
Hacked WordPress recovery
- Problem.
- Altered core files, hidden backdoors and rogue admin users.
- Solution.
- File-integrity diagnosis, user audit, clean reinstall, hardening.
- Result.
- 20+ sites recovered and hardened after cleanup.
Senior Web Developer · WordPress · PHP · Next.js
Fast, secure, easy-to-maintain websites, with performance that’s measured, not promised.


About me
For 8+ years I've built and maintained WordPress sites and stores in code: custom themes and plugins, WooCommerce, performance, technical SEO and security.
In recent projects I work daily with Next.js, React and Tailwind: I built two complete websites with Payload CMS and a custom CMS, and I'm part of the migration of dozens of sites from WordPress to Strapi + Next.js.
I also lead projects technically: setting quality standards, reviewing deliverables and supporting the team.
Expertise
Custom themes and plugins, WooCommerce hooks and checkout, integrations (Teams, Slack, PDF generation), REST API and WP-CLI.
Core Web Vitals and Lighthouse budgets, caching and WCAG accessibility, measured in Search Console, GA4 and Tag Manager.
Diagnosis of hacked sites, removal of malware and backdoors from files and database, and hardening after the cleanup.
Next.js, React and Tailwind in production: dozens of sites migrated from WordPress to Strapi, plus two sites on Payload and a custom CMS.
AI-assisted · Spec-driven
I use AI every day to build, refactor and debug faster. It works from a written spec that defines how it should work and which standards it must follow — and nothing ships without my review.
Daily tools
Scope, acceptance criteria and rules written before any code: WordPress Coding Standards, performance budgets, security and accessibility. The AI follows the spec, not a loose prompt.
Claude Code and Codex draft, refactor and investigate inside the IDE. I read every diff and test locally, then on staging.
Hours → minutes
Work that used to take hours now takes minutes with AI, and every change still goes through my review.
How every task ships
Experience
2026 — Now
Base theme scoring 90+ on PageSpeed, headless migration of dozens of sites to Strapi + Next.js, two Next.js websites, security recovery and technical leadership on projects.
2022 — 2026
Custom themes and plugins, WooCommerce builds and optimization, REST API integrations, performance and technical SEO.
2020 — 2022
Institutional sites, WordPress performance and SEO, legacy migration with PHP and REST.
2018 — 2020
Corporate portal in PHP and MySQL, responsive hotsites, SEO and WordPress training.
Stack & tools
Performance, security or a migration on the roadmap. I’d like to hear about it.