On the last count, there were easily more than a billion websites on the Internet. Over a third of those websites are powered by the leading key platforms: WordPress, Joomla, Drupal, and Magento.
Of those, more than 60% of websites are on WordPress alone. Now, Sucuri found more than 11,000+ infected websites of which 75% of the websites were on WordPress. At least 50% of those infected websites were out of data (and not updated).
WordPress dominates a large percentage of total infected websites (77%), and as we write this, more vulnerabilities are being uncovered everyday.
Note: RevSlider Plugin, Gravity Forms, and Tim Thumb have been the culprits when it comes to causing compromises for WordPress websites.
On another note, Malware is often the type of problem that goes unnoticed until you really have to. More than 66% of all compromises had a PHP-based Backdoor hidden in the site. On an average, more than 132 files per compromised site were fished out by Sucuri.
If you use WordPress, you ought to be careful. Active management plays a key role to ensure that your site is safe.
But then, you have some housekeeping to do.
Pick Hosting with Care
It’s understandable that you’d jump at the next shared hosting offer you get your hands on, but watch what you pick.
Your choice of hosting determines the foundation you’d give for your business. It wasn’t easy for me to change my host but when I did, I really saw the difference.
Web hosts like WPEngine & Flywheel help with active hacker control, malware protection, robust security technology stack, CDN, and more to keep your WordPress site secure.
Plus, you also get “staging areas” so that you don’t mess around with plugin and theme updates on a live site.
Please Update Your Site. How Hard Is That?
WordPress websites get affected because you don’t bother to update to the newest, stable version of WordPress.
Use WPEngine or Flywheel, and this is automatically taken care of for you. If you aren’t, the responsibility lies on your shoulders. While you are at it, delete themes and plugins you don’t use.
Just keeping your WordPress core, themes, and plugins goes a long way to keep out trash hitting the website more often than not.
WordPress Login URL. Change it.
When you login to WordPress, the usual URL is http://myawesomewebsite.com/wp-login/.
That’s got to change.
Everyone knows that.
Use a plugin like Custom Login URL (CLU) or WPS Hide Login and change the URL to something else altogether (name it Wendy?) and then never share it with anyone except your team.
Limit Login Attempts
Limit Login Attempts Plugin adds a layer of security. Install this plugin when when you install WordPress. Limit Login Attempts limits your attempts to login and that takes care of hackers who have nothing better to do that to try to login to your site multiple times
It also keeps out bots and acts as front line defense by using automated prevention for brute force attacks.
Change WordPress Default Database
This step is only recommended if your website is a new WordPress Install. Changing the default database prefix could be disastrous and affect your entire website (or even kill it). I know, because it happened to me.
The generic WordPress database which looks something WP_XX is also a well known route to hack through to your website. Instead of using this generic database prefix, customize it to anything else you like such as KL_XXX or WL_XX or whatever.
Get Security for WordPress
Trouble with things like security and i
nsurance is that the importance doesn’t come to light unless disaster strikes. By then, it’s usually too late.
Pick up plugins like Sucuri to make sure you build a fortress around your WordPress website. Sucuri protects your website from DDoS and brute force attacks, multiple infections and reinfections, and stops hackers in their tracks from their attempts to exploit vulnerabilities.
Say No to random theme or plugin
Brenda Barron of WPMU Dev Blog reveals that out of the ten most vulnerable plugins, five of those plugins were commercial plugins available for purchase
If purchased plugins were crappy, how would the “free” ones be?
The WordPress Core itself is stable (Automattic takes care of that) but anything else you bring home to your WordPress website is your responsibility.
Test out plugins you purchase (or download) first and then push it to the live site. Get hosted with Flywheel or WPEngine if you want staging functionality.
How secure is your WordPress?
Over 60 million websites run on WordPress, accounting for 23% of the Internet.
For many users, WordPress is a popular CMS owing to the huge community around the platform, plugins, managed hosting solutions, and thousands of good themes to choose from.
But you’d often see users getting frustrated with WordPress. When I started building websites, I’ve had numerous issues with WordPress too.
To the point that I wanted to abandon it and go for simple HTML/CSS options.
As a result, there’s a rallying cry on the Internet about how WordPress sucks (While there’s an equally passionate group of developers, WordPress enthusiasts, and WordPress users).
In the last 8 years that I had websites running on WordPress, three of our websites got hacked at least 4 times each. This particular website itself saw many iterations to this day.
I have to admit: I think it was our fault that it all happened. WordPress is what it is.
We neglected. We didn’t bother to make sure our WordPress websites load quickly, stay secure, and are built like fortresses.
We recently redesigned ur website and just when we thought we were done (and that we could focus on content marketing), I had a view visitors giving me a heads up that this website had instances of Malware and that it was infected.
That was when we went into an overdrive to secure the website. Here’s what we did (and we believe you should do it too, like right now):
Delete Old Themes & Plugins, Right Now
A basic scan (after I got the Malware alerts) revealed that almost all of the malware, vulnerable scripts, and potentially threatening files came from old themes and plugins that were just lying there on the server.
While we weren’t using any of those themes and plugins, we didn’t bother updating them.
As a result, those themes and plugins were like carcasses attracting all sorts of vermin, worms, and viruses.
Do yourself a favor: log into your dashboard and delete all plugins you don’t use. Plus, use FTP or SFTP and delete everything that shouldn’t belong there, off the server.
Thank you, Flywheel
Our Malware infection was clearly due to the old themes and plugins.
If it wasn’t for FlyWheel’s premium managed hosting that this site lives on, I believe I’d have seen a lot more disaster than what we experienced recently.
Thanks to FlyWheel’s battlefront setup and technology stack (using NGIX, PHP 7) along with their In-built Cache and Malware protection, it just saved our day.
Despite that, we sent them one email and they did everything they could to clean up our site with whatever remnants of unnecessary files that still lived on the server.
Read more about FlyWheel Now.
Cloudflare helps make your WordPress website load faster. Period.
In addition, CloudFlare acts as a mask between your main hosting account and your visitors’ server requests to your website.
CloudFlare automatically inserts its flagship CDN to help make your website load faster. Plus, it thwarts attempts by hackers to log in to your WordPress core, shows you stats on bad traffic, and reduces the file size that’s essentially dumped onto your visitors’ browsers.
CloudFlare, however, is very good at preventing DDOS attacks (and you may not need that just as yet). It also provides security options, traffic analysis, and helps you block traffic from bots and specific geographies.
Move the Login Screen
Most WordPress backend logins look something like this: httP;//yoursite.com/wp-admin/ and hackers know that.
As long as you don’t change this default setting, you are a sitting duck. Using a simple plugin like WPS Hide Login, you can rename the actual URL used for admin login (make sure you bookmark the URL or remember it).
After you activate the plugin, change the URL to something like
Change the database prefix
Note: It’s not recommended that you change database prefix on a live site. It almost certainly kills your website. If you still have to, make sure you do a backup and get professional help to help work on your database.
Normally, when you install WordPress, the database name begins with wp_
Again, everyone knows that and that makes your database vulnerable. Ideally, you should start with a new database prefix before (or while) installing WordPress. Here’s a great explanation by Jef Starr on how to do just that.
SSL looks good on your site whether or not you do eCommerce. Google counts SSL as a signal of trust and so do your users giving you a little SEO boost as well.
Morgan Ryan of FlyWheel has a simple explanation for why you need SSL for your WordPress site.
Our hosting already provides SSL for free. We had to upgrade, and it was a no-brainer for us. While it might not single-handedly fight harm, it’s at least one other layer of security.
Draw up a Schedule for WordPress Maintenance
WordPress isn’t “Set it and forget it”. The onus of responsibility is on us. We learned the hard way but we now realize the importance of drawing up a schedule for WordPress maintenance.
WordPress hosting solutions like Flywheel and WPEngine already do some of the work involved. If you are with shared hosting, you are on your own.
Create a schedule for the following:
- WordPress core updates
- Theme and plugin updates
- Daily Backups (or least regularly scheduled backups)
- Security scans and checks
- Deleting any set of files that you don’t use
- Content upkeep and maintenance (deleting unused images, etc)
If you don’t, you’ll eventually pay the price. Thankfully, we insured ourselves against most of the points above and we still aren’t perfect.
We are still prone to mistakes. Our website isn’t really secure yet. We don’t know what’s coming next.
That’s why it pays to care for your WordPress website.
How well do you maintain your WordPress site?
Speed (or the lack of it) kills any chances you might have to glean ROI out of your digital marketing efforts. More than half of web users abandon your website if it takes more than 2 seconds, according to a study by Akamai and Gomez.
More than 79% of shoppers will never return to your site to buy again and 44% of them would go out and tell the world about the shoddy experience they just had.
Despite the raging need for speed, more than 73% of mobile users encountered websites that are too slow to load. Even worse, a whopping 51% of them reported visiting websites that crashed, froze, or just showed up with an error, according to Sean Work of Kissmetrics.
Your page load speed determines the UX/UI feel of your website and leaves your customers with an impression (and that better be good). The speed of your website affects your SEO performance and how Google treats your website in search results.
There’s no denying it: if your website doesn’t load fast enough, it better not exist.
Here’s how you speed up your website.
Start With Managed WordPress Hosting
You are known by the web hosting you use. While it’s not easy to find the right host for your business, things are way better now than it used to be. Managed WordPress hosting should be your first pit stop. Out of all the options we know of, FlyWheel and WPEngine are the best.
There are certainly more options like CloudWays – a bridge-like solution that lets you setup hosting on DigitalOcean, AWS (Amazon Web Services), Google, and a few others. However, going on that route, you’d better know (or prepare to get your hands dirty with SSH, terminals, Putty, and managing servers on your own).
As a business owner, you don’t want more trouble than you’d need to put up with. Just pick one of the managed WordPress solutions and you get:
- World-class, Super-fast, Blazing Hosting specially built for WordPress.
- Built-in Caching and Optional CDN
- Staging Functionality (so that you can experiment and get adventurous and not risk taking your whole website down).
- Free SSL Certificate (Courtesy the amazing folks at Let’s Encrypt)
- A lot more space and Bandwidth
- Super customer support
When we moved to Flywheel (and did a few other things), we managed to get our own website load in exactly 0.6 seconds.
Read our previous FlyWheel Review.
Choose the right WordPress theme
There are a gazillion themes and plugins. Guess what? We recommend that you don’t even go anywhere near most of them. Here are a chosen few companies that you should trust when it comes to WordPress themes:
StudioPress – Pick any theme and you’ll never go wrong with their Genesis Framework.
FameThemes – We currently use their “Screenr” theme.
Themes from both these sources come as a refreshing change to the otherwise needlessly bulky crap that’s available out there.
For most purposes, these themes will do. If you are still itching to shop, go ahead and browse the ThemeForest Marketplace or TemplateMonster.
When you go there, you are on your own. Pick and choose with care.
Use a CDN for Faster WordPress Loading Speeds
If you are just looking to start, look no further than CloudFlare. You get to start completely for free and you are under no obligation to upgrade.
If you are looking for paid CDN services, CacheFly and MaxCDN are the best in the market. Pick your poison, but the point is that you’d have to use a CDN to maximize content deliver to your users globally.
Note: if you use Managed WordPress Hosting, you get CDN built-in depending on the account signup for.
The more scripts you use for your WordPress website, the slower your website is going to be. In fact, as Alex Iskold of ReadWrite puts it,
With multiple scripts posted right under the <head> tag or the <body> tag or both, there’s bound to be friction.
What this means is that it performs things sequentially and not concurrently (with the exception of Ajax calls).
- Load-balance requests
- Use standard libraries (but this is still not a complete solution)
For WordPress users, Fred Meyer of WPShout has a very detailed explanation of how they worked towards a faster loading WordPress site.
Minify & Compress Everything
CSS files, Images, and other content will all take up space and bandwidth. With most hosting platforms, that’s not the real issue. When these monsters start eating into your WordPress loading speed, that’s when trouble starts brewing.
Use plugins W3 Total Cache or WP SuperCache.
W3 Total Cache helps speed up your WordPress site right out of the box, with just a few tweaks. Enable Page Cache, deploy Browser Cache, follow a few other exact instructions, and you are good to go.
While you are at it, note that images are probably a big part of your blogging & content marketing efforts, and images are notorious for taking up space and slowing down your website.
WPMUDEV has Hummingbird and there are other plugins such as EWWW Image Optimizer.
For most websites, these steps above are more than enough to give you a good start. However, please note that working with WordPress to ensure fast loading time is never a “fix and forget” thing.
How fast is your website? Tell us all about your efforts to speed up your WordPress website.
If you are looking for regular help with WordPress maintenance and great hosting, talk to us.
There are three types of businesses: those that don’t have a website, those that have a run-of-the-mill, you-won’t-die-if-you-don’t-check-me-out website, and those that have websites that are like sales machines.
It’s the sales machines that we need. I’ve been on exactly 67 calls (including remote skype calls) pitching digital marketing and invariably, “the website” pops into the conversation.
Looking at the websites I saw, I am not happy. They are built for ego. They are built because they should exist. They are built without a purpose.
This hurts. Your websites can be hub of your inbound marketing strategy. They can literally be at the centre of your business. They can make you money, only if you let that website work for you.
Here are a few misconceptions about “your website” that’s costing you money:
I am cheap, and I use shared hosting
I believe that bootstrapping is the best thing for entrepreneurs. The sense of accomplishment and the pure ecstasy of making money from almost nothing is the true essence of entrepreneurship.
However, there’s a certain hair line divide between going cheap and doing things cheap enough that it can kill your business. Shared hosting destroys businesses (we know, because we were there). Shared hosting is cheap, and just as vulnerable. It’s susceptible to attacks, and malware.
With some incredible companies like FlyWheel and WPEngine, it’s a shame that you’d even consider using shared hosting anymore.
It’s there. My cousin designed it. It’s good
The average website bleeds money. It spits on opportunity that comes its way. Given the rise of DIY builders such as Weebly, SquareSpace, Webflow, and many others, not building a website that’s at least decent to look at is a shame.
Do us a favor and redesign your website. This time, use a DIY website builder since I guarantee that it’d have a better conversion rate than the one your cousin designed 12 years ago.
The Website is done with
Your website work is never completed, ever. You’d have the basic task of putting up a properly functioning, fast loading, robust website and then you’d need conversion rate optimization.
We have on one side a huge subset of website owners wondering what CRO is and there’s another 92% of them who believe that website personalization and optimization is one of the hardest tasks they ever had to do, according to eConsultancy’s CRO report
The Traffic Comes In
Just any traffic isn’t enough for you. Even if it’s focused traffic, over 97% of them would leave. What you need is engagement. You’d have to have a system closest to the capability of identifying visitors by name, if that’s possible.
Use tools like LiveChat to chat with visitors when they arrive and while they are there, use WebEngage to come up with all sorts of smart ways to engage with them.
What are you doing with your website? What kind of web design myths have you fallen prey to?
The WordPress universe is gigantic. It powers more than 60% of the sites on the web. The community reeks of love, the support is always there, and there’s a never-ending choice for Themes, plugins, frameworks, and scripts.
WordPress is good that way. For marketing, however, you’d need to look for something more specific. You’d need plugins that meet your marketing needs. You’d need plugins that pay you back.
Here are some of those WordPress Plugins for Marketing:
Unbounce for WordPress Plugin
Unbounce recently launched the much awaited Unbounce for WordPress plugin and it’s come to rule at the right time. Give the whopping number of WordPress users, landing pages stood in line asking for WordPress asylum for a long time now.
Unbounce my favorite builder for creating landing pages quickly and then integrating these landing pages into lead generation workflows and campaigns.
With the Unbounce for WordPress plugin, Unbounce has truly bought the platform to life.
Consider this: you are about to launch your business and your website is in the making. Let’s assume that it’d take you a month for the website to go live. What lives on the domain until then?
A 404 page?
Or a plain “coming soon” page with nothing else on it?
Your “coming soon” or “launching soon” or “Wait till we go online, you impatient squirrel” pages are digital real estate and they still have the potential to get you leads.
How, you ask? Use SeedProd. It’s a must have WordPress plugin that helps you put up landing page lookalike of a “coming soon” page and also helps you collect leads with something like:
“Be the first know”
“Join the beta”
“Get exclusive first access”
I don’t have to tell you more than that.
Scribe For WordPress By RainMaker Media
Get an insanely cutting edge over your competition with the popular Scribe for WordPress by RainMaker Media.
Using data from Open Calais, Moz, Bing, Google, and many other sources, Scribe is like your little content marketing expert living inside your WordPress dashboard. It helps you with content evaluations, SEO analysis, keyword research, and tons of other things you’d need when you set out to blog or create content.
See Scribe In Action With WordPress
Mouseflow for WordPress
Mouseflow is a genius of a tool that records live sessions on your website. It’s not the recording that’s the “genious” part, although it’s cool. It’s the vast volume of insights you get just by looking at a live recoridng of what your visitor does on the website.
Where does she click?
How does she scroll?
Where does her attention go?
How does she move about on the site?
Plus, you also see:
How does my website look on different browsers?
What’s that thing there?
Hey, where’s the “about” page I wrote?
You can use Mouseflow by installing a piece of code. If you don’t want to do that, use the WordPress Plugin for Mouseflow.
Watch videos of your visitors browsing the site right now. Plus, get all the action on clicks, actions, movement, scrolls and more.
Yoast for SEO WordPress Plugin
No list is complete without Yoast’s popular SEO plugin. While WordPress is already built for SEO out of the package, Yoast plugin for SEO gives your WordPress god-like powers. All you have to do is to install it for free, set it up right, and make sure every blog post is optimized while publishing.
If that little dot next to the “SEO” status doesn’t show green, you don’t publish. Period.
Google Analytics Dashboard for WP
No marketing is worth the dollar (or the hour) you spend on it without analytics. The fact that you can measure, analyze, and keep tab on your traffic is the very essence of digital marketing.
Google Analytics should be your starting point for analytics. For WordPress, there’s the Google Analytics Dashboard for WP, which makes it easy for you to keep tab of your traffic, visitors, and daily sessions. Of course, the real meat is inside Google analytics and not on the numbers the plugin displays on your dashboard but this is good enough a teaser to give you those numbers you need.
All that blogging, social media management, email marketing, and hustling is no good if you have a WordPress machine vulnerable to hacks, attacks, and a ton of other things that you’d have to do just to keep your WordPress website going. This part, right here, is called foundational infrastructure – that something you need to stay alive.
WPGuards – a free plugin for WordPress – allows you some peace of mind. If you use wordpress, you know how you scramble to update plugins, do automated backups, monitor your uptime, do security scans, and more?
Stop doing that. Just install WpGuards.
What are your favorite WordPress plugins? Did I miss out on any noteworthy plugins? Please let me know and I’ll update this list.
WordPress powers more than 23% of the web (that takes it to a live count of about 60 million sites and counting), according to John-Henry Scherck & thanks to this infographic by WPEngine.
You’ll be able to see a real-time update of WordPress and its dominance of the web. How cool is that, eh?
While WordPress does have its flaws, it’s an easy and free (almost) CMS system that bloggers, entrepreneurs, and even major companies swear by. WordPress benefits far outweigh the negatives.
Here are reasons why WordPress is that good for your business:
Free and powerful, right out of the box
John Rampton of Entrepreneur.com lists at least 25 reasons why you should make the switch to WordPress. “Free” and “powerful, right out of the box” obviously top the list.
With a single click install and immediate plug-and-go capability, WordPress tops the list for immediacy, ease, and efficiency as far as CMS are concerned.
WordPress is Open Source. It’s Yours. It’ll Always Be
Your WordPress website is yours to keep at all times (including malware, suspicious files, affected plugins, and even the world’s crappiest themes you must have purchased).
You spend years writing, publishing, and distributing content. You’d then promote your business to the point that the world gets to know about you, and then poof.. the platform you thought was cool just goes out of business and you lose everything you ever built.
Have e-commerce functions bolted in? You’d certainly need bank-grade protection for everything that’s on your site. If any other platform goes out of business, your entire customer database is also wiped out.
Really? Do you want to depend on something else instead of owning and keeping a piece of software like WordPress forever?
Not Design, Sir. It’s About Conversions
The only thing that matters when you put up that website is whether or not that website gives you anything back in return.
- If it’s a blog, does it bring in monetizing opportunities for you? Do you make money off it?
- Does your ecommerce site make you money?
- Is your small business website positioned to get you noticed by potential stakeholders such as prospects, potential investors, candidates looking to work at your business?
In business, you ought to be looking for a return on your investment. To do that in this era of digital marketing would mean building and fostering a community of existing and future customers, to tie in that community with value, and to be able to give before you take.
In 2011, HubSpot released a survey where they found that 76% of users said that the most important factor in the design of a website was that “The website makes it easy for me to find what I want.”
Only 10% of users said,
…was the most important thing to them.
Peep Laja at ConversionXL.com, once said,
“Don’t design your own website. No, really. It will suck”.
“If you build your own site, it will be ugly and it will hurt your business. You will lose money. Every day will be a wasted opportunity.”
Design is the path you take for the purposes of marketing to make conversions happen.
No one cares if your website has a slider on it or not. Nor will anyone care if you are using this WordPress theme or that.
Don’t Be an expert at Web Design (Unless You Are Into web design)
There’s a reason why products like StudioPress (think of it as SquareSpace for WordPress)
Michael E.Gerber calls people who set up businesses around what they are exceptionally good at as “Technicians”. Unless you are a designer or developer, why do even bother tinkering with the technical side of things.
Entrepreneurship is all about getting smart. For your web presence, decide on WordPress and look for the best products available that can help decrease the demands on your time (or stress).
Marvin Russell of Moz.com writes:
Our clients will never learn the basic principles of web design and marketing like the laws of visual hierarchy, Occam’s Razor, negative space, form follows function, the laws of proximity. Our clients are lawyers, real estate agents, restaurant owners, bloggers, sales clerks, bar owners, car salesmen, and more.
Design should get you results. Experienced web developers who’ve worked with clients to build websites that are more like sales machines can do that.
Chip away at your design all you want, but you might not make the cut. Why?
There’s the question of design leading to conversions.
According to Peep Laja, his Lessons learnt from reviewing websites have a story to tell. Most websites don’t even come close to getting primed up for generating leads.
As such, that’s the most important thing that businesses need.
Get Help. Anytime
With WordPress, you have no shortage for help (which you’ll often need) from tons of “learn all about it yourself” self-help content on the wordpress official site, communities, blogs, and more.
Apart from that, you have forums and communities around WordPress that can jump in and help provide support when you need it the most. You have freelancers all the way to well-known communities such as WPMU Dev.
Further, you also have world’s best WordPress experts available on tap at SuperTasker or WPCurve.
If all you ever wanted was a web presence (because your friend and her friend has one), plenty of do it yourself website builders can do the job.
However, if you don’t intend to take the trouble of setting up the website, optimise the website to prep it for long-term lead generation, manage the website continuously, take regular backups, fix the websites when there’s an issue, and provide for bank-grade security, you should opt to keep your website on WordPress with a team of the best WordPress experts you can invest in.
Secure. If not, more secure
It’s true that WordPress takes security seriously. Of course, there are issues. There’s also the fact that since it’s popular, it also gets a lot of hacker attention.
WordPress releases updates regularly, battles its own vulnerabilities, and tries to cough out stable versions while providing for backup and recovery.
You don’t have to rest your case though. Using an all-inclusive WordPress hosting solution, you can setup reinforced security around your site.
Download my WordPress Checklist to know how to secure your site, even before you start with WordPress.
Feed the need for speed
Fast websites are moneymaking machines. The faster your site is the more you make. Plus, fast-loading websites make for incredibly good user experience and enhance your branding.
According to an Akamai release, more than 47% of users surveyed reported that they’d prefer websites to load in less than 2 seconds.
If you had to try to speed up a normal website, the process quickly gets out of hand for a typical I-can-add-a widget-and-write-a-blog-post kind of entrepreneur.
Thankfully, you have smart options with WordPress.
I listed at least 8 tools that can help speed up your website.
Specifically, you should start with an exclusive WordPress hosting with services such as WPEngine, for instance.
These hosting solutions feature highly scalable architecture, unlimited data transfer, CDN readiness (no need to look for another CDN service), international data centers, evercaching technology, firewalls, and malware scanning.
Talking about CDN, Ogi Djuraskovic and the team at First Site Guide have a fantastic guide on CDN and Tips to Find the best CDN for your website.
Say goodbye to web designers
You’ll still need WordPress experts to help customize your WordPress site. However, for most cases, do everything to do with WordPress by yourself.
Modern paid themes available at marketplaces such as ThemeForest have all the options you need to customize your site the way you want to.
All you have to do is to buy a theme that you think best fits your business, tweak your theme, and you are set to launch.
I’d highly recommend using StudioPress Sites — you get the best of StudioPress Themes, The Genesis Framework, Synthesis Hosting, and great support.
Need WordPress experts? You can find help at Upwork or People Per Hour.
Alternatively, get help from WPCurve, SuperTasker, or The Envato Marketplace
WordPress has everything going for it. How are you taking it?