WordPress terms — explained clearly.

Test two versions of a page or element against each other and let the one with the better metrics win.

Percentage of visitors who leave the website after viewing only one page.

A strong encryption standard that ensures backups are stored in a format that is unreadable to third parties.

The text a screen reader reads out instead of the image and the browser shows when the image does not load. A purely decorative image carries an explicitly empty one.

Scheduled backups that run in the background without any manual intervention.

An image format that is smaller than JPEG and WebP at the same quality. Creating it takes considerably more processing time.

Systematically querying user IDs to obtain valid login names. Author addresses and the REST interface often give them away.

A number from 0 to 10 dating back to WordPress 2.0, dropped in 2010 — still read by old plugins and themes today.

Link whose target can no longer be reached. Instead of the expected page, an error message comes back.

Login attempts in series until a password fits. This can be slowed down with an upper limit for failed attempts.

A single permission in WordPress, such as edit_posts. A role is nothing but a named bundle of them.

U.S. data protection laws (California) that give users rights regarding their data.

Server network that delivers images, CSS and JavaScript from close to the visitor instead of from your own web server.

Google's signalling mode that fires tags anonymously or in full depending on consent.

A signed block in the image file that states what it was created with and what happened to it afterwards. It does not say “AI” by itself — it also records that an image was taken with a camera.

Header with which a page tells the browser which content it may load and execute.

Percentage of visitors who achieve a specific goal—such as making a purchase.

A notice that requests consent before setting non-essential cookies.

Web analytics without cookies or personal data—and without any banners.

Clicking on an element that doesn't respond — a sign of confusion or an error.

Duplicate data is stored only once—this saves storage space.

Confirmation process: A newsletter subscription is verified by clicking a link in an email.

EU General Data Protection Regulation — governs the processing of personal data.

The same file, byte for byte, under several entries in the media library — usually the same logo, uploaded more than once. You decide which entry stays; the others may be in use in posts.

The capture details of an image file: manufacturer, model, exposure time, aperture. They speak against pure AI generation — proof they are not, because editing programs carry them over from the original.

A multi-step path (e.g., shopping cart → purchase) that shows where users drop off.

Banner rules based on the visitor's country of origin or region.

A cryptographic signature that verifies the authenticity of a backup.

Color visualization showing where users click, move, and scroll on a page.

An industry framework that standardizes the transfer of consent to advertising partners.

A rule for who may see a post. Blocked requests answer with 403, not 200 — otherwise the notice text ends up in the search index.

Backs up only the changes made since the last backup—quickly and with minimal storage space.

The field Iptc4xmpExt:DigitalSourceType. If it holds the value for “created with generative AI”, that is the clearest statement an image file can make about itself — a self-declaration by its creator.

Format for structured data that sits in the source as its own data block alongside the visible content.

An image produced by an image generator. Whether you have one can only be established from a file if someone wrote it in there — the image content itself does not show it reliably.

Content shifting around while the page loads — usually because an image without size attributes only claims its space later.

Images and iframes only load once they come into view, not already while the page is being built.

Several roles on one user. The permissions add up: they may do anything at least one of their roles may do.

Short text in the source that search engines can show under the title of a search result.

Text that sits in the file alongside the pixels: capture details, author, provenance, and with image generators the whole parameter block as well. It is lost when cropping and is stripped by many platforms on upload.

Moving a website to a new domain or server.

Comments and superfluous whitespace drop out of the source without the rendering changing.

A WordPress network that manages multiple websites under a single installation.

Meta tags from which social networks build the preview of a shared link: title, text and image.

An assignment of files in the database instead of a directory on the disk. No file moves, and no image address changes.

Value calculated from the content of a file. If it deviates from the expected value, the file has been changed.

Rapid, repeated clicks out of frustration—a sign of broken or slow elements.

A table of every capability per role. A tick writes the permission straight into wp_user_roles and applies everywhere at once.

Restoring a website from a backup — with KakapoWP, it takes just one click.

File in the root directory that tells crawlers which areas they may fetch — and where the sitemap is.

A named bundle of capabilities. WordPress ships five; your own can be created, cloned and restored.

Scripts such as trackers are loaded only after consent has been given.

Measures how far visitors scroll down a page.

Pre-built HTML that is delivered instead of building the page anew. Logged-in visitors still get fresh pages.

A user's continuous visit within a time window.

Database commands are injected through an input field or a URL.

A secure test copy of the website for trying out changes without any risk.

German Telecommunications, Telemedia, and Data Protection Act; regulates, among other things, the use of cookies.

Cache lifetime of a cached piece of content. Once it has expired, the page is rebuilt.

Tags on links that let analytics attribute campaign sources correctly.

An image file in the uploads folder that has no entry in the media library — left over from incomplete deletions or old plugins, sometimes uploaded by hand. Because there is no entry, there is no trash either: whoever deletes it deletes it for good.

An image format that is around 30 % smaller than JPEG at the same quality. Every common browser has understood it since 2020.

Deliver plugins under your own brand—with your own logo, name, and colors.

Write once, read many: Backups can no longer be modified or deleted.

Machine-readable list of all a website's addresses so that search engines miss nothing.

A metadata packet in XML format, embedded in the image file. Among other things it holds the tool that created the file and the IPTC provenance field.

A second proof in addition to the password — for example a code delivered at login.