a cybersecurity perspective. This talk reveals a hidden vulnerability in standard WordPress installations and provides easy solutions.
-
50 shades of cache: a WooCommerce deep dive
Caching in WooCommerce isn’t one thing; it’s fifty. In this hands-on workshop, we demystify the full spectrum of WordPress and WooCommerce caching layers: OPcache, server-level cache, page/HTML cache, object cache, and WooCommerce-specific caching quirks. No theory for theory’s sake – we’ll walk through real examples, debug common cache misses, and show live demos of how each layer impacts performance, stability, and TTFB.
-
NIS2 incident report in 10 minutes
NIS2 puts an incident on a clock. If a client is affected, an early warning is due within 24 hours, a full notification within 72 hours, and a final report within 30 days. Most small WordPress agencies and freelancers are not in scope themselves, but their clients are, and the supply chain rules pull us in anyway. This 10-minute lightning talk walks through that reporting workflow from a small agency’s point of view: what counts as an incident, what to have ready before anything breaks, and the five steps from detection to the 30-day report. It also shows where AI can help.
-
Why WordPress feels overwhelming for beginners
One of the most common questions beginners ask is: ‘What should I install?’
Themes.
Plugins.
Builders.
Security tools.
SEO tools.
And the most honest answer is often: “It depends.”
For experienced users, “it depends” feels normal.
For beginners, it feels paralyzing.
Because when everything is an option, every choice feels risky.
Choosing the wrong theme feels like wasting time.
Choosing the wrong plugin feels dangerous.
Choosing wrong feels permanent.
In this talk, I want to explore a simple idea: the same freedom that makes WordPress powerful can also make it overwhelming for people just starting out. And when choice becomes pressure, learning slows down.
-
Headless WordPress API security in 10 minutes
Learn the five steps to design secure headless WordPress architectures. This talk focuses on API-first security, attack surface reduction, and practical decisions when exposing WordPress APIs to mobile apps and PWAs.
-
Documentation as a love language for the future you
You know that thing you do perfectly every time but can’t explain to anyone else?
That client onboarding process you’ve refined over the years. That troubleshooting approach that just “makes sense” to you. That way, you organize projects that work beautifully in your head.
Now imagine someone asks, “Can you show me how you do that?”
And you freeze. Because you genuinely don’t know where to start.
This is the documentation gap.
The space between what you know and what you can transfer. And it costs us more than we realize, especially in time spent redoing work, in knowledge that walks out the door when people leave, and in contributions we never make because “it’s too hard to explain.”
This lightning talk is about closing that gap. Not with perfect documentation that takes forever to create, but with simple frameworks that make your knowledge accessible.
You’ll learn:
- Why documentation is strategic, not overhead
- A 10-minute template for capturing what matters
- How to decide what’s worth documenting (and what isn’t)
- Real examples from the WordPress community contribution
Documentation isn’t about being a better writer. It’s about being better at giving your future self (and everyone who comes after you) what they need to succeed.
Come ready to take notes. You’ll leave with something you can implement today.
-
Improving the performance of the WordPress Query classes
The WordPress Performance team was established in 2021 with the goal of improving the performance of WordPress Core. As a fundamental part of rendering each and every page of a WordPress site, the `WP_Query` class has received a lot of attention.
In this talk, Peter will discuss how the performance of `WP_Query` and the WordPress Query component have been improved with increased caching, and how that can be taken full advantage of when building WordPress sites at scale.
-
The AI-first WordPress site: crawler to citation
AI platforms generated 1.13 billion referral visits by mid-2025, yet most WordPress sites aren’t ready. This practical session covers the complete AI optimization stack: strategic robots.txt configuration, structured data for AI comprehension, content patterns that earn citations, and measuring AI visibility. Leave with an actionable checklist to make your WordPress site AI-ready today.
-
Next gen builders: student WordPress showcases
Three Kraków institutions, one stage. Students from Kraków University of Technology, Kraków University of Economics, and VIII LO high school present the WordPress projects they’ve developed throughout the year. A celebration of learning, creativity, and what’s possible when young people get hands-on with open source.
-
Testing the promise: does secure hosting deliver?
“Secure hosting” is everywhere in WordPress, but what does it actually protect against? We put this claim to the test with real penetration testing: 30 known vulnerabilities, multiple hosting providers, standardized methodology validated by independent observers.
The findings reveal a critical gap between marketing and reality. WordPress-specific attacks succeed most of the time.
This talk shares the complete results and explains why generic security fails.
-
The fight for the open web is a lie
For decades, open source advocates and Internet purists have rallied behind a righteous call: “we must fight to preserve the open web.”
That rallying cry is all wrong. The web itself remains as open as the day Tim Berners-Lee created it – built on patent-free standards, decentralized architecture, and universal access. Yet today, billions of users have been conditioned into believing the opposite is true, unknowingly abandoning and surrendering openness in favor of convenience in the form of walled gardens, proprietary apps, and centralized services.
In reality, we’re not losing the open web – we’re losing the battle against closed alternatives trying to replace it.
Open source projects like WordPress have long championed the technologies built on open web standards that have powered the web from the very beginning. The project and surrounding ecosystem exemplifies what the web is meant to be: open by default. Let’s explore how WordPress continues to embrace the true spirit of the Internet and identify the real enemy: the closed web that seeks to replace the web’s open foundation.
-
Fireside chat
WordCamp Europe 2026 in Kraków closed with a fireside chat between Mary Hubbard, Executive Director of WordPress, Matías Ventura, lead of the Gutenberg project, and Rich Tabor, a WordPress designer and developer. After a celebration of WordPress in education, including a new WordPress course launching this October at Kraków University of Technology, the three discuss WordPress 7.0 and the future of WordPress in the age of AI: how to build with AI while keeping the human experience at the center, what it means for the editor and the role of the CMS, and why open-source values should help shape AI itself. Matías also shares live, in-progress experiments that reimagine the WordPress admin, and the session closes with audience questions on AI, multilingual support, open source, and bringing new generations into the project.


