Black Hat SEO: How Criminals Can Hijack Your WordPress Site
24.476 versteckte Spam-Einträge in einem Handwerks-Shop — unsichtbar für Besucher, sichtbar für Google. Wie Black Hat SEO funktioniert und woran du es erkennst.
// blog
We write about what we build for B2B mid-market companies every day: TYPO3, WordPress and data-driven SEO. Honest, technically sound, no funnel.
24.476 versteckte Spam-Einträge in einem Handwerks-Shop — unsichtbar für Besucher, sichtbar für Google. Wie Black Hat SEO funktioniert und woran du es erkennst.
On June 9, 2026, 14 TYPO3 security advisories were issued, 5 of which were high-severity. What’s really dangerous, who’s affected, and your 4-step plan for updating.
TYPO3 v14.3 will be released as a Long-Term Support (LTS) version on April 21, 2026. Nine days later, free support for TYPO3 v12 will end. These are two dates that are relevant for every company with a TYPO3 website. Here’s what you need to do now. What happens on April 21? TYPO3 v14.3 LTS will be officially released on April 21, 2026, at […]
Security Alert for TYPO3 14.2.0: Here's exactly what you need to do to ensure the update and cleanup go smoothly.
The BFSG has been in effect since June 2025. We explain who it affects, what it costs, and how you can make your website accessible.
In a nutshell: The March 2026 Google Core Update was completed on April 8. We’ve analyzed several client websites over the past three weeks and see a clear pattern: Sites with poor Core Web Vitals have lost visibility. Sites with good scores have gained ground. This isn’t new. What is new is […]
In a nutshell: What B2B companies actually outsource A WordPress website that hasn’t been updated in two years seems to work at first glance. Until it doesn’t. We see this regularly in projects: company websites with outdated plugins, missing backups, and an owner who can’t remember the last time they logged into the backend. Maintenance is […]
Key Points at a Glance A critical vulnerability (CVE-2026-8206, CVSS 9.8) in the WordPress plugin Kirki allows unauthorized takeover of admin accounts. Versions 6.0.0 through 6.0.6 are affected. On June 2, 2026, Wordfence recorded over 222 attack attempts within 24 hours. Update to version 6
Starting April 9, 2026, WordPress 7.0 will require at least PHP 7.4 — SMEs using shared hosting with PHP 7.2 or 7.3 risk update errors and downtime. The cost of a clean major update ranges from €1,000 to €5,000, depending on the number of plugins and the complexity of the theme. We’ll show you what to check before the release and where hidden cost drivers lurk.
Mobile-first and responsive design sound similar, but they are two fundamentally different concepts. If you confuse the two, you’ll end up with a website that doesn’t look great on any device. We’ll explain the difference using real-world examples and show you why mobile-first should be the standard for new SME projects in 2026.
Third-party scripts like Google Tag Manager, chat widgets, and tracking pixels are the most common cause of poor Core Web Vitals in WordPress. Often, they can be loaded lazily or conditionally without losing functionality. We’ll show you which scripts you really need, which ones can be removed, and how to integrate them without compromising performance.
GZIP compression cuts the amount of data transferred by half for most websites—improving both load times and Core Web Vitals in one go. However, it isn’t enabled by many hosting providers. We’ll show you step by step how to enable GZIP via .htaccess or your hosting control panel and measure its impact.