Skip to content LFW - Audit findings Your media library is public The media library is not a private folder, in WordPress or anywhere else. Here is how to keep uploaded drafts private without switching off the API or breaking links.
Leland Fiegel· 3 minutes - Audit findings Phones download your desktop images Why a 2.6 MB hero image reaches a phone that needs 33 KB, and how srcset, sizes and WebP let the browser download only what the screen needs. Leland Fiegel· 5 minutes
- Audit findings Why the page jumps while it loads Why a page jumps while it loads and why visitors read that as a broken site. The usual causes are few, from images without dimensions to late banners, and each has an exact fix. Leland Fiegel· 4 minutes
- Audit findings Why the page is blank for a second When a page stays white for a second, the browser is usually waiting on a stylesheet, a font or a script in the wrong place. Three changes end the wait on most sites. Leland Fiegel· 4 minutes
- Audit findings Embedding video without breaking accessibility A pasted YouTube link arrives with no name for screen readers and often no captions. Here is what an embedded video needs and how to add it without touching the video. Leland Fiegel· 3 minutes
- Audit findings One color value: fixing contrast without a redesign Light gray text on white is the most common accessibility finding there is, and the fix is usually one color value in the theme's palette. Leland Fiegel· 3 minutes
- Audit findings Login names are half a login By default, WordPress lists every author's login name for anyone who asks, so attackers only have to guess the passwords. Four changes close the list without locking anyone out. Leland Fiegel· 3 minutes
- Audit findings What a stranger learns about your site in one minute What a curious visitor, a vendor or an unfriendly scanner can read about your website in about a minute, and how the free audit runs the same checks for you. Leland Fiegel· 4 minutes
- Audit findings The four files nobody links to Every website has four plain-text files no visitor sees, from robots.txt to llms.txt. Search engines, security scanners and AI agents check them before anything else. Leland Fiegel· 6 minutes